Privacy Policy

Introduction

baseflows d.o.o. ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website baseflows.biz and use our online fitness platform services.

Data Controller Information

The data controller for your personal information is:

• Company: baseflows d.o.o.
• Registration Number: 7936776018
• VAT Number: SI77802814
• Address: Vojkova cesta 19, 6077 Koper, Slovenia
• Email: privacy@baseflows.biz
• Phone: +386 58830604

Data Collection

We collect various types of information in connection with the services we provide. The data we collect includes information you provide directly to us, information we collect automatically when you use our services, and information we receive from third parties.

Information You Provide to Us

• Contact Information: Name, email address, phone number, and postal address
• Account Information: Username, password, and profile preferences
• Fitness Data: Workout preferences, fitness goals, health information, and progress tracking data
• Communication Data: Messages, enquiries, and feedback you send to us
• Payment Information: Billing details and transaction history (processed securely through third-party payment processors)

Information We Collect Automatically

• Usage Data: Information about how you use our website and services
• Device Information: IP address, browser type, operating system, and device identifiers
• Location Data: General geographic location based on IP address
• Analytics Data: Website performance metrics and user interaction patterns

How We Use Your Information

We use the data we collect to provide, maintain, and improve our services. Our use of your data is based on legitimate business interests, contractual necessity, legal obligations, and your consent where required. We use your information for the following purposes:

• Service Provision: To provide and personalise our online fitness platform services
• Account Management: To create and maintain your user account and preferences
• Communication: To respond to your enquiries and provide customer support
• Improvement: To analyse usage patterns and improve our services and website functionality
• Marketing: To send relevant information about our services (with your consent)
• Legal Compliance: To comply with applicable laws and regulations
• Security: To protect against fraud, abuse, and security threats

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we must process your data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, balanced against your rights

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: When you have given explicit consent for specific sharing

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally, we retain account information for the duration of your relationship with us and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Marketing data is retained until you withdraw consent or for a maximum of three years from last interaction.

Your Rights

Under applicable data protection laws, including GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing under specific conditions
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing activities that require it

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month, unless the request is complex, in which case we may extend this period by up to two months.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at:

Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. In Slovenia, this is the Information Commissioner (Informacijski pooblaščenec).