FWT Fan Zone Privacy Notice

1. Who is responsible

Controller. The FWT Fan Zone is operated by FWT Management SA, Route de Verbier 115, 1936 Verbier, Switzerland ("FWT", "we", "us"). FWT is responsible for the processing of personal data described in this notice.

Contact. For privacy questions or requests, write to us at the postal address above or email fans@freerideworldtour.com. Fan and privacy requests sent there are handled by FWT internally.

2. What this notice covers

This notice applies to the FWT Fan Zone website and app, including its public pages and campaign pages. It covers two stages, which involve different data:

Stage A: pre-registration. Before the membership opens, you can leave your email address on the Coming Soon page to be invited when the Fan Zone launches. This does not create an account and does not ask for a password.

Stage B: membership. Once you create a Fan Zone account, you can use membership features such as predictions, quizzes, rankings, videos, comments and leagues.

This notice does not cover the main Freeride World Tour website or other FWT services, which have their own privacy information. Using a website is not, by itself, consent to any processing described here.

3. Data we process at pre-registration (Stage A)

What you give us. Your email address, your confirmation that you are 16 or older, and, only if you tick the separate box, your consent to receive FWT news by email, with the date and the version of the consent wording.

What is recorded automatically. The date of your pre-registration, a status (for example, waiting for invitation), and where you came from: the campaign tags in the link you used (such as source, medium, campaign, content and term) and the domain of the referring website only, not the full address. These tags are read from the link you clicked and sent together with your email when you submit the form; they are not stored in your browser by the Coming Soon page.

What we do not collect at this stage. No password, no account, no partner offer consent, no date of birth and no other profile details.

Emails at this stage. When your pre-registration is saved for the first time, we send one transactional confirmation email so you know your request reached us. When membership officially opens, we send one launch invitation to the address you gave us. These service emails are part of handling your invitation request; they are not marketing, and they do not depend on the optional news consent. Duplicate requests do not trigger further emails.

4. Data we process for members (Stage B)

Account. Email address, first name, country, language, and a password. Passwords are handled by our authentication provider and stored only in securely hashed form; FWT staff cannot read them.

Optional details. A mobile number, a profile photo, a chosen avatar, answers to optional profile questions, and display and notification preferences.

Communication choices. Separate records, each with its date, of whether you agreed to FWT news by email, to partner offers, and to WhatsApp updates. Each choice is made separately and can be changed at any time in Settings.

Activity. Predictions, quiz answers, votes, points and their history, rankings, patches, league memberships, comments you submit, videos you view, offers and rewards you view or redeem, campaign entries, and how you first arrived at the Fan Zone (attribution).

Interest signals. We derive simple interest indicators from your activity, such as riders you follow most or which discipline you lean towards. These are used to order content for you and to understand our audience. Answers you give yourself always take priority over derived signals.

Purchases. If you buy from the FWT shop with the same email address as your Fan Zone account, we may record the order date, value and number of items to award points.

Technical and security data. Sign-in events, IP address and device information in server and security logs, and error reports needed to keep the service secure and working.

5. Why we use data, and on which basis

Swiss data protection law (FADP) applies to our processing. Where the EU General Data Protection Regulation (GDPR) applies, for example because we offer the Fan Zone to people in the EU, we rely on the legal bases below.

Inviting you and running your membership. Handling your pre-registration request, creating and running your account, games, rankings and points. Basis: steps taken at your request and performance of our agreement with you (GDPR Art. 6(1)(b)).

FWT news by email. Only if you opted in, separately from your invitation request. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time. Your invitation does not depend on it.

Partner offers. Only for members who opted in separately. Basis: your consent. We never enrol you in partner offers at pre-registration.

WhatsApp updates. Only for members who opted in separately and provided a mobile number. Basis: your consent.

Security, fraud and abuse prevention. Rate limits, spam protection, fair play checks and logs. Basis: our legitimate interest in a secure, fair service (Art. 6(1)(f)).

