Categories of Personal Data Processed by Wandrer
Personal data that is processed when you create a Wandrer account:
When you create a Wandrer account, we ask you to provide your email address and name.
Personal data that is processed when you link a third-party account to Wandrer:
Wandrer stores the identification and authentication information provided by the third party (such as Strava), and transfers any activity data from the service for which you have allowed access. When processing Strava data, Wandrer is also bound by the terms of the Strava API Agreement.
PURPOSES AND LEGAL GROUNDS: Wandrer stores your authentication credentials in order to fulfill your request to link a third-party account to Wandrer. The legal ground for processing your email address for this purpose is based on Wandrer’s legitimate interest in processing ride data on the user's request, even if it originated with a third party.
Personal data that is processed when you purchase anything through the Wandrer website:
If you purchase anything through the Wandrer website, no payment card information will be accessible to Wandrer. A third party (Stripe) handles all customer payment information when Wandrer customers make a purchase on the Wandrer website.
Personal data that is processed when you complete an activity:
Wandrer processes geographical location data that you provide to it, either directly or through a third-party account (such as Strava) that is connected to Wandrer. No access to precise/raw GPS data will be made available to any user other than yourself without your consent.
When you visit the Wandrer site:
When you visit the Wandrer site, we collect information about resources you request on the site to ensure data availability and site performance.
When you receive email from Wandrer:
Wandrer makes use of third-party email sending services. Those services may track the activities associated with these emails, such as whether they were opened and whether links in the emails were clicked on. Wandrer uses this data to analyze the level of engagement with its emails.
When you use the Wandrer browser extension:
Wandrer receives your planned route information (including latitude/longitude pairs) in order to calculate anticipated points increases from the route. Wandrer uses your extension key to authenticate you and display the appropriate data on your map.
Data Storage and Security
Your data in Wandrer is stored a database managed by Amazon Web Services. It is encrypted in transit over the network using the TLS protocol, and at rest (when stored on the disk).
Retention of Personal Data
We will retain your personal data as long as your Wandrer account is considered to be active. In addition, see below under “Your Rights” for a description of your right of erasure.
We request individuals under the age of 13 in the U.S. and under the age of 16 in the rest of the world not provide personal data to Wandrer. If we learn that we have collected personal data from a child under the age of 13 in the U.S. or under 16 in the rest of the world, we will take steps to delete the information as soon as possible.
GDPR rights for EU citizens
European Union citizens have 8 rights under the General Data Protection Regulation:
- The right to be informed; This means anyone processing your personal data must make clear what they are processing, why, and who else the data may be passed to.
- The right of access; this is your right to see what data is held about you by a Data Controller.
- The right to rectification; the right to have your data corrected or amended if what is held is incorrect in some way.
- The right to erasure; under certain circumstances you can ask for your personal data to be deleted. This is also called ‘the Right to be Forgotten’. This would apply if the personal data is no longer required for the purposes it was collected for, or your consent for the processing of that data has been withdrawn, or the personal data has been unlawfully processed.
- The right to restrict processing; this gives the Data Subject the right to ask for a temporary halt to processing of personal data, such as in the case where a dispute or legal case has to be concluded, or the data is being corrected.
- The right to data portability; a Data Subject has the right to ask for any data supplied directly to the Data Controller by him or her, to be provided in a structured, commonly used, and machine-readable format.
- The right to object; the Data Subject has the right to object to further processing of their data which is inconsistent with the primary purpose for which it was collected, including profiling, automation, and direct marketing.
- Rights in relation to automated decision making and profiling; Data Subjects have the right not to be subject to a decision based solely on automated processing.
CCPA rights for California residents
If you are a California resident, you have rights under the California Consumer Privacy Act of 2018 ("the CCPA"):
- Right to know about the personal information we collect and share; the CCPA gives you the right to request that we disclose the specific pieces of personal information Wandrer has collected about you. Wandrer does not sell, and has not sold, your personal information.
- Right of deletion; you have the right to request that we delete your personal information, subject to certain exceptions.
Wandrer will not discriminate against you for exercising any of your CCPA rights.
Data Protection OfficerTo communicate with our Data Protection Officer, please email [email protected].
- 8 March 2022: Clarify terms around usage of the Wandrer browser extension.