Privacy Policy

Effective date: 20th Feb 2023

Nissatech Innovation Centre is the developer/owner of the Smart4Fit platform, software as a service (Service) and related brands.

This Policy applies to:

All users (trainers and exercisers) of our website www.smart4.fit and the Smart4Fit platform (hereinafter: the Portal and the Platform)
All visitors to our Portal and Applications

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Our privacy policy is created in good faith to ensure your privacy and to protect your rights according to the General Data Protection Regulation (GDPR). We ensure that you will have: a “right to be forgotten”, easy access to your data, data portability, the right to know when your data has been hacked, and protection of your data by design and by default.

Key Stakeholders

Nissatech Innovation Centre: Processor and Co-Controller
The users of the Service: Personal Data Owners
Lead Supervisory Authority: Government representative

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Portal and Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include but is not limited to:

E-mail address
IP address
Phone number
First name and last name
Date of birth
Gender
Weight
Height
VO2 Max
Heart Rate
Fitness level

Furthermore, you can allow Smart4Fit to use your photo and/or video Gallery, in order to share that content with other users and/or put extra information on your profile page, etc.

Usage Data

When you access the Service by or through a mobile device, we may collect (log) certain information automatically, including, but not limited to:

location data

We do not store or share your location data. The permission to use location data is required for the application functionality, more specifically, for enabling scanning and connecting nearby devices such as smart bands, heart rate sensors and other wearable devices via Bluetooth or other wireless transmitory technologies.

Purpose of processing and legal basis for Data Collection

The platform and application use your data for the following purposes:

Creation of user accounts
Provision of basic services
Customer support
Communications with users
Offers new services
Improving the quality of the service provided
Adapting the content according to the characteristics, goals and capabilities of users

The platform processes your personal data on the basis of the following legal bases:

the processing of your personal data is necessary for the fulfilment of the contract, which you have accessed, ie. providing our services
the processing of your personal data is performed on the basis of your consent for a specific purpose of processing, whereby you have the right to withdraw your consent at any time
we have a legitimate interest in the processing of your personal data (when we use your data for marketing purposes, to inform you about our new services)

Submission of personal data, which we need to fulfil the contract, is voluntary. We warn you that in case, you do not provide us with all the personal information that we need we will not be able to provide such a service.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

The type of cookies we use:

Session Cookies. We use Session Cookies to operate our Service.
Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
Security Cookies. We use Security Cookies for security purposes.

Use of Data

Data Users

Access and processing of your data will be performed exclusively by persons employed by Nissatech Innovation Centre, as the owner of the Platform and the application. We do not pass on your personal data to third parties, do not sell, and do not rent them to third parties.

The data is hosted on Amazon Web Services (AWS) and as such is maintained in Germany. Learn more about cloud security at https://aws.amazon.com/compliance/data-privacy/.

Data use

Nissatech Innovation Centre uses the collected data for various purposes:

To provide and maintain the Service
To notify you about changes to our Service
To allow you to participate in interactive features of our Service when you choose to do so
To provide customer care and support
To provide analysis or valuable information so that we can improve the Service
To monitor the usage of the Service
To detect, prevent and address technical issues

Data storage time

We retain your information only for as long as we need to provide you with the service and fulfil the purposes described in this policy, as long as you have an open user account. When the conditions for retaining this data are no longer met, we delete and remove it from our databases within 30 days. We can always remove data on your written request. You can always do that by writing an email to our support at info@nissatech.com and the data will be permanently removed.

Transfer Of Data

Your Personal Data (or any personally identifiable information), may be transferred and processed in Nissatech Innovation Centre.

Nissatech Innovation Centre will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure Of Data

Legal Requirements

Nissatech Innovation Centre may disclose your Personal Data in the good faith belief that such action is necessary to:

To comply with a legal obligation
To protect and defend the rights or property of the Nissatech Innovation Centre
To prevent or investigate possible wrongdoing in connection with the Service
To protect the personal safety of users of the Service or the public
To protect against legal liability

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

We are obligated to follow any data protection rights and communicate any data breach and other personal data issues, as recommended by GDPR, with the Owners of the data and the Lead Supervisory Authority.

Service Providers

We may employ third-party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Children’s Privacy

Our Service does not address anyone under the age of 16 (“Children”).

We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

What are your data protection rights?

Nissatech Innovation Centre would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete the information you believe is incomplete.
The right to erasure – You have the right to request that Our Company erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that Our Company restricts the processing of your personal data under certain conditions.
The right to object to processing – You have the right to object to Our Company’s processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us via the contact information we have provided in the contact section of this Privacy Policy

Supervising Authority

The competent body for the protection of personal data is the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia. You can contact the authority at the address Bulevar Kralja Aleksandra number 15, 11000 Belgrade, Republic of Serbia or by e-mail at office@poverenik.rs or by phone at +381 11 3408 900.

Contact Us

If you have any questions about this Privacy Policy or would like to submit inquiries about privacy or your data, please contact us at the e-mail address info@nissatech.com.