Attribution and aggregate statistics. Understanding which campaigns bring fans, and how the Fan Zone is used, in aggregate. Basis: our legitimate interest (Art. 6(1)(f)). Campaign tags are read from the link you used and recorded when you submit a form or create an account.

Legal obligations. Keeping records where the law requires it. Basis: legal obligation (Art. 6(1)(c)).

6. Who can see your profile

We do not show your email, last name or contact details to other fans. Members may have a public profile showing only display information: avatar or approved photo, first name, country, member number, points, rank, patches, leagues and nation. You can switch your public profile off in Settings. Profile photos are reviewed by FWT before appearing publicly, and location data is removed from photos at upload.

7. Who receives data

We do not sell your data. We share data only with service providers who process it on our behalf, under contract and for the stated purpose:

Hosting, database and authentication: the Fan Zone is built and hosted on Lovable Cloud, which provides the managed database and authentication services the app runs on.

Email delivery: Resend, for the transactional emails described in this notice (pre-registration confirmation, launch invitation and member service emails). Marketing emails are sent only to people who opted in separately.

Shop: Shopify, where FWT's shop runs, for matching purchases to members.

Video: embedded videos are played through YouTube or Vimeo when you choose to watch them.

Messaging: a WhatsApp business provider, only if WhatsApp updates are enabled and you opted in.

We may also disclose data where required by law or to protect rights and safety.

8. Transfers outside Switzerland and the EU

Some of the providers above may process data in countries outside Switzerland and the EU. Any such transfer must be covered by the safeguards Swiss and EU law require, such as standard contractual clauses or an applicable data privacy framework. Because provider arrangements change, we confirm the current destination countries and the safeguards in place for each provider on request: email fans@freerideworldtour.com and we will send you the up-to-date list.

9. How long we keep data

We keep data only as long as needed for the purposes above. Criteria:

Pre-registration. Until you are invited and either join or decline, or until you ask us to remove you, whichever comes first. A pre-registration that is never activated is kept for a maximum of 12 months from the day you submitted it and is then deleted automatically. You can ask for removal at any time by emailing fans@freerideworldtour.com.

Account data. For as long as you have an account. You can delete your account in Settings, which removes your profile and associated activity from the Fan Zone. Some records may be kept for a limited time where needed for security, legal obligations or to settle claims, and backups are overwritten on a rolling basis.

Campaign entries. For the duration of the campaign and its prize draw, then removed from active use.

Marketing consent records. For as long as needed to demonstrate your choice.

Security logs. For a limited period needed to investigate abuse and keep the service secure.

10. Your rights

Depending on the law that applies, you can ask to access your data, correct it, delete it, restrict or object to its processing, and receive data you provided in a portable format. You can withdraw consent at any time, without affecting earlier processing. Members can view and correct most data and change communication choices in Settings, and every marketing email contains an unsubscribe link.

To exercise your rights, email fans@freerideworldtour.com or write to the postal address in section 1. We may need to verify your identity.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, to the data protection authority in your EU country of residence, work or the place of an alleged infringement.

11. Age

The Fan Zone is for people aged 16 and over. You confirm that you are 16 or older both when you pre-register and when you create an account. We do not collect dates of birth and we do not knowingly collect data from younger children.

Because members can be 16 or 17, we do not build advertising profiles of our audience and we do not allow targeted advertising based on Fan Zone activity. Any future measurement of advertising effect is aggregate, consent-based and never used to target individual minors.

12. Changes

We will update this notice when our processing changes, and show the new version date here. Where changes are significant, we will tell members.

13. Measurement and advertising trackers

We plan to use Google Analytics 4 to understand how the Fan Zone is used, and the Meta Pixel to measure the aggregate effect of our advertising. Neither is active today: no measurement or advertising tag loads on the Fan Zone, and nothing is sent to Google or Meta.

If and when we enable them, each will load only after your own separate, granular consent, which you can give, refuse or withdraw at any time through the measurement choices on the site. Accepting FWT news by email never counts as consent to these trackers, and refusing them never affects your membership or your invitation.

There is no separate GDPR policy: this notice covers both Swiss and, where applicable, EU data protection law.