Last updated:
May 12, 2024
AstaCorp OÜ (“we”)
welcomes you. This Privacy Notice
(“Privacy Notice”) applies to our
application (“App”) available on the
App Store following the link.
The
Privacy Notice describes which of your personal
data we collect,
how we store,
process, and use it, and
what happens when you use
the App.
Data Received From Third Parties
Data Sharing With Third Parties
European Economic Area Residents
We
are the controller
of your personal
data processed through the App.
This means that we determine
the purposes and means of
personal data processing.
|
Name |
AstaCorp OÜ |
|
|
Registry code |
16844483 |
|
|
Address |
Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551 |
|
|
Email |
[email protected] – for general inquiries |
|
|
[email protected] – for privacy
inquiries |
When
you visit the App, you
become our user (“User”).
We
divide the Users into categories
so you can
easily find details about the
processing of your personal data.
Pay attention that you can
fall into several categories depending on your
actions.
|
Type of User |
Description |
|
Registered User |
User who created
an account |
|
Feedback Provider |
User who leave
feedback |
|
Please note!
We do not knowingly process the personal data of Users
under the age of 18. If
you are such a User or the legal representative
of such a User, please contact us. |
|
We
receive your data when you
visit the App and interact
with it, depending on your
actions on the App.
You
can change your personal data
on the App
by exercising your right to
rectification or by the App’s
functionality. Please note that the
same lawful basis and storage
terms apply to the changed
data.
We
may also receive data from third parties. It depends
on your settings
and the features
you use.
To
process your personal data, we rely on
the following lawful bases:
● performance of the contract — for the processing of personal
data necessary for the negotiating
on, conclusion, and performance of a contract (mainly, the
Terms of Use) with you;
● legitimate interest — for the processing necessary for the development
of our services,
taking into consideration your interests, rights, and expectations;
● consent — for additional
specific purposes.
When you visit the App, we
collect some data automatically. We collect some
technical data about the Users
to optimize performance, debug issues, and enhance
features while ensuring security and privacy to
improve the overall user experience.
|
Data |
Reasons for processing |
Lawful basis |
|
Information about the сoarse
location (country) |
The optimization
of the performance, debugging, enhancement of the features’ proper functioning, administering and improvement of the App |
Legitimate interest |
|
Technical device information and network information
(including user ID) |
||
|
Data storage |
||
|
We store
the data for 3 years from
its collection |
||
We
collect some of your personal
data when you download and
register in the App.
|
Data |
Reasons for processing |
Lawful basis |
|
Name |
To personalize
your account |
Legitimate interest |
|
Reasons for using the
App |
||
|
Gender |
To calculate
portions and provide you with
relevant information |
Performance of the contract |
|
Age |
||
|
Height |
||
|
Weight |
||
|
Level of physical activity |
||
|
Photo of the completed
task |
To confirm
your task is completed |
|
|
Data storage |
||
|
We store
your data until you delete
your account |
||
We
collect some of your personal
data when you provide us
with your feedback for using
the App.
|
Data |
Reasons for processing |
Lawful basis |
|
Text of the feedback |
To improve
the App |
Legitimate interest |
|
Data storage |
||
|
We store
your data until you delete
your account |
||
We
may receive some personal data
from third parties.
The
amount of data collected, the purposes, and
the lawful basis for processing
are determined by the respective
privacy documents of these third
parties.
|
Third party |
Privacy documents |
|
Google |
|
|
AWS |
|
|
Apple |
In addition, we receive some personal data from Apple, Inc.
|
Data |
Reasons for processing |
Lawful basis |
|
Email |
To create
you an account |
Performance of the contract |
|
User ID |
||
|
Сonfirmation of the transaction |
To confirm
your subscription |
|
|
Data storage |
||
|
We store
your data until you delete
your account |
||
We
can share your personal data
with third parties without any harm to
you and in
full compliance with applicable law. In addition,
we have implemented
organizational and technical measures to ensure the
security of personal data during
data transfer to third-party.
