Who is responsible for processing your data?
The data controller for your personal data is Ferra Innovation, S.L. (hereinafter, “Ferra”), with registered office at C/Sant Llorenç 41 3r 1a, 08202 Sabadell, Barcelona.
This Privacy Policy governs access to and use of the Website and the App (hereinafter, the “Website”) that Ferra makes available to users interested in its content and services. For any questions, you can contact Ferra at: info@ferra.cc.
Recommendations
We recommend that you:
Keep your device protected with up-to-date antivirus software.
Read and review this Privacy Policy and the legal texts available on the Website.
Information about the data Ferra collects
For the proper functioning of the Website, Ferra may collect the following user data:
- Identification data: Full name.
- Contact details: Email, phone number, and postal address.
- Registration and activity data: Information provided by the user in the app, such as activity and performance, in case of integrations with external platforms.
- Precise location and activity data: Coordinates, timestamps, altitude, speed, route, distance, pace and elevation when the user starts an activity in the Ferra app.
- Club purchases and memberships: User, club, event and plan identifiers; amounts, fees and currency; payment status and dates; payment processor references, including customer, payment, subscription and invoice identifiers; subscription periods and renewal status; cancellations, refunds and payment disputes.
- Event tickets and attendance: Ticket identifiers and QR codes, registration and check-in status, the date of check-in and the administrator who recorded it.
- Club administrator acceptance records: The administrator and club identifiers, the version of the club payment terms accepted and the date of acceptance.
Location data and activity tracking
Ferra collects precise location data to record the route, distance, pace, speed and elevation of a running or cycling activity initiated by the user. Collection may continue while the app is in the background or not in use, for example when the screen is locked, but only while that activity remains in progress. Tracking stops when the user finishes the activity.
Location data is associated with the user's account and transmitted securely to Ferra's servers so the activity can be stored and used to calculate progress and rewards. When an activity finishes, a limited sample of its route may be sent to Mapbox Technologies, Inc. to match the recorded route to the map. Ferra does not sell location data and does not use it for advertising.
Location permission is optional. The user can decline it or revoke it in the device settings, although route-tracking features will then be unavailable. Stored activities and location data are retained while the account is active or until the user deletes the activity or account, subject to applicable legal retention obligations.
Club payments, memberships and event tickets
Ferra processes purchase and membership data to complete payments, manage membership access and renewals, handle cancellations, refunds and payment disputes, issue event tickets and verify attendance through QR check-in. We also use the buyer's email address and the relevant purchase and event details to send transactional messages, including the purchased ticket and its QR code.
Payments for club memberships and event tickets are processed through Stripe Checkout and Stripe Connect, including payments to the club's connected account. Card details are entered in Stripe's payment interface. Ferra's club payment records store transaction references and payment information, but do not store the full card number or card security code (CVC).
For club administrators, we keep a record of acceptance of the club payment terms to document the applicable version and the agreement governing payment management.
Why is Ferra entitled to process your data?
The processing of personal data is based on:
- Performance of a contract, when the user registers and uses Ferra's services, including purchasing club memberships or event tickets and managing the resulting payments, access and attendance.
- Compliance with legal obligations, including retaining payment and accounting records where required by applicable law.
- User consent, when they agree to receive commercial communications.
- Legitimate interest, to improve services and offer personalized promotions.
The user may withdraw their consent at any time by sending an email to info@ferra.cc.
Purpose of processing your personal data
Your data may be used to:
- Manage your registration and provide Ferra's services.
- Send commercial communications about Ferra's products or services, if you have given consent.
- Send information about products and services of partner entities, if consent has been given.
- Send notifications to the user's device.
- Process geolocation data to improve the user experience.
Accuracy of the data provided by users
The user guarantees that the data provided is true and agrees to notify any changes. Ferra may exclude users who provide false data from its services.
Data retention
Data will be retained as long as the user's account is active and for as long as necessary to comply with legal obligations.
Purchase, subscription, refund and other financial records, and evidence of acceptance of the club payment terms, may need to be retained after a user account or club is deleted to comply with applicable legal obligations. Deleting an account or club does not necessarily erase these records.
User rights
Users may exercise the following rights:
- Access their personal data.
- Rectify inaccurate data.
- Request the deletion of their data.
- Object to the processing of their data.
- Request restriction of processing.
- Request data portability.
To exercise these rights, the user must send an email to info@ferra.cc with their request and a copy of their ID.
Data security
Ferra adopts technical and organizational measures to ensure the security of personal data and to prevent its alteration, loss, or unauthorized access.
Transfers and/or disclosures to third parties
User data is disclosed only when the user has consented, when required by law, or when necessary to provide the service. This includes service providers acting on Ferra's behalf, such as hosting providers and Mapbox for route matching and map functionality. These providers may process only the data necessary to perform their services.
For club payments, Ferra shares the buyer's email address, relevant user, club and order identifiers, the purchase description, amount and currency with Stripe. Stripe processes personal data in different roles depending on the activity, as described in the Stripe Privacy Policy.
The organizing club and its authorized administrators receive the information necessary to provide and manage the purchased membership or event: user identification, membership or ticket status, relevant payment amounts, fees, dates and refund information, and attendance and check-in records.
Our transactional email providers process the buyer's email address and name, together with the relevant club, event, date, location, amount and ticket details, including the QR code, to deliver purchase and ticket emails.
Questions
If you have any questions about our Privacy Policy, you can contact us at info@ferra.cc.
Acceptance and consent
The user declares that they have been informed of the terms regarding the protection of personal data, accepting and consenting to the processing of such data by Ferra in accordance with this Privacy Policy.