Debbie Pyrenees Velo

July 5, 2025. "Debbie Pyrenees Velo" by Debra Kennedy.

Privacy Policy for Debbie Pyrenees Velo

Last Updated: May 10, 2026

Welcome to Debbie Pyrenees Velo! This Privacy Policy explains how Debra Kennedy ("we," "us," or "our") collects, uses, and protects your data when you visit and interact with our blog and photography website, located at Debbie Pyrenees Velo

We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Who We Are

Debra Kennedy operates the "Debbie Pyrenees Velo" website. You can contact us at: Debbie Pyrenees Velo

2. What Personal Data We Collect and Why

We may collect and process the following types of personal data:

Communication Data: If you contact us via email or through a contact form, we collect your name, email address, and the content of your message.
- Purpose: To respond to your inquiries, provide customer support, and communicate with you.
- Lawful Basis: Our legitimate interest in responding to communications and providing information about our services.
Comments Data: When you leave comments on our blog posts, we collect the data shown in the comments form, your IP address, and browser user agent string.
- Purpose: To help spam detection and to display your comment on the website.
- Lawful Basis: Your consent (by submitting the comment) and our legitimate interest in moderating comments and preventing spam.
Technical Data: We may collect technical data such as your IP address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access this website. This is typically collected through cookies and similar technologies.
- Purpose: To ensure our website functions correctly, to improve website performance, and for security purposes.
- Lawful Basis: Our legitimate interest in the proper administration and functionality of our website.
Usage Data: Information about how you use our website, including pages visited, links clicked, and the duration of your visit. This is often collected through analytics tools.
- Purpose: To understand how visitors use our website, to improve our content and user experience, and for statistical analysis.
- Lawful Basis: Our legitimate interest in improving our website and content.

We do not intentionally collect any Special Categories of Personal Data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

3. How We Collect Your Personal Data

We collect data in the following ways:

Direct Interactions: You may give us your identity and contact data by filling in forms or by corresponding with us by email or otherwise. This includes personal data you provide when you:
- Contact us with an inquiry.
- Leave a comment on a blog post.
Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, Browse actions, and patterns. We collect this personal data by using cookies and other similar technologies.
Third Parties: We may receive personal data about you from various third parties, such as analytics providers (e.g., Google Analytics).

4. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy here.

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation.
Where you have given your consent.

6. Disclosures of Your Personal Data

We may share your personal data with the following parties for the purposes set out above:

Service Providers: We use third-party service providers who assist us in operating our website and providing our services (e.g., website hosting, analytics services). These service providers are only permitted to process your personal data for specified purposes and in accordance with our instructions.
Analytics Providers: Such as Google Analytics, which helps us understand website traffic and usage patterns.
Legal Requirements: We may disclose your personal data if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or act in urgent circumstances to protect the personal safety of users of the website or the public.

We do not sell, rent, or trade your personal data to third parties.

7. International Transfers

We are based in France. Some of our third-party service providers may be located outside of the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the EU and the US. (Note: Privacy Shield is no longer active, replace with appropriate SCCs or other mechanisms if applicable).

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

For example, comment data is retained indefinitely unless you request its removal.

10. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

Request access to your personal data (commonly known as a "data subject access request").
Request correction of the personal data that we hold about you.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing of your personal data.
Request the transfer of your personal data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us at debiekennedy.cycling@gmail.com

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. Right to Lodge a Complaint

You have the right to make a complaint at any time to the relevant supervisory authority for data protection issues. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL).

We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

12. Changes to This Privacy Policy

We keep our Privacy Policy under regular review. This version was last updated on May 10, 2026. Historic versions can be obtained by contacting us.

Any changes we may make to our Privacy Policy in the future will be posted on this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Debbie Pyrenees Velo and debbiekennedy.cycling@gmail.com

Home