COMPLIANCE AND PRIVACY — COFFEE PEAKS CYCLING

DATA PROTECTION AND REGULATORY COMPLIANCE

At Coffee Peaks Cycling we handle our users' personal data to the highest protection standards, in compliance with:

• General Data Protection Regulation of the European Union (GDPR — Regulation EU 2016/679).
• Colombian Law 1581 of 2012 (General Personal Data Protection Regime) and its implementing Decree 1377 of 2013.
• Terms of use of the sports providers we integrate with (Garmin Connect, Strava, Wahoo, Polar and similar).

This means, specifically, that:

1. Each user's data is visible only to that user, except for the public ranking of conquered territory in square kilometers (a derived metric).

2. We do not sell personal information to third parties and do not use it for advertising purposes.

3. We do not use personal data to train artificial intelligence models.

4. Data imported from external sports services is visible only to the user who authorizes the synchronization, never to other users.

5. Any user may request access, rectification, portability or full deletion of their data by writing to privacy@coffeepeakscycling.com. We process each request within a maximum of 15 business days.

6. The database is encrypted at rest and in transit. Each user can only modify their own records via Row-Level Security at the database level.

7. In the event of any security incident affecting personal data, we will notify affected users and the competent authorities within a maximum of 72 hours.

For more details, see our Privacy Policy: https://www.coffeepeakscycling.com/privacy

PRIVACY CONTACT

Coffee Peaks Cycling 
Email: guillermo.roldan@coffeepeakscycling.com