Terms of Service and Privacy Policy

This Privacy Policy outlines how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). We are committed to safeguarding your privacy and ensuring transparency in how we manage your information. By using our application, you consent to the practices described in this policy, including the use of Google Analytics, email communication, and Invisible reCAPTCHA for security purposes.

1. Data Controller
For the purposes of GDPR, the data controller is SienaFit, responsible for determining how and why your personal data is processed. If you have any questions or concerns regarding data privacy, you can contact us at [email protected].

2. Information We Collect
When you use our application, we may collect the following types of personal data:

2.1 Information provided by you:
Personal data such as name, email address, phone number, and any other information you provide during registration or use of our services.

2.2 Automatically collected data:
Usage data including IP address, browser type, device information, pages viewed, and interaction with our application, collected through cookies and similar technologies like Google Analytics.

2.3 Google Analytics:
We use Google Analytics to monitor and analyze application traffic and user behavior. Google Analytics collects data such as device information, operating system, browser type, IP address, and time spent on various pages. This information helps us improve the user experience. For more details, please review Google’s Privacy Policy here.

2.4 Cookies and Tracking Technologies:
Cookies are used to enhance your experience and for analytics purposes. You have the right to manage your cookie preferences at any time through the settings on your device.

2.5 Invisible reCAPTCHA:
We implement Google's Invisible reCAPTCHA to protect our site from spam and abuse. This service collects hardware and software information such as device and application data, as well as IP addresses, and it is subject to Google's Privacy Policy and Terms of Use.

3. Legal Basis for Processing Personal Data
We process your personal data under the following legal bases:

3.1 Performance of a contract:
We use your personal data to fulfill contractual obligations, such as providing the services or features you request.

3.2 Legitimate interest:
We process data to improve the quality of our services, ensure the security of our systems (including the use of Invisible reCAPTCHA), and send you relevant information about updates or changes to our services.

3.3 Consent:
When necessary, we obtain your consent for specific processing activities such as the use of cookies for analytics or sending marketing emails.

3.4 Compliance with legal obligations:
We may process your data if it is necessary to comply with legal obligations or requests from authorities.

4. How We Use Your Information
The data we collect may be used for the following purposes:

4.1 To provide and improve our services:
Ensuring the proper functionality of the application, improving user experience, and analyzing usage patterns.

4.2 Communication:
Sending service-related emails, responding to inquiries, and providing updates. You will always have the option to opt-out of marketing communications.

4.3 Security and fraud prevention:
Using Invisible reCAPTCHA to protect our application against fraudulent activity and spam.

4.4 Analytics:
Using Google Analytics to gather insights on how users interact with our application, allowing us to optimize content and performance.

5. Sharing of Data
We will not share your personal data with third parties except in the following situations:

5.1 Service Providers:
We may share your information with trusted third-party providers (e.g., Google Analytics) to support the operation of our application. These providers are obligated to process your data in accordance with GDPR and our instructions.

5.2 Legal obligations:
If required by law or a legal process, we may share your data with authorities or regulatory bodies.

5.3 Business transfers:
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction.

6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. The retention period may vary depending on the nature of the data and the purpose for which it is processed.

7. Your Rights Under GDPR
As a user, you have the following rights regarding your personal data:

7.1 Right to access:
You have the right to request a copy of the personal data we hold about you.

7.2 Right to rectification:
You can request corrections to inaccurate or incomplete data.

7.3 Right to erasure (right to be forgotten):
You can request the deletion of your personal data under certain conditions.

7.4 Right to restrict processing:
You can request a temporary halt to the processing of your personal data under specific circumstances.

7.5 Right to data portability:
You can request that your data be provided to you or another service provider in a structured, commonly used, and machine-readable format.

7.6 Right to withdraw consent:
Where processing is based on your consent, you have the right to withdraw it at any time without affecting the legality of the processing done before the withdrawal.

7.7 Right to object:
You can object to the processing of your personal data based on legitimate interests or direct marketing purposes.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with GDPR.

8. Data Security
We take reasonable measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), we will ensure that such transfers are conducted in compliance with GDPR, including by relying on appropriate safeguards such as Standard Contractual Clauses.

10. Use of Google Analytics and Invisible reCAPTCHA
We use Google Analytics and Invisible reCAPTCHA as part of our service:

Google Analytics helps us understand how users interact with our application. Google processes this data on our behalf, and you can opt-out of Google Analytics by installing the Google Analytics opt-out browser add-on.

Invisible reCAPTCHA is used to protect our application from spam and fraud, and it is subject to Google's Privacy Policy.

11. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page, and, where appropriate, we will notify you by email. We encourage you to review this policy regularly to stay informed about how we protect your personal data.

12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

[email protected]

This Privacy Policy was last updated on 22/09/2024.