Privacy Policy

Last updated: 31 October 2024

Introduction
At Run a Lott B.V., we value the trust you place in us by sharing your personal data. We take your privacy seriously and are dedicated to handling your personal data in a fair and responsible manner that respects this trust. Run a Lott takes all reasonable measures to safeguard your information from misuse and ensure its security.

Run a Lott B.V., a company registered in the Netherlands, with its registered office at Gorterplaats 2, 6531HZ, Nijmegen, acts as the Data Controller for the Services. Run a Lott is the trade name of Run a Lott B.V. Throughout this Privacy Policy (‘Policy’), the terms “we”, “us”, “our” and “Run a Lott,” refer to Run a Lott B.V.

We believe it’s important to inform you about how we use your personal data, so we encourage you to read this Policy carefully. This Policy outlines the information we collect about you when you use our website www.runalott.com and the Run a Lott app (collectively referred to as the “Services”), how we use that information, the extent to which we share it with third parties, and your rights regarding that information. This Policy should be read in conjunction with our Terms and Conditions, which can be found here, and our Cookie Policy, which can be found here.

Personal data collection and why
Run a Lott collects various types of information from our users primarily to provide the Services and enhance your overall experience. Below you will find the four categories of data we collect with the purpose and lawful basis.

Category: contact details such as your name and email address.
Purpose: for internal record keeping, to communicate with you about future events, offers, news and other Services provided by Run a Lott, and to respond to any questions, comments or requests you have about our Services.
Lawful basis: by creating an account, you provide your consent and to fulfill our contractual obligation to deliver the Services to you.

Category: technical details, log files (including cookies), device and usage data (such as IP address, operating system, location, and device identifiers).
Purpose: we may collect information about your device and usage. We utilize this information to enhance our app, website and Services and to optimize our business operations.
Lawful basis: to fulfill our contractual obligation to deliver the Services to you and to enhance our Services for the benefit of all users.

Category: location and activity data.
Purpose: when you track a run using our app or import a run from one of our partners (such as Garmin, Apple or Strava), we store all relevant details for that run. This includes GPS location, calories burned, running speed, heart rate and the time of the run.
Lawful basis: the consent you provided to fulfill our contractual obligation to deliver the Services to you.

Category: purchase information.
Purpose: we collect information related to your purchases within our app to manage your subscription and provide access to our premium features. While all payments are processed through third-party platforms (Apple App Store and Google Play Store), there may be instances where we also receive certain payment-related data from these platforms, such as transaction ID and subscription status. This allows us to verify your subscription and ensure you have access to the features you’ve paid for.
Lawful basis: to fulfill our contractual obligation to deliver the Services to you and to manage your subscription within the app.

Who we share your data with?

Data Processing by DTT Multimedia B.V.
The Run a Lott app is developed by DTT Multimedia B.V., who also handle the hosting of the app and its data. DTT Multimedia B.V. acts as our data processor and processes personal data solely based on our instructions and in compliance with applicable laws, such as the General Data Protection Regulation (GDPR). DTT implements the necessary technical and organizational measures to ensure the security and confidentiality of your data.

As the data controller, we remain responsible for the processing of your data and ensure that it is managed securely and used solely for the purposes outlined in this Policy. DTT Multimedia B.V. does not have the independent right to use, share, or disclose your data, except where they are legally required or as needed to fulfill our instructions.

Third-party apps connected to your Run a Lott account
As part of our Services, we allow you to link your Run a Lott account with third-party applications like Garmin, Strava, Apple, and similar platforms. If you choose to connect your Run a Lott account, we may share certain personal information with the connected application. This may include information generated through your use of our Services (e.g., workout details) as well as contact and profile information. The processing of your personal information by these third-party applications is governed by their respective privacy policies.

