Cookie Policy (EU)

1. Introduction

This Cookie Policy explains how RiderRank (“we”, “us”, “our”) uses cookies and similar tracking technologies on riderrank.com (the “Platform”). It forms part of and should be read alongside our Terms of Service & Privacy Policy, available at riderrank.com.

We are committed to transparency about our use of cookies. This Policy describes what cookies are, which ones we use, why we use them, and how you can control them. This Policy is issued in compliance with EU Regulation 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), and the Spanish Law 34/2002 (LSSI-CE) implementing the EU ePrivacy Directive 2002/58/EC.

2. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, tablet) by websites you visit. They are widely used to make websites function efficiently, improve user experience, and provide information to website operators. Cookies can be “first-party” (set by us directly) or “third-party” (set by a third-party service we use).

Cookies may be “session cookies” (deleted when you close your browser) or “persistent cookies” (remaining on your device for a defined period or until deleted). We also use similar technologies such as local storage tokens, which are governed by this Policy in the same manner as cookies.

3. Categories of Cookies We Use

We use four categories of cookies, set out below. Your consent is required for all categories except Strictly Necessary cookies. All cookies used on the Platform are listed in the table below, organised by category.

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, security, and load balancing. Without them, the Platform cannot operate correctly. These cookies do not require your consent under applicable law.

3.2 Analytics & Performance Cookies

These cookies help us understand how visitors interact with the Platform. This data is used in aggregate and pseudonymous form to improve the Platform. Your consent is required for this category.

Note: Google Analytics data is processed under a Data Processing Agreement with Google LLC. IP anonymisation is enabled within Google Analytics 4 by default for all EEA users. For further details see https://policies.google.com .

3.3 Functional Cookies

These cookies allow the Platform to remember choices you make (such as language preferences, map display settings, or your preferred route filters) to deliver a more personalised experience. They do not track your activity across other websites. Your consent is required for this category.

3.4 Store Platform Cookies (shop.riderrank.com)

The RiderRank Store at shop.riderrank.com is operated on a third-party e-commerce platform (the “Store Platform Provider”). When you visit the Store, the Store Platform Provider sets functional cookies strictly necessary for the operation of the shopping cart, checkout process, and customer authentication. Full provider details are published at riderrank.com/legal-terms/ .

3.5 Third-Party Map & Integration Cookies

The Platform integrates third-party mapping services (including Google Maps, Mapbox, and/or OpenStreetMap-based renderers) to display route data and GPX files. RiderRank does not control these third-party cookies. Your consent is required for this category. Links to relevant privacy policies: Google — policies.google.com | Mapbox — mapbox.com/legal/privacy | OpenStreetMap — osmfoundation.org .

Complete cookie register:

4. Lawful Basis for Cookie Processing

Strictly Necessary cookies: Article 6(1)(b) — performance of contract, and Article 6(1)(f) — legitimate interests in operating a secure and stable platform.

Analytics, Functional, and Third-Party Map cookies: Article 6(1)(a) — your freely given, specific, informed, and unambiguous consent via our Cookie Consent Panel.

Consent is voluntary. Refusing consent for non-essential cookies will not prevent you from accessing the core features of the Platform, though some functional preferences and map integrations may be unavailable.

5. Cookie Consent & Management

5.1 Consent Panel

On your first visit to the Platform, a cookie consent banner will be displayed. You may accept all cookies, accept only Strictly Necessary cookies, or configure your preferences by category using our Cookie Settings panel, accessible at any time at riderrank.com/cookie-policy-eu/ .

5.2 Withdrawing Consent

You may withdraw or modify your consent at any time by visiting riderrank.com/cookie-policy-eu/ and updating your preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Upon withdrawal, non-essential cookies will be deactivated on your next page load.

5.3 Browser Controls

You may also control cookies through your browser settings. Most browsers allow you to:

View, block, or delete cookies that have already been set;

Block third-party cookies;

Set rules for specific websites.

Note that disabling all cookies may impair Platform functionality, including login and authentication.

5.4 Opt-Out Links for Third-Party Analytics

To opt out of Google Analytics tracking specifically, you may install the Google Analytics Opt-Out Browser Add-on, available at tools.google.com/dlpage/gaoptout .

6. Cookie Retention Periods

Cookies are retained for the periods specified in the table in Section 3. Session cookies are automatically deleted when you close your browser. Persistent cookies expire on the date stated or may be deleted earlier via browser controls or the Cookie Settings panel.

RiderRank reviews and updates cookie retention periods annually to ensure they remain proportionate to the purposes for which the cookies are used, in accordance with Article 5(1)(e) GDPR (storage limitation principle).

7. Data Transfers

Some cookies set by third-party services (notably Google LLC and Mapbox Inc.) may involve the transfer of data to the United States or other countries outside the EEA. Such transfers are carried out under Standard Contractual Clauses approved by the European Commission, or other applicable transfer mechanisms pursuant to GDPR Chapter V.

RiderRank does not transfer data collected via Strictly Necessary or Functional first-party cookies outside the EEA unless required by law.

8. Your Rights

As a data subject under GDPR, you have the right to:

Access personal data collected about you via cookies (Art. 15 GDPR);

Rectify inaccurate personal data (Art. 16 GDPR);

Erasure of personal data where no overriding legal basis exists (Art. 17 GDPR);

Restriction of processing in certain circumstances (Art. 18 GDPR);

Data portability for data processed by automated means on the basis of consent (Art. 20 GDPR);

Object to processing based on legitimate interests (Art. 21 GDPR);

Withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal (Art. 7(3) GDPR).

To exercise any of the above rights, contact us at legal@riderrank.com with the subject line “Data Protection Request”. We will respond within 30 calendar days. You also have the right to lodge a complaint with the AEPD at aepd.es .

9. Changes to This Policy

RiderRank reserves the right to update this Cookie Policy at any time to reflect changes in technology, applicable law, or our use of cookies. When material changes are made, we will update the “Last Updated” date at the top of this Policy and display a notice on the Platform. Where required by law, we will seek fresh consent for any new cookie categories introduced.

Your continued use of the Platform after the effective date of any updated Cookie Policy constitutes your acceptance. If you do not accept the updated Policy, you must cease using the Platform.

10. Contact