Privacy Policy

1- Introduction

1.1. When using the services offered by GG Corporate (GOGAIN) (hereinafter “the Company”), particularly through its Platform, the Company collects and processes personal data. Personal data is any information relating to an identified or identifiable natural person (for example: surname, first name, email address, identifier, location data, etc.).

1.2. The Company attaches great importance to protecting its users' privacy and personal data. This policy sets out how personal data is collected, processed and used under the Company's sole or shared responsibility, in compliance with applicable regulations such as the General Data Protection Regulation (GDPR).

1.3. This policy informs users of the services offered by the Platform about the collection, processing, use and sharing of their personal data, as well as their rights and how to exercise them.

1.4. The Company reserves the right to amend this policy at any time in response to technical, commercial or legal developments. These changes take effect on the date they are published on the Platform. Users are invited to review this policy regularly. Any use of the Platform after the changes are published constitutes acceptance of them.

This policy supplements the legal notice and the Terms of Use, which users can consult at the following addresses:

https://go-gain.com/legal/tc https://go-gain.com/legal/mentions-legales

2- Principles for collecting and processing personal data

In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), GG Corporate (GOGAIN) applies the following principles to ensure transparent and secure management of personal data:

1. Lawfulness, fairness and transparency : Data is processed lawfully and transparently.

2. Specific purposes : Data is collected for specified, legitimate and clearly defined purposes, without being used for other incompatible purposes.

3. Data minimisation : The information collected is limited to what is strictly necessary to achieve the stated purposes.

4. Data accuracy : Measures are taken to keep data accurate and up to date.

5. Limited retention period : Data is retained only for the period strictly necessary for the intended purposes.

6. Security and confidentiality : Appropriate technical and organisational measures protect data against unauthorised access, loss or alteration.

Your data may be processed only if at least one of the following conditions is met:

• Explicit consent for one or more specific purposes.

• Necessity for the performance of a contract or pre-contractual steps.

• Compliance with a legal or regulatory obligation.

• Protection of the vital interests of the data subject or another natural person.

• Necessity for performing a task in the public interest or exercising official authority.

• A legitimate interest pursued by GG Corporate (GOGAIN) or a third party, unless the data subject's fundamental rights override it.

3- Data collected and purposes of processing

3.1. Data collected

As part of its services, GG Corporate (GOGAIN) may collect the following personal data:

• Identification data : Surname, first name, email address and phone number.

• Technical data : Type of device used (computer, smartphone or tablet), operating system and device model.

• Physical activity data : Step count and distance travelled (through connected apps such as Apple Health or Google Fit, with consent).

• GPS data : Distance recorded to calculate points within sports programmes, without retaining precise locations.

• Shared content : Photos and videos voluntarily submitted during challenges or events.

3.2. Purposes

This data is collected for the following purposes:

• Administrative and technical management of user accounts.

• Personalising services to meet users' needs.

• Tracking physical performance and personal goals.

• Continually improving features and content.

3.3. Collection methods

Data is collected:

• Automatically while browsing (e.g. device used, approximate location).

• Voluntarily when creating an account, taking part in a challenge or using specific features.

• Through third-party platforms (Apple Health, Google Fit) when the user has explicitly enabled data sharing.

3.4. Retention period

Data is retained for a maximum of 5 years after the user's last interaction. Some information may be retained longer due to legal or regulatory requirements.

4- Data controller

Data controller :

• Company: GG Corporate (GOGAIN)

• Address: 40 Avenue Bosquet, 75007 Paris

• Registration number: 985 068 642

For any question or request relating to data processing, contact us at: Email: app@gogainparis.com

5- Users' rights

Users have the following rights under the GDPR:

1. Right of access : View your personal data and how it is processed.

2. Right to rectification : Correct inaccurate or incomplete information.

3. Right to erasure : Request deletion of your data under certain conditions.

4. Right to data portability : Receive your data in a structured format or transfer it to another provider.

5. Right to restriction : Temporarily restrict the processing of your data.

6. Right to object : Object to the use of your data for specific purposes.

7. Right to post-mortem instructions : Specify how your data should be processed after your death.

8. Right to withdraw consent : Withdraw your consent to certain processing at any time.

To exercise your rights, contact us at: app@gogainparis.com

6- Data security and sharing

6.1. Security measures

GG Corporate (GOGAIN) applies rigorous measures to ensure the security and confidentiality of your data. Access is restricted to authorised personnel and systems are protected by advanced technologies.

6.2. Data sharing

Your data may be shared in the following circumstances:

• With our service providers : Technical providers responsible for hosting, payments or notifications.

• To comply with a legal obligation : Disclosure to the competent authorities following a formal request.

• With partner organisations : If the user accesses our services through an organisation (e.g. a company), it may have access to limited data.

7- Changes to this policy

GG Corporate (GOGAIN) reserves the right to amend this policy at any time. Changes will be published on our website and apply as soon as they are posted. Users are invited to consult this page regularly to stay informed.

GOGAIN Mobile App: What personal data do we collect?

Connection Information

When you use our app, we collect certain information related to your connection. Our servers automatically record this data each time you access the app. In addition to your credentials (email and password) and personal information (surname and first name), we collect technical details about your device, such as its operating system, version, model and manufacturer name.

Physical activity (step count)

For the iOS and Android apps, we access the step count recorded by your operating system. This information is used to calculate points within our programmes. We ask for your permission to access your walking data through Apple Health and Google Fit. If you use a connected device, such as a watch or activity tracker linked to Health Kit or Google Fit, that data is also included.

GPS data

We use GPS data to measure the distance travelled during physical activity. Although the distance is recorded and converted into points, we do not retain the associated precise location information.

Challenge-related media

When taking part in our challenges, you can share a photo or video. If you choose not to share this media, it remains strictly private and for your personal use only.

Access to your personal data

Your personal data is used exclusively to ensure the proper functioning of the services offered by GOGAIN. Only authorised personnel, including customer service, support and technical assistance teams, may access this information in the course of their duties.

When do we share your data?

Data storage

Your data is hosted on secure infrastructure located in Europe. This ensures reliable access in line with our privacy policy and contractual commitments with our providers.

Exceptional circumstances

In exceptional circumstances, such as a court request, your data may be disclosed to the competent authorities.

Use by organisations

If you use our app through an organisation (e.g. a company or employer), it may have access to some of your personal data. It may also collect information about you for its own purposes. We recommend consulting your organisation's privacy policy to understand how this data is used.

Exercising your rights with GOGAIN

Under the European General Data Protection Regulation (GDPR), you have the following rights:

1. Right of access : Check whether GOGAIN processes your data and obtain information about that processing.

2. Right to rectification : Request the correction of inaccurate or incomplete information.

3. Right to erasure : Request deletion of your data under certain conditions (e.g. unnecessary data or unlawful processing).

4. Right to restriction of processing : Request a temporary suspension of processing in specific cases (e.g. disputing the accuracy of the data).

5. Right to data portability : Receive your data in a structured format or transfer it to another provider.

6. Right to object : Object to the processing of your data for certain purposes. GOGAIN will stop this processing unless there are compelling legitimate grounds.

7. Post-mortem rights : Determine how your data should be retained or deleted after your death.

8. Right to withdraw consent : Withdraw your consent to processing at any time.

How can you exercise your rights?

For any request relating to your rights, please contact us at: Email: app@gogainparis.com

Note: This policy was updated on 19/11/2024. It may change. Updates will be published in our app and made available immediately.