Privacy Policy

We take the protection of your personal data very seriously. This Privacy Policy explains which data we process when you use SunRide, why we process it, and which rights you have.

1. Controller

• Name: Martin Förstemann
• Address: 9000 St. Gallen, Switzerland
• Email: info@sunride-weather.com

2. Categories of Data Processed

• Account data: username, email address, and password.
• Route/GPX data: uploaded GPX files and processed route/analysis values. Optionally, GPX files saved as favorites permanently stored in the application database.
• Weather-related data: weather requests and weather results linked to your route points.
• Location data: optional location (lat/lon) for weather features; alternatively default/IP-based approximation.
• Usage and log data: e.g. usage information and security-relevant events.
• Communication data: contact, feedback and password-reset related data.

3. Purposes and Legal Bases

• Performance of contract: providing core app functions (account, GPX processing, weather display).
• Consent: optional cookies and related features.
• Legitimate interests: IT security, abuse prevention, error analysis, and system stability.
• Legal obligations: where retention/disclosure is required by law.

4. Cookies and Similar Technologies

• Essential cookies: for operation, security, and sign-in.
• Long-term login: cookie for sign-in across sessions (up to 30 days).
• Consent cookie: cookie storing your choice (up to 365 days).
• Optional Weather/Location cookies: location cookies (up to 365 days), only if selected.
• You can change your preference at any time in settings; optional location cookies are removed when switching to essential-only.

5. Recipients and Third-Party Services

We do not sell personal data. To provide specific features, we use external services that receive the following data:

• MET Norway (Norway): coordinates (latitude, longitude, altitude) for weather forecasts at route points.
• OpenTopoData: coordinates (latitude, longitude) for elevation data calculation.
• Google reCAPTCHA (Google LLC, USA): IP address, user interactions (clicks, mouse movements) and user-agent for bot detection during registration and login.
• Google Geocoding (Google LLC, USA): coordinates and API key to resolve place and city names from route points.
• Mapbox (USA): map requests (zoom, view, coordinates) and IP address for displaying interactive route maps.
• ipinfo.io: IP address (in browser, not transmitted by us) for fallback location approximation if geolocation is unavailable.
• SMTP/Email Service Providers: email address for sending verification emails, password reset links, and contact/feedback responses.
• Optional – Strava / Garmin (optional): if you connect via these platforms, access tokens and activity metadata are exchanged with these services.

6. International Data Transfers

Some providers listed above may process data outside Switzerland and/or the EEA. Where required, such transfers are based on recognized safeguards (e.g., adequacy decisions or Standard Contractual Clauses) under applicable law.

7. Retention and Deletion

• Account data is generally stored until your account is deleted.
• On account deletion, account records and associated user files are deleted (subject to legal retention obligations).
• Weather/intermediate data and temporary GPX data are regularly cleaned/overwritten during operation.
• Log data is retained only as long as required for security, operation, and legal obligations.
• Cookie lifetimes: long-term login up to 30 days; consent and optional location cookies up to 365 days.

8. Your Rights

Under applicable data protection law, you may have rights to access, rectification, deletion, restriction, objection, and data portability. You may withdraw consent at any time with effect for the future.

9. Data Security

We implement appropriate technical and organizational safeguards to protect your data against unauthorized access, loss, and misuse.

10. Automated Decision-Making

We do not carry out solely automated decision-making with legal or similarly significant effects under applicable data protection laws.

11. Changes to this Privacy Policy

We may update this Privacy Policy if features, processing operations, or legal requirements change. The current version published in the app applies.

12. Contact and Complaints

If you have questions about data protection, contact us at info@sunride-weather.com. You also have the right to lodge a complaint with a competent data protection supervisory authority. For Switzerland, this is in particular the Federal Data Protection and Information Commissioner (FDPIC/EDÖB).

Last updated: March 2026