PRIVACY POLICY

1. USER INFORMATION

Who is responsible for processing your personal data?

UTECH365 ÖU is the CONTROLLER of the USER's personal data and informs them that these data will be processed in accordance with Regulation (EU) 2016/679 of April 27 (GDPR), and Organic Law 3/2018 of December 5 (LOPDGDD).

For what purpose do we process your personal data and why?

Depending on the form or platform from which we obtained your personal data, we will process them confidentially for the following purposes:

In the contact form:

- Respond to inquiries or any type of request made by the user through any of the contact methods available on the controller's website.
(based on the legitimate interest of the controller, art. 6.1.f GDPR)
- Conduct statistical analyses and market research.
(based on the legitimate interest of the controller, art. 6.1.f GDPR)

In the Newsletter form:

- Send newsletters, updates, offers, and online promotions.
(based on the consent of the data subject, art. 6.1.a GDPR)

In the app registration and user profile:

- Process personal identification and contact details (first and last name, national ID/identification number, and phone number).
- Verify and authenticate that the user is an active, legitimate member of the designated partner gym to prevent fraud or unauthorized account creation.
- Manage and facilitate gym services, including class and facility bookings, assignment and tracking of workout plans, and physical/automated access control to the gym premises.
- Contact the user regarding administrative, booking, or operational updates directly related to the gym service.
(based on the performance of a contract or service requested by the user, art. 6.1.b GDPR, and the legitimate interest of the controller and partner gyms in preventing fraud and managing security, art. 6.1.f GDPR)

How long will we keep your personal data?

They will be kept no longer than necessary to fulfill the purpose of the processing or for as long as legal requirements dictate their custody, and when no longer needed, they will be deleted using adequate security measures to ensure anonymization or complete destruction. For app accounts, data will be kept active while the user maintains an account and an active relationship with the affiliated gym, and subsequently during statutory limitation periods.

To whom do we provide your personal data?

No personal data will be communicated to third parties, except:
- To the partner gym or sports facility where the USER is registered, as necessary to verify membership, manage bookings, oversee facility access, and deliver fitness services.
- When necessary for the development and execution of the processing purposes, to our technical and IT service providers (such as hosting, communications, or software infrastructure), with whom the CONTROLLER has signed data processing agreements compliant with current privacy laws.

What are your rights?

The rights of the USER are:
- Right to withdraw consent at any time.
- Right of access, rectification, portability, and deletion of their data, as well as restriction or objection to processing.
- Right to file a complaint with the supervisory authority (www.aepd.es) if you believe the processing does not comply with current regulations.

Contact details to exercise your rights:
UTECH365 ÖU
SAATNI, 2/2 - 26
10149 TALLIN, ESTONIA
E-mail: info@utech365.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by checking the corresponding boxes and entering data in fields marked with an asterisk (*) in the app forms or contact sections, expressly and freely agree that their data are necessary to process their request and access gym services, while inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER are accurate and agrees to communicate any changes.

The CONTROLLER informs that data requested through the application (such as name, ID number, and phone number) are mandatory to register and grant access to gym amenities and verification systems. If not provided, access to facilities, bookings, and assigned training cannot be guaranteed.

3. SECURITY MEASURES

In accordance with current personal data protection regulations, the CONTROLLER complies with all provisions of the GDPR and LOPDGDD for processing personal data under its responsibility, and explicitly with the principles described in Article 5 of the GDPR, ensuring lawful, fair, and transparent processing, adequate and limited to the necessary purposes.

The CONTROLLER guarantees that appropriate technical and organizational policies have been implemented to apply the security measures established by the GDPR and LOPDGDD to protect USERS' rights and freedoms, and has provided adequate information to enable them to exercise these rights.

For more information on privacy guarantees, you can contact the CONTROLLER at:
UTECH365 ÖU
SAATNI, 2/2 - 26
10149 TALLIN, ESTONIA
E-mail: info@utech365.com