Google Analytics
We utilize Google Analytics tools and technologies to gather and evaluate various types of data with the goal of enhancing our Services. This information may include IP addresses, device and software identifiers, URLs for entry and exit points, metrics and statistics related to feature usage, usage and purchase records, media access control addresses (MAC addresses), unique mobile device identifiers, and other similar data collected through cookies.

Third parties in the event of a legal obligation
We may also disclose your personal data if we believe it is required by law or reasonably necessary to comply with legal processes. This includes situations where we deem it necessary or appropriate to share information with law enforcement authorities, such as investigating actual or suspected fraud, legal violations, security breaches, or violations of this Policy. Additionally, we may disclose data to respond to claims against us or to protect the rights, property, or personal safety of Run a Lott, our users, or the public.

Corporate transaction.
We may disclose personal data as part of any actual or potential merger, sale, transfer of Run a Lott’s assets, acquisition, bankruptcy, or similar event, including during due diligence and negotiations leading up to such events, where permitted by law.

Children’s Privacy Policy
Our app is not intended for use by individuals under the age of 18, as stated in our Terms & Conditions. We do not collect personal data from users who are under 18 years old. If you believe we have inadvertently collected information from a minor, please contact us so that we can take the necessary steps to delete such information.

Security of your information
We and our data processor work hard to protect our users from unauthorized access, alteration, disclosure, or destruction of data in our possession. Specifically, we apply the following measures: we encrypt all services with SSL and use data encryption technology. We regularly review our practices related to data collection, storage, and processing, including physical security measures, to protect against unauthorized access to our systems. This allows us to ensure the security of personal data and keep your information protected.

Please note that, despite our best efforts, no security measures can provide complete protection. You can also help safeguard your account and personal information by taking precautions, such as avoiding the sharing or reuse of passwords across multiple sites, choosing complex passwords, and quickly reporting any suspicious activity or unauthorized access to your account.

Data retention
We retain personal data for as long as necessary to provide our Services effectively and in compliance with legal requirements. This means that data is stored for as long as a user maintains an active account. Currently, our system does not automatically delete data after a specified period. Should a user decide to delete their account, we will take the necessary steps to remove their personal data from our systems, in accordance with applicable legal and regulatory requirements.

If you have questions about how long we retain specific types of data, or if you wish to request deletion of your data, please contact us using the information provided in this Policy.

Your rights regarding your data
Subject to the limitations and exceptions provided by applicable law, you may have the following rights concerning your personal data collected by us:

• Access your data: you have the right to request a copy of the personal data we hold about you and verify that it is being processed lawfully (commonly known as a “subject access request”).
• Request correction: you have the right to ask us to update any incomplete or inaccurate information we hold about you.
• Request erasure: you have the right to ask us to delete or remove your personal data if there is no valid legal reason for us to continue processing it. This also applies if you have exercised your right to object to our processing of your data.
• Right to data portability: you have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format and to request that we transfer your data to another data controller if technically feasible.
• Right to restrict processing: you have the right to request that we limit the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or object to processing.
• Right to object: you have the right to object to the processing of your personal data at any time, particularly when it is processed for direct marketing purposes or based on legitimate interests.
• Right not to be subject to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that significantly affects you, unless you have provided your explicit consent or the processing is necessary for the performance of a contract.
• Right to withdraw consent: if you have provided consent for the processing of your personal data, you have the right to withdraw that consent at any time.
• Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes on your rights under GDPR.
If you would like to exercise any of these rights or have questions about how we handle your personal data, please contact us via email at contact@runalott.com.

Changes to the policy
This Policy is effective as of the ‘Last Updated’ date mentioned above. We may update this Policy periodically by posting the revised version on our websites and applications. If we make any significant changes that impact how we handle personal data previously collected from you, we will make reasonable efforts to notify you in advance, either by highlighting the changes on our websites or by sending you an electronic notice. We recommend reviewing this Policy regularly to stay informed about how we process your personal data.

Contact and queries
If you have questions regarding the processing of your personal data or this Policy, please send us an email at contact@runalott.com