|
Third parties |
Description |
|
Analytics tools |
We use analytics tools to understand and promote our
business. |
|
Messengers |
We use messengers to communicate with you in ways
that are convenient for you. |
|
Contractors, and service providers
on the App |
We cooperate
with service providers and contractors to provide you with
their services, operate, develop, and improve the
features and functionality of the App, fulfill
your support requests, complete payment transactions, etc. |
|
Providers of the services our team uses |
We use
CRM systems, messengers, and other services
in our organisation to provide you with
our services. |
|
State authorities, courts, law enforcement agencies, etc |
We may be obliged to
transfer some of your data
to tax authorities, courts, law enforcement agencies, and other governmental bodies: ●
to comply
with a government request, court order, or applicable
law; ●
to prevent
unlawful use of the App; ●
to protect
against claims of third parties; ●
to help prevent or investigate
fraud. |
|
To get a
detailed list of the third-party
recipients of your personal data, contact us. |
|
To share your data, we rely
on the following
lawful bases, depending on the
case: consent, compliance with the law, and
performance of a contract.
We
apply a variety of security measures
appropriate to the possible risks.
|
Organisational measures |
|
|
Non-disclosure agreements (NDA) |
Internal policies and
instructions |
|
Technical measures |
|
|
Two-factor authentication |
Encryption technologies during
storage and transmission |
|
Firewalls |
Backup |
You,
as a data subject (individual), have the right
to interact with your data
directly or through a request to us. This
section describes these rights and
how you can
exercise them depending on your
residency.
|
Right |
Description |
|
Right to access |
You can request an explanation
of the processing of your personal data. |
|
Right to rectification |
You can change the data
if it is
inaccurate or incomplete. |
|
Right to erasure |
You can send us a request
to delete your personal data from our
systems. We will remove them
unless otherwise provided by law. |
|
Right to restrict the
processing |
You may prohibit us from
processing your personal data. |
|
Right to data portability |
You can request all the
data you provided to us
and request to transfer data
to another controller. |
|
Right to object |
You may object to the
processing of your personal data. |
|
Right to withdraw consent |
You can withdraw your consent at any
time. |
|
Right to file a complaint |
If your request was not
satisfied, you could file a complaint to the regulatory body. |
|
To exercise
your rights, contact us. |
|
Your rights vary
depending on the state of
your residency, as indicated below.
|
Right |
Description |
Area |
|
|
Right to access |
You can request an explanation
of the processing of your personal data. |
●
California; ●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Iowa; |
●
Montana; ●
Tennessee; ●
Texas; ●
Utah; ●
Virginia. |
|
Right to correct |
You can change the data
if it is
inaccurate or incomplete. |
●
California; ●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; |
●
Montana; ●
Tennessee; ●
Texas; ●
Virginia. |
|
Right to delete |
You can send us a request
to delete your personal data from our
systems. |
●
California; ●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Iowa; |
●
Montana; ●
Tennessee; ●
Texas; ●
Utah; ●
Virginia. |
|
Right to portability |
You can request all the
data you provided to us
and request to transfer data
to another controller. |
●
California; ●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Iowa; |
●
Montana; ●
Tennessee; ●
Texas; ●
Utah; ●
Virginia. |
|
Right to opt out
of sales |
The right
to opt out of the
sale of personal data to third parties. |
●
California; ●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Iowa; |
●
Montana; ●
Tennessee; ●
Texas; ●
Utah; ●
Virginia. |
|
Right to opt out
of certain purposes |
The right
to opt out of processing
for profiling/targeted advertising purposes. |
●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Montana; |
●
Tennessee; ●
Texas; ●
Utah; ●
Virginia. |
|
Right to opt out
of the processing of sensitive data |
The right
to opt-out of processing of sensitive data. |
●
California. |
|
|
Right to opt in
for sensitive data processing |
The right
to opt in before processing
sensitive data. |
●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Montana; |
●
Tennessee; ●
Texas; ●
Virginia. |
|
Right against automated decision-making |
A prohibition against
a business making decisions about a consumer based solely on an
automated process without human input |
●
California; ●
Colorado; ●
Connecticut; ●
Delaware; ●
Indiana; ●
Iowa; |
●
Montana; ●
Tennessee; ●
Texas; ●
Virginia. |
|
Private right of action |
The right
to seek civil damages from a controller for violations of a statute. |
●
California. |
|
|
To exercise
your rights, contact us. |
|||
|
We will answer your request
within 30 to 60 days, depending on the state
and legislative requirements. If your complaint is not satisfied,
you can submit a complaint to the Federal Trade
Commission. |
|||
|
Please note! Some states
do not have privacy laws. The rights
of residents of such states
are governed by U.S. federal law. If your
state is not on the
list, please contact us. |
|||
California residents have
the right under the California
Consumer Privacy Act (“CCPA”) to opt out
of the “sale”
of their personal information by a company governed
by the CCPA.
