Privacy Policy

Data controller details

Company name:: GAMUCI MARTÍNEZ DISEÑO Y DESARROLLO S.L.

VAT no.: B72848260

Registered office: C/ Villa Romana, 4. 11518, Puerto Real (Cádiz), Spain.

Phone: 613 00 95 30

Email address: info@victoris.es

Victoris is a trade name of GAMUCI MARTÍNEZ DISEÑO Y DESARROLLO S.L.

Under Article 37 of GDPR 2016/679 and Article 34 of Spanish Organic Law 3/2018, a Data Protection Officer is not required.

This policy may change over time as a result of legislative changes or changes to the services provided.

Our commitment

At Victoris we care about people, not their data. That is why:

What data we process

Identifying data (username, first name, surname, email, phone); postal address (for shipments); avatar; sports activity data (kilometres, steps or calories converted into distance, sport, date and time, duration, elevation and pace); order and billing data (without card details); the text you choose to engrave on your medal; gamification data (coins and achievements earned); referral programme data (your code, who invited you and the conversion date); and browsing data (see our Cookies Policy).

Sports activity data is not health data within the meaning of Article 9 of the GDPR, but we treat it with the same care. The time of your activities is used solely to calculate achievements (streaks, early bird, night owl) and for nothing else.

Purposes and legal basis

We process your data for the following purposes, each with its own legal basis:

Visibility between users

When you register for a challenge, your username, avatar, country, kilometres, time, elevation and entry type appear on the leaderboard visible to the other participants in that challenge, and the same applies within a team. Your real name, email, phone number and address are never shown to other users.

Your bib, your certificate and the image of your coins are generated on your device and are only shared if you choose to share them.

Recipients and data processors

To provide you with the service, we share certain data with the following providers, acting as data processors:

We do not share your data with third parties except by legal mandate or in order to provide the services described above.

International data transfers

Your account data, your orders and your sports activity are hosted in the European Union. Some providers (Google, Meta and Microsoft) may process data outside the European Economic Area; those transfers are covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-U.S. Data Privacy Framework. If you reject analytics and advertising cookies, no transfer takes place for that purpose.

Data retention

We keep your data for as long as your account remains active. If you close your account, we delete your data, except for billing data, which we keep blocked for 4 years to meet tax obligations, and for up to 5 years for possible contractual liabilities. Browsing data is kept for the period specific to each cookie (see our Cookies Policy).

User rights (GDPR)

Right of access: you can ask us whether we process your data and which data we hold.

Right to rectification and erasure: you can request that your data be corrected or deleted.

Right to object: you can object to the processing; we will stop processing your data and close your account, unless there are legal grounds to keep it.

Right to restriction: you can ask us to restrict the processing of your data in certain circumstances.

Right to data portability: you can ask us at any time for a copy of your data in a structured format.

Withdrawal of consent: where processing is based on your consent (for example, analytics and advertising cookies, or the publication of your story), you can withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, send your request to info@victoris.es, providing proof of your identity. We will respond within 1 month of receipt.

If you believe we have not dealt with your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es — C/ Jorge Juan 6, 28001 Madrid).

Minors

Victoris is not aimed at children under 14. By registering, you declare that you are at least 14 years old.

Security, social media and language

We apply technical and organisational measures to protect your data: encryption of communications in transit, passwords stored using hash functions, and access control over the information.

Victoris has open profiles on the main social networks. It recognises itself as the controller of its followers' data within the policies of each social network. Victoris will not extract data from social networks.

The official language of the website is Spanish (Spain). In case of any contradiction between translated versions, the Spanish version prevails.