Data protection policy

This privacy policy applies to the processing of personal data carried out by PIMAS I CAÑELLAS 2012 SLU (referred to as "Aplifit") through our various websites and apps (together, "our platforms"):

Aplifit contact details
www.aplifit.com and web.aplifit.com are domains operated by PIMAS I CAÑELLAS 2012 SLU, with Spanish Tax Identification Number (NIF) B-55150114.

Our Data Protection Officer
You can contact our Data Protection Officer by email at info@aplifit.com with any questions, or to request information about how we process your personal data.

Exercising your rights
To exercise your rights of access, rectification, erasure, portability, restriction or objection to processing, you can also contact us by email at info@aplifit.com.

Purposes for which we process your personal data
At Aplifit we collect and process personal data for the following purposes:

To manage the registration and subscription of Aplifit users and our relationship with our subscribers.
To handle any request, subscription or contract you make, in accordance with the terms and conditions applicable in each case.
To analyse users' needs and preferences in order to design and offer personalised content, products and services to our users. For this purpose we use cookies and other data storage and retrieval technologies, in accordance with our Cookies Policy.
To monitor and measure the audience for our news and publications.
To promote editorial content, publications and exclusive news from Aplifit.
To promote our products, services and the events we organise as part of our business.
To share your data with our official distributor for commercial management purposes.

Legal bases for processing your personal data
At Aplifit, our processing of personal data is based on the following legal grounds:

When we have the explicit consent of subscribers and users.
When processing is necessary to perform a contract to which the data subject is a party.
On the basis of Aplifit's legitimate interests, always respecting your rights and privacy.
When processing is necessary to comply with a legal obligation that applies to Aplifit.

Our principles
At Aplifit we apply the data protection principles set out in the European Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016), specifically:

We only process your personal data where we have a valid legal basis — whether your consent, which we will always ask for clearly and transparently, or, where necessary, to manage purchase agreements for products and services or your own subscription.
We only process the data needed to fulfil our purposes, and we make no other use of it.
To keep your data accurate, you can update your personal data in your profile at any time.
We only retain your data for as long as necessary to fulfil those purposes.
We apply security measures to safeguard the integrity and confidentiality of your personal data and to protect it against loss, destruction or other damage, including by encrypting it.

Who do we share your personal data with?
At Aplifit we share your personal data with our service providers in order to send commercial communications and promotions.
Some of our cloud service providers and other technology providers may be located in third countries outside the European Union (EU) or the European Economic Area (EEA). In all such cases, we use contracts to ensure compliance with this policy and with the European Data Protection Regulation.

In addition, where we have your consent, we may share your browsing data with your social networks, through cookies or other mechanisms that you expressly indicate.

Training data and health data
Through our app and the devices and sensors you connect (for example, heart-rate straps and the sensors on our bikes and equipment), Aplifit may process data relating to your physical activity and workouts, such as heart rate, power and cadence. Heart rate may constitute data concerning health and, therefore, a special category of data within the meaning of Article 9 of the GDPR (Regulation (EU) 2016/679). When we process this type of data, we do so on the basis of your explicit consent, which you can withdraw at any time.

Disclosure to third-party platforms that you authorise
Our app lets you connect your account to third-party platforms so you can synchronise your training data with them. When you connect and expressly authorise one of these platforms, Aplifit shares your training data (heart rate, power and cadence) with it. We do this only with your explicit consent, and you can withdraw it at any time from within the app or by disabling the connection. Some of these platforms operate through providers located outside the European Economic Area (EEA), specifically in the United States, so this connection involves an international transfer of your data. Where this happens, the transfer is covered by the appropriate safeguards provided for in the GDPR, in particular the standard contractual clauses approved by the European Commission.

Connecting with health and fitness apps
If you grant the relevant permissions, the app can also synchronise your activity and training data with third-party applications such as Strava, Google Fit and Apple Health. This synchronisation only happens with your permission, and you can turn it off at any time in your device or app settings. Each platform's processing of your data is governed by its own privacy policy, and some may process it on servers located outside the EEA.

When we process your personal data
Aplifit processes your personal data when you provide it through your subscription, when you register or when you request information.

Aplifit also processes your browsing data on our platforms to understand your preferences and give you the best possible service. We may also process your anonymous browsing data for statistical and audience-measurement purposes.

If you register or sign in through Facebook or Google, these platforms may exchange data with us.

Children's data
Children under 16 may only use our platforms with the permission of a parent or legal guardian, who will be responsible for them.

User comments
Please note that our platforms are accessible over the internet. This means that anyone, anywhere in the world, can see whatever is published — for example, the comments you post on a news item.

Browsing data and cookies
To function properly, our platforms collect certain personal data such as the IP address or domain name of your device, the URL, the time, the method used to query the server, the size of the file returned in the response, the numerical code indicating the server's response status, and other parameters relating to your device's operating system.

At Aplifit we use cookies for statistical purposes, to collect information about which content and pages are visited most often, by which users and from which location.

We also use analytics tools to obtain anonymous reports on usage, interests and user preferences, so that we can tailor our content and promotions.

In addition, our platforms use audience-measurement tools that analyse the behaviour and profile of anonymous visitors in order to improve how the site works.

We also use third-party cookies that may collect information about your activity and browsing on our platforms.

You can find out more about what cookies are and how to manage or disable them by emailing us at info@aplifit.com.