We
do not sell
your personal information to anyone nor use
your data as a business model.
However, we support
CCPA by allowing California residents to opt out
of any future
sale of their
personal information. If you would
like to record
your preference that we will
not sell your data in
the future, please contact us.
California residents
visiting the App may request
that we do
not automatically gather and track
information about their online browsing
movements across the Internet.
Such requests
are typically made through web
browser settings that control signals
or other mechanisms that allow consumers to exercise choice
regarding collecting personal data about
an individual consumer’s online activities over time and across
third-party Apps or online services.
We currently
do not have
the ability to honor these
requests. We may modify this
Privacy Notice as our abilities
change.
|
Right |
Description |
|
Right to access |
You can request an explanation
of the processing of your personal data. |
|
Right to rectification |
You can change the data
if it is
inaccurate or incomplete via request or profile
settings on the App / App.
|
|
Right to delete |
You can send us a request
to delete your personal data from our
systems or delete your account
via App / App settings. We will remove
all data unless some of
them we have to store
in compliance with the law
requirements. |
|
Right to data portability |
You can request all the
data you provided to us
and request to transfer data
to another controller. |
|
Right to object opt-out |
You may object to the
processing of your personal data. |
|
Right to withdraw consent |
You can withdraw your consent at any
time. |
|
Right not to be
subject to automated decision-making |
You can object to being
subject to automated-based processing to know if
there are consequences concerning them due to
such processing. |
|
Right to lodge a complaint |
If your request is not
satisfied, you can file a complaint
to the regulatory body. |
|
To exercise
your rights, contact us. |
|
|
We will answer your request
within 30 days. If your complaint
is not satisfied, you can file a complaint
to the Office of the
Privacy Commissioner of Canada. |
|
|
Right |
Description |
|
Right to access |
You can request personal information held about you, except
where the law allows them
to refuse your request. |
|
Right to rectification |
You can ask for your
personal information that is incorrect
to be corrected. |
|
Right to be deidentified |
You can have the option
of not identifying yourself or of using
a pseudonym in certain circumstances. |
|
You can request not to
receive direct marketing communications and for that
organization not to disclose your
personal information to others for
direct marketing purposes. |
|
|
Right to lodge a complaint |
If you think we mishandled
your personal information, make a complaint about us to the Office of the
Australian Information Commissioner. |
|
To exercise
your rights, contact us. |
|
|
We will answer your request
within 30 days. If your complaint
is not satisfied, you can submit a complaint to the Office of
the Australian Information Commissioner. |
|
The
Privacy Notice is developed according
to the General
Data Protection Regulation, other applicable privacy laws, and best
privacy practices.
Existing laws and requirements for the processing of personal data
are subject to change. In
this case, we will publish
a new version of the Privacy
Notice on the App.
If there are material changes to the Privacy Notice or the App that affect your data privacy rights, we will notify you by displaying information on the App and, if necessary, ask for your consent.