Effective date: May 25, 2018
This statement discloses the types of information collected when you visit attackpoint.org and all other web properties or services owned or operated by Attackpoint LLC (collectively, the "Website"), and how we use and safeguard your information.
Personal data means any information relating to an identified or identifiable natural person. We collect personal data about you:
Attackpoint processes your personal data in order to provide you with the services of the Website, and to further our legitimate interests, which include:
When you visit the Website, your browser automatically sends us your IP address and browser version information. We process this information for the purpose of monitoring the Website for problems and abuse. The legal basis for this processing is our legitimate interest in maintaining the function and security of the Website.
We process your username and password for the purpose of signing you into your account securely. The legal basis for this processing is our legitimate interest in maintaining the security of your account.
We process your name for the purposes of identifying your account. The legal basis for this processing is our legitimate interest in maintaining the security of your account and providing you with support.
We process your birthdate for the purpose of screening whether you are old enough to consent to the processing of your personal data. The legal basis for this processing is our legal obligation.
We process your email address if you request to reset your account password, or if we need to contact you about some problem with your account. We may also use your email address to associate your account if you contact us for support by email. The legal basis for this processing is our legitimate interest in maintaining the security of your account and providing support.
If you provide your opt-in consent, Attackpoint will processes your email address in order to send you notifications for the purpose you have specified, for example, to notify you when new splits are posted. The legal basis for this processing is your consent, which you may withdraw at any time by opting out.
If you provide your opt-in consent, Attackpoint will process your email address for the purpose of sending you marketing information about Attackpoint updates and features. The legal basis for this processing is your consent, which you may withdraw at any time by opting out.
You may optionally provide additional information about yourself in your account settings, including location information. This data is processed in order to personalize the Website for you. The legal basis for this processing is your consent, which you may withdraw at any time by removing this information from your profile.
You may optionally choose to share some of your profile information with other users of the Website, and if you do, we will process this information in order to display it to them. The legal basis for this processing is your consent, which you may withdraw at any time by changing your settings under Settings > Edit Profile.
You may optionally choose to provide your timing chip number. If you do, we will process this information to associate newly posted competition results with your account. The legal basis for this processing is your consent, which you may withdraw at any time by deleting your timing chip number from your account.
You may voluntarily add various types of content under your account (such as training entries, discussion messages, event schedules), which may be considered personal data. The purpose of processing this information is to organize and summarize this information for you, and if you choose, to share it with others (if you have elected to make it visible to others). The legal basis for this processing is your consent. You may withdraw your consent at any time by deleting this information from your account. You may review and update your sharing settings under Settings > Edit Permissions.
You may also record health data such as heart rate, weight, injuries, and illness in your training log. If you are located in the EEA, the legal basis for processing this data is your explicit consent.
When you upload activity data files or sync them to your account, we process the location information, and biometric data such as heart rate, cadence, and power output. If you are located in the EEA, the legal basis for processing this data is your explicit consent.
When race officials upload results from a competition in which you participated, we process your name and the timing chip number used in order to display and analyze the results on the Website. The legal basis for this processing is our legitimate interest in archiving the results of public athletic competitions, and providing you the option to associate the results with your account.
When you make a donation or payment to Attackpoint, your payment information is processed by Paypal or Stripe. Attackpoint does not process or store your credit card information. We do process receipt information from the transaction. The legal basis for this processing is Attackpoint's legal obligation to maintain accounting records.
Attackpoint may share aggregated anonymized data or statistics for research or commercial purposes.
Depending on your settings, some of your personal data may be visible to other Website visitors or search engines. You are urged to consider the risks and benefits before posting any information, and never publish critical personal data online.
Your private personal data is not shared or sold. It may be disclosed to governmental authorities when legally required to do so, or to a successor entity in connection with a corporate change including the Website.
Attackpoint is operated from the United States. If you access the Website from outside of the United States, you acknowledge that your personal data will be transferred, processed, and stored in the United States. We have appropriate security measures to guard against the loss, misuse, or alteration of the data we have collected about you.
We retain the personal data collected from you until you delete the data from your account or you delete your account. Your data will be removed from the Website immediately upon deletion but may remain on backup media for up to 60 days following deletion. In addition, copies of public web pages in third-party archives may remain indefinitely.
If you are located in the EEA, under the General Data Protection Regulation you have the right to request access, rectification, or erasure of your personal data. You have the right to data portability, restriction of processing and objection to processing your personal data. Where we rely on your consent to use your personal data, you may withdraw your consent at any time. You have the right to lodge a complaint with a supervisory authority.
Personal data collected by Attackpoint is controlled by Attackpoint LLC, 8008 Westover Rd, Bethesda MD 20814, USA
The Website is not targeted towards children and does not knowingly collect any information from children under the age of 13. Where the age of consent is higher than 13, we request that minors under the age of consent do not use the Website without the consent of a legal guardian, unless otherwise permitted by applicable law. If you are a minor and have such consent, you must be able to prove it upon request.
The Website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personal data.
The Website does not recognize or respond to browser-initiated Do Not Track signals.
If our information practices change at any point in the future, we will update this policy statement. We may also update this statement to improve its clarity. In case of material changes that directly impact your privacy, we will also post a prominent notification or message on the Website.