GDPR

Privacy Policy — KiteReady

KiteReady processes your personal data solely for the rider services described below and in compliance with the GDPR.

Data collected

WhatsApp number (rider identification)
First name
Kitesurf level
Favorite spots
Email (optional, only if provided voluntarily)
Session data (spots visited, notes)

Purpose

Personalised weather alerts via WhatsApp (with consent)
Monthly email summary (with consent)
Email alerts when a followed spot becomes rideable (double opt-in subscription, one-click unsubscribe)
Improving community scoring

Your rights

Right to access your data
Right to rectification
Right to erasure ("right to be forgotten") — via the "Delete my profile" button in /profil
Right to withdraw consent at any time
Right to data portability

Legal basis

Explicit consent (Art. 6.1.a GDPR) — checkboxes are not pre-ticked.

DPO contact

To exercise your rights, contact us via WhatsApp by sending STOP or by email at privacy@kiteready.app

Retention

Your data is kept as long as your profile is active. If your profile is deleted, your personal data is erased within 30 days. Per-spot email alert subscriptions are erased as soon as you unsubscribe, and an unconfirmed subscription request is deleted within 48 hours.

Cookies

KiteReady does not use advertising cookies. The technical cookies required for the app to work are set without consent. Audience measurement stays anonymous and visit-scoped; a persistent measurement marker (to see whether visitors come back) is only set with your consent, which you can decline or withdraw at any time.