PRIVACY POLICY
We welcome you to Myfitsociety, our website at www.myfitsociety.com and/or our iOS and Android Mobile application (collectively our “Services”).

In the below Privacy Policy, we inform you about the scope of the processing of your Personal Data. If you are a Citizen of the European Union, please also refer to our GDPR Compliance Statement.

Myfitsociety proceeds with all data processing procedures (e.g., collection, processing, and transmission) in accordance with Indonesia`s Personal Data Protection Law (“PDP”).

Responsible for Data Processing
Responsible for data processing in accordance with the provisions of the PDP is Myfitsociety of Jakarta, Indonesia, (“Myfitsociety”, “we”, “us”, or “our”).

What is Personal Data?
Personal Data is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not Personal Data. This includes, for example, the number of users of a website.

What is Processing?
"Processing" means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means. The term is broad and covers virtually any handling of data.

General Information on Data Processing
In the course of our business and Services operations, we process data, and this data is generally transferred to our Google Cloud server in Jakarta, Indonesia.

All Personal Data that we obtain from you via the Services will only be processed for the purposes described in more detail below. This is done within the framework of the respective legal regulations mentioned or only with your consent. In particular, if:

• you have given your consent,
• the data is necessary for the fulfillment of a contract / pre-contractual measures,
• the data is necessary for the fulfillment of a legal obligation or
• the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden. 

Myfitsociety processes and stores your Personal Data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period (in particular the MOCI Regulation No. 20 of 2016 for up to 5 Years) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.

Processing of Automatically Collected Data

a) Collection of access data and log files
We also collect data on every access to our website. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing website.

b) Use of cookies
To improve the services provided on the website, we use cookies that collect information about your usage behavior. Cookies are files that your web browser stores on your hard drive when you visit a website. Cookies may, under certain circumstances, personally identify you either directly (for example, with an e-mail address) or indirectly (for example, with a unique identification code of a cookie, an IP address or the identification code of a device). The data stored may include the pages you visit, the date and time of your visit, and other tracking information. For more information, please refer to our Cookie Policy.

c) Downloading the APP
The APP can be downloaded from the "Google Playstore" a service offered by Google LLC or the Apple App service "App Store" a service of Apple Inc. Downloading it may require prior registration with the respective App store and/or installation of the respective App store software.

d) Installing the APP 
As far as we are aware, Google collects and processes the following data: License check, network access, network connection, WLAN connections, and location information. However, it cannot be ruled out that Google also transmits the information to a server in a third country. We cannot influence which Personal Data Google processes with your registration and the provision of downloads in the respective App store and App store software. The responsible party in this respect is solely Google as the operator of the Google Play Store.

As far as we are aware, Apple collects and processes the following data: device identifiers, IP addresses, location information, it cannot be excluded that Apple also transmits the information to a server in a third country. This could in particular be Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014. We cannot influence which Personal Data Apple processes with your registration and the provision of downloads in the respective app store and app store software. The responsible party in this respect is solely Apple as the operator of the Apple App Store.

e) Device information
Google and Apple may collect information from and about the device(s) you use to access the APP, including hardware and software information such as IP address, device ID and type, device-specific and APP settings and properties, APP crashes, advertising IDs (AAID), information about your wireless and mobile network connection such as your service provider and signal strength; information about device sensors such as accelerometer, gyroscope, and compass.

f) IP Addresses
We may also collect and process information about your device, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our business partners. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.

Data Processing When You Use Our Services
Information you give us may include the following:

• Account. Your username, password and e-mail address when you register an account with us.
• Profile Information. Profile information that you provide for your user profile (e.g., first and last name, picture, phone number).
  This information allows us to help you, or others be found on our system.
• Content. User Content (e.g., photos, comments, and other materials) that you post to the Service.
• Communications. Communications between users and between us.
• Payment Information. These are information you disclosed because of certain payment transaction.

We process the data of our users in order to be able to provide our contractual services as well as to ensure the security of our services and to be able to develop it further. The required information is identified as such in the context of the information required for the provision of services and billing.

Of course, in the course of operating the Services, we also process your chats with other users and the content you transmit.

Some of the Personal Data you provide may be considered “special” or “sensitive”. This includes Personal Data concerning for example your health, racial or ethnic origins, sexual orientation, and religious beliefs. By choosing to provide this data, you consent to our processing of that data.

You have choices about the Personal Data you upload and share. You don’t have to provide Personal Data; however, Personal Data helps you to get more from our Services. It’s your choice whether to include special category data and to make that special category data public. Please do not upload or add data that you would not want to be available.

