Your GDPR rights
Effective
GDPR compliance
Pumpeat applies Regulation (EU) 2016/679 (GDPR) and the French "Informatique et Libertés" Act as amended. This page summarizes your rights and how to exercise them.
Right of access
You can obtain confirmation that your data is being processed and request a copy of it. Part of this data is already accessible directly within the Application (profile, workouts, recipes).
Right to rectification
You can correct inaccurate or incomplete data about you directly from the "My profile" and "Personal data" sections of the settings.
Right to erasure
You can delete your account and all your data from the "Account management" section of the settings. Deletion takes effect within 30 days, except for data subject to legal retention obligations.
Right to restriction
You can request the temporary suspension of the processing of your data, for example if you contest its accuracy.
Right to object
You can object to processing based on the Publisher's legitimate interest by sending a motivated request by email.
Right to portability
You can request to receive your data in a structured, commonly used format, or to have it transmitted directly to another controller, where technically feasible.
Withdrawal of consent
For processing based on your consent (notifications, social sharing), you can withdraw that consent at any time from the corresponding settings, without affecting the lawfulness of previous processing.
How to exercise your rights
You can exercise these rights:
- Directly in the Application for actions available there (rectification, account deletion, notification management, activity hiding).
- By email to [email protected]. Indicate the nature of your request and include any element allowing us to verify your identity.
We undertake to respond within one month, extendable by two months for complex requests.
Complaint to the supervisory authority
If you consider that your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL) — www.cnil.fr — or with the data protection authority of your country of residence in the European Union.