Last Updated: 2nd January 2024
BridgeAthletic, Inc. (“BridgeAthletic”, “we”, “our” or “us”) has created this Data Privacy Framework Program Notice (“Notice”) to describe its standards and procedures for handling Personal Information in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF ,and the Swiss-U.S. Data Privacy Framework (collectively the “DPF”).
We obtain and process Personal Information from the European Economic Area (“EEA”), the United Kingdom and Switzerland in different capacities:
As a Controller, we collect and process EEA, UK and Swiss Personal Information directly from individuals, either via our publicly available apps or websites (including https://www.bridgeathletic.com), or in connection with our customer, reseller, partner, and vendor relationships.
BridgeAthletic commits to subject to the Principles all Personal Information received from the EEA, the UK or Switzerland in reliance on the DPF as a Controller.
We remain responsible for the processing of Personal Information received under the DPF and subsequently transferred to a third party acting as a Processor if the Processor processes such Personal Information in a manner inconsistent with the Principles, unless we prove that we are not responsible for the event giving rise to the damage.
BridgeAthletic takes reasonable and appropriate precautions, taking into account the risks involved in the processing and the nature of the Personal Information, to help protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction.
If we intend to use your Personal Information for a purpose that is materially different from the purposes for which it was originally collected or subsequently authorized, or if we intend to disclose it to a third party acting as a Controller not previously identified, we will offer you the opportunity to opt out of such uses and/or disclosures where it involves non-sensitive information or opt in where sensitive information is involved.
You have the right to access to the Personal Information we maintain about you and to correct, amend or delete that information when it is inaccurate or has been processed in violation of the Principles by sending a written request as indicated in “Contact Us” below. We will review your request in accordance with the Principles, and may limit or deny access to Personal Information as permitted by the Principles.
We conduct an annual self-assessment of our practices regarding Personal Information intended to verify that the assertions we make about our practices are true and that such practices have been implemented as represented.
In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), BridgeAthletic commits to resolve complaints about our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF, the UK extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. EU, UK, and Swiss individuals with inquiries or complaints should first contact BridgeAthletic by utilizing the information at the bottom of this policy.
BridgeAthletic has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.
If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
BridgeAthletic is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. In certain situations, BridgeAthletic may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
This Notice may be amended consistent with the requirements of the DPF. When we update this Notice, we will also revise the “Last Updated” date at the top of this document. Any changes to this Notice will become effective when we post the revised version on our website.
If you have any questions, concerns or complaints regarding our privacy practices, or if you’d like to exercise your choices or rights, you can contact us:
via email at firstname.lastname@example.org; or
by mailing to BridgeAthletic, Inc., P.O. Box 610123, Redwood City, CA 94061