The privacy of our users and customers (“User/s”) is very important to us. For this reason, we hereby explain how we process the personal data of (i) each user registered on the BKOOL Platform with any of the current Plans ( Monthly Premium Subscription, Annual, or Family ("Registered User"); (ii) Owner of the Family Premium Subscription ("Administrator"); (iii) User invited by the Administrator ("Guest"); (iv) Website visitor ("Visitor") from our website ("Website"), in accordance with the General Data Protection Regulation ("GDPR") and all other applicable data protection regulations. All of them collectively referred to as "Users".
1. Data Controller
BKOOL, S.L. (hereinafter, "BKOOL") is the owner of this Website, whose corporate details can be consulted at Legal Notice.
BKOOL is responsible for the processing of the personal data provided by the User through the Website and assumes the commitment to protect the personal data of all persons with whom it deals, respecting the legal requirements regarding data protection and with maximum guarantees of confidentiality and security.
2. Processing of the User's personal data by BKOOL
| Purpose | Personal data collected | Legal basis | Retention |
|---|---|---|---|
| Registration of the Users at the BKOOL platform. | Name, surname, e-mail address. Users may also include their photograph if they wish to do so in their Profile¹. | Execution of the contractual relationship. | As long as the User maintains an active account on the Platform. BKOOL may review the personal data of its non-active Users and shall block their personal data when has been inactive for 24 months after. BKOOL shall retain the personal data indicated for as long as the account remains active. In the event that the User requests the deletion of the account, BKOOL will only keep the personal data in accordance with the terms established in the current legislation in order to face any legal liabilities that may arise from the use of the Platform. Once said legal deadlines have expired, they shall be definitively deleted from BKOOL's databases. |
| Purchase an Annual, Monthly, or Family Premium Subscription | Billing information (city, province, zip code) of the Administrator and User. | Execution of the contractual relationship | During the Subscription and for 5 years thereafter to deal with any incidents or legal liabilities that may arise from the Subscription. |
| To use the functionalities of the simulator. For example, when pairing devices with the simulator, such as BKOOL's own trainer or the Registered User's own heart rate sensor. The Registered User can also choose session types and routes for using the simulator, and the results of the different sessions are saved, if the Registered User chooses to save them. The Registered User can also choose to discard them. If the Registered User connects devices and applications to the simulator, BKOOL collects and processes the information provided by such devices. | Health data, which may be inferred from aspects such as heart rate, height, weight, age, weekly physical activity and other indicators provided by the devices themselves or entered manually by the User. Likewise, the User's location, if the device is configured to share such information or is provided by the User himself/herself, as well as the User's hardware information including Computer type, Operating System. | Consent | The data collected will be kept on for as long as the User's subscription is active. When the User unsubscribes, only the necessary data will be blocked during the legal limitation periods in order to attend to any liabilities that may arise from such processing. |
| To invite friends or add Guests in the Premium Family Subscription | Your friends' or guest e-mail addresses. | Consent You will need to make sure that your friend authorises you to provide us with their email address. |
BKOOL will delete such e-mails after sending the invitation or Guests of the Premium Family Subscription |
| To resolve any queries or incidents | E-mail address | Legitimate interest to resolve any questions and/or incidents and to provide an adequate service to the User. | For the time necessary to answer the question and/or solve the incident indicated by the Registered User. |
| Prevent, detect, and mitigate the fraudulent use in the Premium Family Subscription | IP of the registered device which accesses the Premium Family Subscription | Legitimate Interest with the purpose of protecting the BKOOL business against fraudulent and harmful activities that can be made by the Registered Users or Visitors | During the Premium Family Subscription and for 5 years thereafter blocked for processing any incident or legal liabilities that may arise therefrom. |
| Send commercial communications (newsletters). | E-mail address. | Consent² | The data collected will be retained until the User withdraw its consent. In the case of newsletters, the User can unsubscribe at any time through the unsubscribe mechanisms established in the communication itself. |
¹ The public profile is set to private by default and it is the User who can decide what personal information others can see, if the User wants other BKOOL Users to see his/her information. The User can also decide what information he/she shares with others, if he/she so wishes, such as rankings, leagues, groups, friends.
² The User has the option of withdrawing their consent to the processing of this personal data at any time. To do so, the User may exercise its right of withdrawal at any time by sending an email or post to the addresses indicated in section 5 of this Privacy Policy. Even if the User opts out of receiving promotional communications, the User may still receive non-promotional emails and other types of communications, as permitted by law, such as emails or other service communications, including by electronic means, related to the ongoing relationship (i.e. booking reminders, billing, etc.).
3. Communications to third parties by BKOOL
The use of the services provided by BKOOL may entail the communication of the User's data to third party suppliers of BKOOL such as payment gateway providers, hosting providers, data analytics services, which may be located outside the EEA, under contracts that provide the required guarantees, such as the so-called Standard Contractual Clauses approved by the European Commission.
Thus, in the event that the User chooses to pay by card, the card data will be stored by the payment providers who are responsible for storing such data in a secure manner that meets the security standards required by BKOOL.
BKOOL's use and transfer of information received from the Google APIs to any other application shall be in accordance with the Google API Services User Data Policy, including the limited use requirements.
4. Security measures
BKOOL undertakes to adopt the necessary technical and organisational measures in accordance with the regulations in force to ensure the security of personal data and to prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised communication or access thereto. Personal data shall be processed as confidential by the controller, who undertakes to inform and to ensure by means of a legal or contractual obligation that such confidentiality is respected by his employees, associates, and any other person to whom he makes the information accessible.
5. Data protection rights
Users may exercise their right to request access to their personal data, the right to request its rectification or deletion, the right to request the limitation of its processing, the right to oppose its processing and the right to data portability, free of charge, by sending a written communication by e-mail to the following address dpo@bkool.com. In both cases, the User concerned must enclose a copy of his/her national identity card, passport or other valid document that identifies him/her. In the event that the exercise of their rights is not satisfactorily resolved, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
In addition, the User may address any communication to the Data Protection Officer (DPO) at the same address (dpo@bkool.com).
6. Prohibition for minors
It is strictly prohibited for children under 14 years of age to provide BKOOL with personal data. Furthermore, purchase transactions may only be carried out by persons of legal age. If any person under 14 years of age provides data, or under 18 years of age makes purchases, their parents or guardians shall be solely responsible for this circumstance. If you are a minor, please ask your parents or guardians to contact us first.
7. Cookies
This Website uses cookies that are installed in the User's browser, if so configured, when accessing the URL: www.bkool.com and interacts with the Website.
Full information about the cookies that are installed is specified at Cookie Policy.
8. Social media
BKOOL is the owner of accounts in different social networks (Facebook, Twitter, Youtube, Instagram, Strava, BePlus and TikTok). The processing carried out by BKOOL of said data is that permitted by the social networks themselves through their services, without BKOOL extracting personal data from said social networks of its followers and users thereof. BKOOL uses said social networks to inform of its services and offers related to the platform itself in compliance with the contracting conditions established by the owners of the social networks themselves.
Version: September 2023