Data Protection Officer

About this notice

Under GDPR Articles 37–39, CyclingClub.cc has designated a Data Protection Officer because our core activities involve regular and systematic monitoring of data subjects on a large scale (continuous GPS / ride telemetry, behavioural anomaly detection, and Strava-derived performance analytics).

The DPO is independent, reports to the highest level of management, and acts as the contact point for data subjects and the supervisory authority on all matters relating to the processing of personal data.

How to reach the DPO

You may contact the Data Protection Officer using the details below. We commit to acknowledging all inquiries within 5 business days.

• Name: Pending appointment — see notice on cookies page
• Email: dpo@cyclingclub.cc
• Postal address: [Controller's registered address — to be published once finalised]
• Response SLA: 5 business days for non-urgent inquiries; 24 hours for breach-related contact

Vendor selection is in progress. Until the appointed DPO is confirmed, the founder serves as interim privacy contact. Inquiries to dpo@cyclingclub.cc are read and acknowledged in the meantime.

What you can contact the DPO about

Per GDPR Article 38(4), data subjects may contact the DPO regarding all issues related to the processing of their personal data and to the exercise of their rights, including:

• Exercising your rights under GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent)
• Complaints about how your personal data is processed
• Supervisory-authority liaison (the DPO acts as our point of contact with the CNIL and other EEA supervisory authorities)
• Questions about Data Protection Impact Assessments (DPIA) for high-risk processing
• Reporting a suspected personal-data breach

Supervisory authority

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the French CNIL.

• Authority: Commission Nationale de l'Informatique et des Libertés (CNIL)
• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Phone: +33 (0)1 53 73 22 22
• Website: www.cnil.fr/en/plaintes

You can also contact the supervisory authority of the EEA member state where you reside, work, or where the alleged infringement took place.

Notification to the supervisory authority

In accordance with GDPR Article 37(7), the contact details of the DPO have been (or will be, upon appointment) communicated to the CNIL and published on this page so they are accessible to data subjects.