Privacy policy

Update: August 12, 2025

Reference language: the French version is authoritative. Translations are provided for information purposes only; in the event of any discrepancy, the French version shall prevail.

1) Data controller

dubraquet sàrl, Rue du Commerce 96, 2300 La Chaux-de-Fonds, Switzerland. Contact for data protection: ride@aurora-gravel.com.

2) What data?

Depending on your interactions :

• Technical and logging data: IP address, date/time, pages viewed, session identifiers, browser/device information, errors and server logs.
• Forms: surname, first name, e-mail, telephone, organization/media, and all contact details needed to process the request, plus a message; for merchandising: list of items required (no online payment).
• Newsletter: e-mail address and first name.
• Analytics: aggregate audience measurement (see § 6) and strictly necessary/comfort cookies (see § 5).

3) Purpose

• Operate and secure the site (hosting, security, abuse prevention).
• Respond to your requests (contact, press, merchandising).
• Send newsletter if you subscribe (unsubscribe at any time).
• Measure the site's audience in order to improve it (non-marketing statistics).

4) Bases and interest

We process data for :

• executing or preparing a contract (responding to your requests, merchandising without online payment)
• legitimate interests (operations, security, usage statistics)
• your consent (newsletter, and where applicable for optional processing).

5) Cookies and similar technologies

We only use cookies that are necessary for operation/convenience (e.g. language selection, session) and for non-marketing statistics. You can refuse or delete cookies via your browser settings. If we were to use non-essential cookies (e.g. for marketing purposes), we would ask for your prior consent.

6) Audience measurement

We use Google Analytics, configured in a privacy-friendly way: anonymized IP, no advertising reports, no marketing retargeting, limited retention, and aggregated data for statistics. You can object by adjusting your browser settings (block/delete cookies) or via opt-out modules.

7) Hosting and subcontractors

• Hosting: Infomaniak (Switzerland).
• CDN: BunnyCDN (distribution of static content for faster loading times).
• Analytics: Google [Ireland/LLC]. These service providers act as subcontractors in accordance with our instructions and contractual measures.

8) Transfers abroad

Some technical data may be transferred to other countries - including the US and EU (e.g. via CDN, Newsletter or Analytics).

9) Shelf life (examples)

• Technical logs: ~12 months (safety/diagnostics).
• Requests by form: processing time + 24 months (follow-up), unless there is a longer obligation.
• Newsletter: until unsubscribed.
• Analytics statistics: 24 months, then aggregated data.

10) Your rights

You can request access, rectification or deletion of your data. You can object to statistics or withdraw your consent (newsletter). To exercise your rights: ride@aurora-gravel.com. We must verify your identity before replying.

11) Safety

Proportionate technical and organizational measures (access control, encryption in transit, backups, logging).

12) Data breaches

In the event of a major security incident, we will assess the impact and inform the appropriate persons and authorities if required by law.

13) Contact and claims

Data protection questions: ride@aurora-gravel.com. Supervisory authority: Swiss Federal Data Protection and Information Commissioner (FDPIC).

14) Updates

We may change this policy at any time. The published version applies.