Privacy Policy

Collection of Your Personal Data

FitKit collects personal data that you provide to us by establishing direct contact with us and/or registering to receive promotional material, as well as by using our website, our application, and the services and products we offer. The personal data we collect when you create your FitKit App profile is used to maintain your profile, provide our products and services, and improve your experience.

We may also collect personal data for users of the FitKit application from third (legal) parties, when cooperation is established for use of the application on behalf of employees and/or clients of legal entities. We also collect and process personal data from providers of services and goods with whom we cooperate to improve the products and services we offer.

• Data for users of our services: first and last name, home address, gender, date of birth, financial data and credit card data, personal photo, and social media profile (only for users who log in via Facebook). Contact data (email and phone number) is used for registration and account management, service delivery and important notifications, content customization by location, account protection and fraud prevention, customer support, and marketing purposes with your explicit consent.
• Data about your use of our platforms, application, and services (user activity and profile data). This may include information that a minor uses certain services through your profile/account, but does not include collection of data that can identify the minor.
• Special categories of personal data: booking psychological services through the application involves processing sensitive mental health data, which is strictly protected by personal data protection regulations. FitKit processes this data solely for safe and efficient scheduling and does not hold any additional data about your health or sessions.
• Data for authorized persons and employees of suppliers/service providers who are legal entities: first and last name, address, contact data, job position, legal entity, type of contract and service.
• Data for individual service providers, such as engaged trainers: first and last name, address, unique master citizen number (EMBG) where required by law, payment data, type of contract and service, financial and tax data, photos/videos for training program purposes, and social media profile.
• User activity data: IP address, browser type and version, pages used, login date/time and visit duration, device identifiers, and other diagnostic data, including mobile-specific data such as device type, OS, and mobile browser when you access our platforms via a mobile device.
• Data we collect from third parties (social media): personal data you have shared by creating a public profile or otherwise acting in the public domain on third-party social networks, including when you log in via a social media profile or share testimonials about your experience.
• Location data: with your prior permission, your approximate geographic location while using the FitKit application, to help you use its features and to improve our products and services. You can allow or disable this at any time via your device settings.
• Tracking technologies and cookies: data collected via cookies and tracking pixels when you visit our platforms, register, or request information. See our Cookie Policy for full details.

Purposes of Using Your Personal Data

We may use your personal data for the following purposes:

• To provide and maintain our platforms and services, including monitoring the use of our products and services.
• To maintain your profile: carrying out your registration and managing your profile, giving you access to the application's functions, products, and services.
• To conclude and fulfil a contract: for the service contracts, work contracts, and other contracts we conclude with collaborators for the provision of our products and services, including any additional personal data needed for access to certain products.
• To communicate with you: by email, phone, SMS, or in-app notification, about updates to services you use or other informational communication regarding our products and services, including security-system updates.
• To manage and respond to your requests addressed to us.
• To promote our services and activities by sharing your experience of using them through our website or social media.
• To deliver targeted marketing offers matched to your interests, preferences, and/or location, only with your prior voluntary consent - withdrawable at any time via the link in the marketing message or by contacting [email protected].
• For the FitKit Fit Rewards Program and gift giving: by accepting challenges and collecting points via the "Collect" button, you agree to processing for monitoring challenge progress, awarding points and gifts, inclusion in the top-participants ranking, and analysis for Program improvement. Your username, profile picture, and earned points will be publicly displayed on the ranking list as described in the Terms of Use; participant data is deleted or anonymized 3 months after the Program ends or consent is withdrawn, whichever is first.
• For other purposes: data analysis, identifying platform/product usage trends, measuring the effectiveness of promotional campaigns, and other activities to evaluate and improve our services, products, marketing, and your experience.

Legal Bases for Processing Your Personal Data

• Consent: for one or more specific purposes such as direct marketing, sharing your experience as a user, or saving payment card data in tokenized form for future purchases. FitKit does not store the full card number, CVV/CVC, or expiration date on its servers - only a unique token from a specialized Payment Service Provider (PSP), the last 4 digits, and the card type. You may withdraw consent at any time, after which stored tokenized data is deleted; Strong Customer Authentication (SCA) provides additional transaction security.
• Performance of a contract: processing necessary to fulfil a contract concluded with you, including pre-contractual rights and obligations.
• Legal obligations: processing necessary for FitKit to fulfil obligations under law, such as tax obligations or requests from state authorities.
• Legitimate interests: processing necessary for FitKit's legitimate interests, such as protecting business operations and the website (detecting problems, data analysis, testing, security and support of systems, hosting and reporting), managing and cooperating with service providers, conducting legal proceedings for collection, and improving our services and products.