The legal basis for the processing of your personal and special category data is the establishment and implementation of the user contract for the use of the service as well as your consent. We store the data until you delete your user account. Insofar as legal retention periods are to be observed, storage also takes place beyond the time of deletion of a user account.

You may withdraw your consent and request us to stop using and/or disclosing your personal and special category data by submitting your request to us.

The legal basis for the data processing is the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations as well as your Consent.

Uses Made of The Information
We use information held, including Personal Data, in the following manner: 

• to ensure that content from our Services is presented in the most effective manner for you and for your device;
• to provide you with information, or services that you request from us, and to otherwise carry out our obligations arising from any contracts entered into between you and us;
• to provide you with information, or services which we feel may interest you, where you have consented to be contacted for such purposes;
• to allow you to participate in interactive features of our service, when you choose to do so;
• to notify you about changes to our Services; 
• to investigate any complaints relating to the use of our Services or any suspected unlawful activities; 
• complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
• any other purposes for which you have provided the information; and
• carrying out whatever else is reasonable or related to or in connection with the above and our provision of goods and/or services to you.

Obligation to Provide Personal Data
You are not obliged to provide us with Personal Data. However, depending on the individual case as described above, the provision of certain Personal Data may be necessary for the provision of the services. If you do not provide us with this Personal Data, we may not be able to provide the requested service.

Do Not Sell
We do not sell data to third parties.

Authorizations and Access
We may request permission to store your app data including your Internet Connection and Network, Camera, Audio, Video, Photos and Gallery of your device. The legal basis for data processing is our legitimate interest and the provision of contractual or pre-contractual measures. You can deny access on your device via the Settings/Notifications/ options of your device; however, this means that our app may not function as intended.

Geographical Information
When you use our app, we may use GPS technology (or other similar technology) to determine your current location in order to determine the city you are located within and display information with relevant data or advertisements. We will not share your current location with other users or partners. If you do not want us to use your location for the purposes set forth above, you should turn off the location services for the mobile application located in your account settings or in your mobile phone settings and/or within the mobile application.

Push Messages
When you use the app, you will receive so-called push messages from us, even if you are not currently using the app. These are messages that we send you as part of the performance of the contract. You can adjust or stop receiving push messages at any time via the device settings of your device.

Transfer Data Usage
Myfitsociety use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Transfer of Personal Data
We will not disclose or otherwise distribute your Personal Data to third parties unless this:

• is necessary for the performance of our services, 
• you have consented to the disclosure,
• or the disclosure of data is permitted by relevant legal provisions. 

However, we are entitled to outsource the processing of your Personal Data in whole or in part to external service providers acting as processors within the framework of the PDP and GDPR. External service providers support us, for example, in the technical operation and support of the Services, data management, the provision and performance of services, marketing, as well as the implementation and fulfillment of reporting obligations.

The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the PDP and the GDPR responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organizational measures, and additional controls by us.

We may also disclose Personal Data to third parties if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfill our legitimate interests.

Data Intermediary
Where we process your Personal Data as a data intermediary on behalf of a third party, we will process your Personal Data in accordance with the instructions of the third party and shall use it only for the purposes agreed between you and the third party. All such Personal Data will be protected and retained in accordance with this privacy policy and the terms of the PDP and GDPR. We will take steps to inform the third party of any requests, complaints or questions that you may have regarding such Personal Data.

Your Data Subject Rights
Every data subject has:

• the right to access the data subject's own Personal Data;
• the right to rectify/correct the data subject's own Personal Data where inaccurate or incomplete;
• the right to erasure of Personal Data;
• the right to restrict data processing;
• the right to data portability;
• the right to object to the processing of Personal Data; and
• the right to withdraw consent.

Further, a data subject has the right to obtain:

• information on the clarity, legal interest, purpose of request and usage of Personal Data; and
• accountability from the party who requests the Personal Data.

Please contact us at any time with questions and suggestions regarding data protection and to enforce your rights as a data subject.

Security
State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorized access from outside. In addition, technical and organizational security measures are used to protect the Personal Data you have provided against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

Updating Your Information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please contact us.

Withdraw Your Consent
You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all purposes by submitting your request to us. Please note that your withdrawal of consent will not prevent us from exercising our legal rights (including any remedies) or undertaking any steps as we may be entitled to at law.

Validity and Questions
This Privacy Policy was last updated on Saturday, 25 March 2023, and is the current and valid version. However, we want to point out that from time to time due to actual or legal changes a revision to this policy may be necessary. If you have any data protection questions, please feel free to contact us.