RUNCULTURE (runculture.com) is the controller for the personal data processed through this website. For privacy questions you can reach us via the contact page on the website.

Account — If you create an account we process your email address and the profile details you enter yourself (such as name, personal records and training preferences), to provide the service and store your settings.

Plans and training data — The data you enter to generate a plan (such as distance, goals and availability). If you create a plan without an account, you can optionally leave an email address to link the plan to an account later; that address is stored in a restricted way and deleted once the link is made.

Routes — The start locations and routes you enter or draw in the route editor. Your current location is only used if you grant permission in your browser, and is not stored unless you save the route.

Garmin Connect — If you connect your Garmin account, we process your Garmin user ID, the access keys for the connection, and the permissions you granted, and we send workouts from your plan to Garmin Connect. See section 10.

Newsletter — Your email address, optionally your name, your language preference and the moment and source of sign-up. See section 4.

Contact forms — Name, email address and your message, so we can answer your question.

Runclubs — Contact details of the representative when claiming or managing a club page. If you sign up for a club event, we process your choice and optional message; the club manager sees these together with your name (first and optional last name, otherwise your username) and profile photo. If you are attending, members of that club see your first name (or your username if you have not set one), profile photo and the parts you are joining in the list of attendees (guests: first name only). Without an account we also process your name and email address for the confirmation, a reminder and withdrawing your sign-up. If you choose "Use my location" on the runclub overview, we use your location (rounded to about 1 km) once to find the nearest city with runclubs; we do not store it.

Security and technology — Your IP address is processed briefly for abuse prevention (rate limits and bot checks), but is not stored permanently. For share statistics we only use pseudonymized (hashed) values. Technical error reports are processed for debugging.

We process personal data based on:
• performance of the service — account, plans, routes, runclub management, contact handling, and the Garmin Connect integration if you turn it on yourself;
• consent — the newsletter for stand-alone sign-ups without an account, and the use of your location in the route editor;
• legitimate interest — the newsletter for account holders (existing customer relationship, see section 4), security, abuse prevention, error monitoring of the service, and visitor statistics to improve the site (see section 6).

1. If you have an account (or create a plan with your email address), you receive our newsletter about RUNCULTURE and similar services of our own. This is stated at the moment you leave your email address, you can switch the newsletter off right at your first sign-in, and it is based on the existing customer relationship. If you sign up for the newsletter separately without an account, your sign-up is the consent. In both cases we record the moment and source of sign-up.
2. You can unsubscribe at any time via the unsubscribe link in every newsletter or via your profile page, and unsubscribing is as easy as subscribing. After unsubscribing you no longer receive newsletters; that choice also remains in place if you sign in again later.
3. We use a specialized email delivery service for sending (see section 5); your email address, name and language preference are shared with that service for this purpose.
4. After unsubscribing we keep your address with the status "unsubscribed", so you are not emailed again without asking.

We only share personal data with service providers (processors) needed to provide the service, and have data processing agreements with them. These are the following categories:
• database and sign-in services — storage of accounts and entered data;
• hosting services — running the website;
• analytics services — visitor statistics to improve the site (see section 6);
• email delivery services — sending the newsletter and confirmation and contact email;
• security services — bot checks on forms and short-lived processing for rate limits;
• error monitoring — detecting technical errors;
• map and routing services — retrieving map imagery and route calculations; these requests are proxied through our own server.
For service providers outside the European Economic Area, appropriate safeguards apply, such as the European Commission's standard contractual clauses. An up-to-date overview of the processors we use is available on request via the contact page.

1. We use functional cookies for signing in (session).
2. Preferences such as theme, units and language are stored locally in your browser.
3. For visitor statistics we use Google Analytics by Google Ireland Limited. We've configured Google Analytics to be as privacy-friendly as possible: we have a data processing agreement with Google, data sharing with Google is turned off, we don't use advertising or remarketing features or Google signals, and we don't connect Google Analytics to other Google services. Google does not store IP addresses for visitors from the EU. We remove personal links, such as the link to cancel an RSVP, from the web address before sending. Google Analytics sets the cookies _ga and _ga_<id>, which expire after 13 months. Detailed data is kept for 2 months; after that, only aggregated numbers remain. Data may be processed in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework. If you'd rather not be counted, you can block these cookies in your browser; the site will keep working normally.
4. We also count visits with Vercel Web Analytics. It sets no cookies and only counts visits as aggregated numbers.
5. We do not use advertising cookies.

1. Account — until you delete your account, which you can do yourself at any time via your profile page. Your profile data and newsletter subscription are deleted along with it.
2. Newsletter — until you unsubscribe (after which only the unsubscribed status remains) or until your account is deleted.
3. Anonymous plans — the optional email address for claiming is deleted once the plan is linked to an account.
4. Contact messages — as long as needed to handle your question.
5. Club event sign-ups — the name, email address and message of a sign-up without an account are deleted automatically 30 days after the event; sign-ups with an account are covered by your account.
6. Garmin integration — until you disconnect it or delete your account; after that we delete your Garmin user ID, access keys, and permissions (see section 10).

You have the right to access, rectification, erasure, restriction of processing, objection and data portability. You can delete your account (and the associated data) yourself via your profile page; for other requests, contact us via the contact page. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We take appropriate technical and organizational measures to protect your data, including encrypted connections (TLS), strict database access restrictions and separating personal data from publicly visible content.

1. What we receive — If you connect your Garmin account (which you always do yourself, through Garmin's consent screen), we receive and store your Garmin user ID, the access keys for the connection (stored encrypted), and the permissions you granted to Garmin. We do not request any health data. We currently do not retrieve any activities from Garmin either; if we start doing so, for example to automatically check off completed workouts, we will update this statement beforehand.
2. What we send to Garmin — Workouts from the plan you choose: name, description, steps (such as duration, distance, and pace), and the scheduled date. They appear in your Garmin Connect account and on your watch. Garmin then processes them under its own privacy policy.
3. Why — Only to keep your training plan in Garmin Connect up to date: adding new workouts and updating workouts that changed or moved.
4. Who processes the data — Apart from Garmin itself, only our processors: Vercel Inc. (hosting and servers), Supabase Inc. (database), and Functional Software Inc. (Sentry, technical error reports, without access keys). For parties outside the European Economic Area, the safeguards from section 5 apply.
5. No sale, no AI — We do not sell Garmin data or share it with third parties for their own purposes. We do not use it in AI systems or to train, test, or improve AI models.
6. Withdrawing consent — You can disconnect at any time through your RUNCULTURE account or in Garmin Connect (Settings → Account Information → Connected Apps). We then stop syncing right away, remove upcoming RUNCULTURE workouts from your Garmin calendar (when you disconnect through RUNCULTURE), and delete your Garmin user ID, access keys, and permissions. Past workouts remain in Garmin Connect; you can delete them there yourself.
7. Access and your other rights — To access, correct, delete, or export the Garmin data we hold about you, reach out via the contact page; see also section 8.

We may update this privacy statement, for example when the service changes. The date at the top indicates the latest change. For significant changes we will inform you via the website.

Questions about this privacy statement or about your data? Reach out via the contact page on the website. See also the Terms and Conditions.