Disclosure and Transfer of Your Personal Data to Third Parties

• With service providers: for maintaining our platforms and services, processing payments, or with production companies/telecommunication operators for recording and displaying video materials.
• With collaborators: such as IT consultants and developers who help maintain and upgrade the FitKit application, bound by this Privacy Policy.
• For creating promotional content: with marketing agencies and other service providers who help us create and send promotional content to you or create promotional material shown to you on third-party platforms.
• With business partners: to provide access to our network of fitness/wellness venues, individual trainers, and other partner service providers. When you book with a partner through the application, we share certain data (name, profile photo, phone number, email, reservation details, check-in status and time, and, where applicable, a service code) so the partner can confirm your identity and verify your use of the booked service. The legal basis is performance of the contract with you and the partner's legitimate interest in verifying attendance. All service providers and partners are bound by data processing agreements guaranteeing GDPR-compliant protection and confidentiality of your data, used exclusively for the stated purposes.
• With other users: personal data you have made publicly available on your social media profile (name, photo, description of platform activity) may be shared for the purposes of improving communication, cooperation, and shared user experience.
• Based on law and other legally binding demands: to courts, government agencies, and enforcement officers when required by law, or as necessary to exercise our legal obligations, protect our rights and property, prevent or investigate abuse, or protect the personal safety of our users or the public.

Transfer of Your Personal Data to Third Countries

Your personal data may be transferred to third countries outside the European Union and European Economic Area - for example, to our parent company Fitkit International DOO, Skopje in the Republic of North Macedonia, for administrative, technical, or operational support related to our business activities.

Regardless of whether you are a user from the European Union or another country, we commit to ensuring every transfer of personal data to third countries complies with applicable personal data protection regulations, including data processing agreements with recipients that may contain standard contractual clauses approved by the European Commission or another supervisory authority, providing an adequate level of protection.

When you subscribe to or purchase services through our mobile application, we cooperate with a specialized, EU-registered service provider to securely and efficiently process your transaction and payments, ensuring compliance with GDPR.

Storage and Security of Your Personal Data

We use various technologies, procedures, and security measures to protect your personal data from unauthorized access and from unlawful use and/or sharing.

FitKit stores your personal data for the duration necessary to achieve the purposes defined in this Privacy Policy, unless the law permits or requires storage for a longer period. When your data is no longer needed for the purpose for which it was collected, we delete it in a timely and secure manner.

We may continue to store your personal data longer than the specified retention period if necessary for exercising your and our legal and contractual rights and obligations, resolving disputes, exercising rights and obligations toward third parties, pursuing our legitimate interests (such as business goals, product improvement, market competitiveness, or legal proceedings), or aligning our security measures and standards for the security, integrity, and operability of the FitKit application and our other platforms.

Your Rights Regarding the Use and Processing of Your Personal Data

Automated decision making: your data may be subject to automated decision-making based on your preferences, previous interaction with us, use of services, or demographic data, to deliver marketing offers best suited to your interests, but only with your prior consent.

• The right to be informed about the processing of your personal data.
• The right to access your personal data, including the right to receive a copy of the data we store and use about you.
• The right to rectification of your personal data if incomplete or inaccurate.
• The right to erasure of your personal data at any time.
• The right to restriction of processing if you dispute the accuracy, legal basis, and/or purpose of processing.
• The right to object to processing carried out on the basis of legitimate interest and/or for direct marketing purposes.
• The right to data portability of your personal data to third parties and/or to you personally, in a structured, machine-readable format.

Exercising Your Rights Regarding Personal Data Protection

If you have a question, request, or complaint regarding the processing of your personal data at FitKit, please contact the appropriate Data Protection Officer, whose details are in the table above. Sending such a request is free of charge, and processing incurs additional costs only in exceptional circumstances. You also have the right to lodge a complaint with the appropriate national personal data protection authority.

• North Macedonia: Personal Data Protection Agency of the Republic of North Macedonia - 14th floor, Boulevard Goce Delchev 18, Skopje 1000. azlp.mk · [email protected] · +389 (2) 3230 635.
• Serbia: Commissioner for Information of Public Importance and Personal Data Protection - Bulevar kralja Aleksandra 15, Belgrade 11000. poverenik.rs · [email protected] · +381 11 3408 900.
• Greece: Hellenic Data Protection Authority (HDPA) - Kifissias 1-3, PC 115 23, Athens. dpa.gr · [email protected] · +30-210 6475600.
• Bulgaria: Commission for Personal Data Protection - 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592. cpdp.bg · [email protected].
• Slovenia: Information Commissioner of the Republic of Slovenia - Dunajska cesta 22, 1000 Ljubljana. ip-rs.si · 01 230 97 30.

Changes to the Privacy Policy

The Privacy Policy will be regularly reviewed and updated, as well as when necessary and in accordance with changes to our activities. If you have questions about this Privacy Policy or about how we use and process your personal data, please write to us at [email protected] or visit our contact page.