Mobile Application – Privacy Policy
1. Introduction
This Privacy Policy explains how personal data is processed in connection with
the Andrea360 mobile application (“App”).
The app is powered by the Andrea360 platform and branded for a specific fitness.,
wellness, beauty, or a similar organization (“Organization”).
The Andrea360 platform is operated by:
- Andrea Technologies DOO Novi Sad, Republic of Serbia; and/or
- Andrea Technologies LLC, United States.
The specific legal entity acting as the contracting party depends on the agreement
between Andrea360 and the relevant Organization.
References to “Andrea360,” “we,” “us,” or “our” refer to the applicable entity
Providing the app infrastructure.
2. Roles Under Data Protection Law
2.1 Organization as Data Controller
In most cases, your organization determines:
- What personal data is collected?
- The purposes for which personal data is processed
- How long personal data is retained
In such cases, the Organization acts as the Data Controller
under applicable data protection laws.
2.2 Andrea360 as Data Processor
Andrea360 acts as a Data Processor, processing personal data
solely on behalf of the Organization to provide hosting,
infrastructure and technical functionality of the App.
Andrea360 does not independently determine the purposes or means
of processing membership-related personal data.
3. Personal Data Processed
Depending on the organization's configuration, the following categories
of personal data may be processed:
- Identifying information (e.g., name)
- Contact information (if provided by the Organization)
- Membership information and status
- Reservation and attendance records
- QR code identifiers
- Technical and usage data (e.g., IP address, device type, app version)
4. Legal Basis for Processing
The legal basis for processing personal data is determined by the Organization
acting as Data Controller. In most cases, processing is based on:
- Performance of a contract between you and the Organization
- Legitimate interests of the Organization
- Compliance with legal obligations
- Your consent, where required
5. Data Security
Andrea360 implements reasonable technical and organizational measures
designed to protect personal data against unauthorized access,
accidental loss, modification, or disclosure.
However, no method of electronic storage or transmission over the internet
can guarantee absolute security.
6. Data Retention
Personal data retention periods are determined by the Organization
as its Data Controller.
Andrea360 retains personal data only for as long as necessary
to provide App services to the organization
and in accordance with contractual obligations.
7. International Transfers
Personal data may be processed in jurisdictions outside your country of residence.
Where applicable, appropriate safeguards are implemented in accordance
with applicable data protection laws.
8. Data Subject Rights
Under applicable data protection laws, you may have rights including:
- Access to your personal data
- Correction of inaccurate data
- Deletion or restriction of processing
- Objection to certain processing activities
- Data portability, where applicable
Requests relating to membership-related data should be directed
to your Organization as the Data Controller.
Andrea360 will assist organizations in responding to such requests
in accordance with its contractual obligations.
9. Changes to This Policy
This Privacy Policy may be updated from time to time.
Updated versions will be made available within the app.
10. Contact
For platform-related privacy inquiries:
support@andrea360.com