Privacy Policy
Introduction
This privacy policy describes how RunLab (operated via runlab.ch) collects, uses and protects your personal data. We attach great importance to protecting your privacy and process your data in accordance with the Swiss Federal Act on Data Protection (nFADP) as well as the European Union's General Data Protection Regulation (GDPR), where applicable.
Note: This document is a draft and must be reviewed by a legal professional before publication.
Data Controller
The data controller is the operator of the RunLab online store. For any questions regarding data protection or to exercise your rights, you can contact us at: contact@runlab.ch.
Data We Collect
We collect only the data necessary to provide our services:
- Customer account: last name, first name, email address, password (encrypted), postal address and account preferences.
- Orders: delivery and billing address, ordered items, purchase history and payment information (processed by our payment providers; we do not store your card details).
- Newsletter: email address and subscription preferences, where you consent.
- Usage data: technical information such as IP address, browser type and cookies necessary for the operation of the website.
Legal Bases for Processing
We process your data on the following legal bases:
- Performance of a contract: to manage your account, process your orders and ensure delivery.
- Consent: for sending the newsletter and using non-essential cookies. You may withdraw your consent at any time.
- Legitimate interest: to improve our services, prevent fraud and ensure the security of the website.
- Legal obligation: to comply with our accounting and tax obligations.
Processing by Artificial Intelligence (Coach Gregory)
Our website offers a virtual AI-based coach, "Gregory," who provides you with personalised running advice. This service uses the infrastructure of the provider Groq to process requests.
No retention of analysis photos: when you submit a photo (for example for a gait or shoe analysis), it is processed solely in memory for the time needed to generate the response, then immediately deleted. No analysis photos are kept or stored on our servers or those of our providers.
Text conversations with the coach may be processed to provide the service. We ask that you do not share sensitive data in your conversations with the assistant.
Data Sharing
Your data may be shared with strictly necessary service providers (payment, delivery, hosting, AI infrastructure). These providers are required to guarantee an adequate level of protection. We never sell your personal data.
Retention Period
We retain your data for as long as necessary to provide our services and comply with our legal obligations. Account data is retained while your account is active; order data is retained in accordance with statutory retention periods.
Your Rights
In accordance with the nFADP and the GDPR, you have the following rights:
- Right of access: to obtain a copy of the data we hold about you.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure: to request the deletion of your data, subject to our legal obligations.
- Right to object and to restriction: to object to certain processing or request its restriction.
- Right to data portability: to receive your data in a structured format.
To exercise these rights, write to us at contact@runlab.ch. You also have the right to lodge a complaint with the competent data protection authority.
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
Changes
We may update this privacy policy. Any material changes will be communicated to you, and the current version will be published on this page.
Contact
For any questions regarding this policy or the processing of your data: contact@runlab.ch.