Privacy notice
Last updated: 16 October 2026. The Albanian version prevails; the English and Italian versions are courtesy translations.
| Controller | Mejdin Malhani (NUIS L91810020S), Rruga Riza Cerova, Pallati Colombo II, Kati i 1, Tiranë |
|---|---|
| Contact for privacy | info@thecyclistshome.al |
| Processor | HR Alba Sh.p.k., Tirana, for the technical operation of the planning service |
1. What this notice covers
This notice covers two things: (A) this website and its contact form, and (B) the coaching service for athletes who have signed up. The controller is the business named above. HR Alba Sh.p.k. runs the planning service on its behalf and acts as its processor.
2. Data we process, why, and for how long
| Data | Purpose and legal basis | Retention |
|---|---|---|
| Server logs: IP address, device and browser data, pages requested | Keeping the site secure and working (legitimate interest, Art. 6(1)(f) GDPR) | Up to 30 days |
| Contact form: name, email, role, message | Replying to you (your request, or our legitimate interest in answering). No marketing without your consent | Up to 12 months after the last exchange |
| Athlete profile: name, email, intervals.icu athlete ID, Telegram chat ID, weekly availability, year of birth and sex if not already in intervals.icu | Providing the coaching you asked for (Art. 6(1)(b)) | While you are coached; deleted within 30 days of your request or of your leaving |
| Training and health-related data: activities, HRV, resting heart rate, sleep, wellness and injury notes, weight | Your explicit consent (Art. 9(2)(a)), asked separately before we start | Same as the athlete profile |
| Telegram messages from the planning bot | Delivering plans and messages (Art. 6(1)(b)) | Kept by Telegram under its own rules; your chat ID is deleted with your profile |
| Invoices and accounting records, if you become a client | Legal obligation (Art. 6(1)(c)) | For the period required by tax and accounting law |
3. Health-related data and AI
To plan your week, the planning software reads your data from intervals.icu, stores the planning state on a private server and sends a summary of the data to an external AI service through OpenRouter, which routes the request to a model provider (currently DeepSeek and OpenAI models). These providers apply their own terms and may be located outside the EU/EEA and outside Albania.
Plans are produced inside limits calculated by software and checked automatically; the coach can change them. They are not decisions with legal or similarly significant effects. You can ask for a person to review your plan at any time. We ask for your explicit consent before processing health-related data, and you can withdraw it whenever you like.
4. Cookies and third parties on this site
This site sets no cookies, uses no analytics and loads no third-party scripts, fonts or maps: the fonts are served from this site. If this changes, we will update this notice and ask for consent where required.
5. Who receives data
- HR Alba Sh.p.k. and the IT support providers it uses (including a provider in India): technical operation of the planning service, as processor.
- SiteGround: hosting of this website and of the mailbox that receives contact messages.
- Hostinger: servers that run the planning software and store its state (servers in the EU).
- intervals.icu: source of your training data and the calendar where plans are written.
- Telegram: delivery of messages.
- OpenRouter and the AI model providers: drafting the sessions (see section 3).
- Accountants and tax advisers, where the law requires.
6. International transfers
The controller is based in Albania, which has no EU adequacy decision. Where required, transfers rely on Standard Contractual Clauses and other safeguards. AI providers reached through OpenRouter may process data outside the EU/EEA; this is part of the processing you consent to for the coaching.
7. Your rights
You can ask for access, rectification, erasure, restriction, portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Write to info@thecyclistshome.al; we reply within one month. We may ask you to confirm your identity.
8. Complaints
You can complain to the Albanian Information and Data Protection Commissioner (IDP), to the Italian Garante per la protezione dei dati personali, or to the data protection authority of your own EU/EEA country.
9. Young people
This website is not intended for people under 18. An athlete under 18 can be coached only with the authorisation of a parent or guardian.
10. Security
We restrict access to the systems that hold your data and use HTTPS for connections. No system is completely secure; if a breach affects you, we will notify you as the law requires.
11. Changes
We will update this notice if the service or the law changes. The date at the top shows the latest version.