LaIA privacy policy
Last updated: 5 October 2026
This is a translation for information purposes. If there is any discrepancy, the Spanish version prevails.
LaIA is under development. This policy describes how members' data will be processed once LaIA opens to the club with Garmin's official integration. What happens today, during development, is described in section 1.
1. Current status of the service
During development, LaIA only processes the data of the pilot participants: a small group of club members, who have consented to take part. The official Garmin integration is not active yet.
No data of any other member is processed until they have given their explicit consent.
2. Who is responsible for your data
- Data controller: CLUB TRIATLÓN LEGANÉS
- Tax ID (CIF): G88574793
- Address: C/ Aranjuez 59, 28914 Leganés (Madrid, Spain)
- Privacy contact: privacidad@trileganes.com
3. What data we will process
We will only process data of members who connect their Garmin Connect account to LaIA:
- Activities: sport, date, duration, distance, pace, laps and, when an activity needs to be analysed, its point-by-point record.
- Heart rate and intensity zones.
- Training load, fatigue, estimated fitness (such as VO2max) and race predictions.
- Recovery and wellness data provided by Garmin: heart rate variability (HRV), sleep, stress and training readiness.
- Perceived effort (1 to 10) when the member reports it.
- The workouts the club prepares for the member and publishes to their Garmin Connect calendar.
- The member's name and contact email.
Once the official integration is active, authorisation will take place on Garmin's own page and LaIA will not receive the member's Garmin password. LaIA will not store the GPS position of your activities.
Heart rate, HRV and recovery data are health data. Data protection law treats them as a special category and requires your explicit consent to process them.
4. What we will use it for
- Analysing your load and progress, so that the coaches you authorise can adjust your plan.
- Preparing workouts and sending them to your Garmin Connect calendar.
- Coordinating the club's training groups according to goals and level.
- If you connect your own AI assistant to LaIA, answering your questions about your training and, once you confirm, sending the sessions you request to your watch.
We will not use your data for advertising, sell it, or share it with third parties for commercial purposes. No automated decisions with legal effects on you will be made.
5. Legal basis
Your explicit consent (Articles 6(1)(a) and 9(2)(a) of the General Data Protection Regulation, GDPR). You will give it when connecting your Garmin account and may withdraw it at any time. Withdrawing it does not affect processing carried out before.
In a first stage, LaIA will only be open to adult members. If it is later opened to minors, this policy will be updated beforehand.
6. Who else will be able to see your data
- Club coaches who work with your group and whom you authorise.
- Technical providers that deliver the service, acting on the club's behalf and only for that purpose: Cloudflare (publishing this website and secure access to LaIA) and Zoho Mail (club email). Before LaIA opens to members, we will name here the provider of the server where the data is stored.
- The provider of the AI model that writes the summaries (currently Gemini, by Google). We will only send it your data if you give separate consent for this. If we change provider, we will update this policy beforehand.
- The AI assistant you choose to connect to LaIA (for example, Claude, by Anthropic). It will receive the data you ask for in each conversation, under your own account and that service's terms. Connecting it is optional and you can disconnect it at any time.
- Garmin, which originates the data and to which you authorise the connection.
Some of these providers may process data outside the European Economic Area, in the United States. In that case, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.
7. How long we will keep it
For as long as your account remains connected and you are a member. If you withdraw consent or leave the club, we will delete your data from LaIA within 30 days at most.
8. Your rights
You may ask us at any time to:
- Access your data.
- Correct it if it is inaccurate.
- Delete it.
- Restrict its processing.
- Receive it in a reusable format (portability).
- Object to its processing.
- Withdraw your consent.
Write to privacidad@trileganes.com with your name and the right you wish to exercise. We will reply within the one-month maximum set by the GDPR.
9. How to revoke access to your Garmin account
- From your Garmin Connect account, in the connected apps settings, by revoking LaIA's permission. Garmin's menus may change.
- Or by writing to privacidad@trileganes.com.
Once permission is revoked we will stop receiving new data. To delete data we already hold, use the right to erasure in section 8.
10. Security
Each member will authorise their own access separately, and only the coaches they authorise will see their data. Garmin access permissions will be stored encrypted, and the database keeps each member's data separate so that no one can see another member's data without authorisation.
If a security breach affects your data, the club will notify the Spanish Data Protection Agency and those affected as required by law.
11. Complaints
If you believe we are not handling your data properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
12. Changes to this policy
If we change this policy, we will publish the new version on this page with its date and notify members by email when the change affects how their data is used.