Data usage policy, privacy and cookies

In this privacy policy and data usage details how our organization uses and protects the information that is collected when you use our website.

This policy is intended to inform customers, in a clear, concrete and detailed manner, about the collection, use and treatment of their personal information. This company is committed to the security of its users' data. When we ask you to fill in the personal information fields with which you can be identified, we do so by ensuring that it will only be used in accordance with the terms of this document.

Definition

For the interpretation of the terms that are used in this privacy policy, the following definitions are made below:

Personal data: Information of any kind referred to determined or determinable individuals or persons of ideal existence. Sensitive data: Personal data that reveal racial and ethnic origin, political opinions, religious, philosophical or moral convictions, union affiliation and information regarding health or sexual life. File, record, database or database: Indistinctly, they designate the organized set of personal data that is subject to processing or processing, electronic or not, whatever the modality of their training, storage, organization or access. Data processing: Operations and systematic procedures, electronic or not, that allow the collection, conservation, management, storage, modification, relationship, evaluation, blocking, destruction, and in general the processing of personal data, as well as its transfer to third parties through communications, inquiries, interconnections or transfers. Person in charge of archiving, registration, database or database: Individual or of an ideal public or private existence, who is the owner of a file, registry, database or database. Data owner: Any natural person or person of ideal existence with legal domicile or branches or branches in the country, whose data are subject to treatment in accordance with current legislation. Data user: Any person, public or private, who performs data processing at their discretion, either in their own files, records or databases or through connection with them. URL: means "Uniform Resource Locator" in English and consists of a sequence of characters that allows you to designate resources within the Internet environment so that they can be located.

1. For what we will use your data

The Company only treats your personal data with your free and express consent and only for the purposes that we have informed you, for the purposes allowed by you or in the manner allowed by applicable law. You may oppose any data processing that opposes this privacy policy and / or current legislation.

a) The Company uses the personal information it collects from its clients in order to manage, administer and provide its Services; optimize and customize these services and communicate with your customers.

b) Likewise, said information is used to adapt the Services to your preferences as well as to offer you new services or products and to send you administrative, technical, organizational and / or commercial information, in documentary or electronic form, related to the activities of the Company and / or to facilitate the fulfillment and execution of the agreements concluded with you when contracting our Services. For example, we may use the information we collect to determine the geographical area where the customer is located, offer personalized content, recommend content that we believe may please you, send you emails, automatic notifications or other correspondence and advertising related to our Services; promotions and surveys.

c) We may also use your personal data for direct marketing and advertising activities, establish specific profiles for advertising, promotional or commercial purposes or that allow you to establish consumption habits, provided that your personal data appear in documents accessible to the public or have been provided by You or obtained with your consent.

The User authorizes the Company to use, collect and process the data entered by the User in the Service and of those data derived from the interaction of information derived and produced by the use of the Service. Such data will be used for the generation of statistical databases related to the health of the Users universe.

The User authorizes the Company to use, collect and process the data entered by the User in the Service and of those data derived from the interaction of information derived and produced by the use of the Service. Such data will be used for the generation of statistical databases related to the health of the Users universe.

The entry of any of the data is optional; however, for the correct use of the Service it is recommended to enter as much data as possible. The entry of inaccurate data or the refusal to enter it prevents the Service from providing correct information based on the scope of the content it uses. At any time the User may modify the data entered in the Service.

Assignments

This company will not sell, assign or distribute personal information that is collected without your consent, unless required by a judge with a court order.

The Company does not share or market in any way the information of its customers except in the particular cases indicated below. We may share your personal data if we have your consent to do so. Some Services may allow you to share your information with other customers of the same Service or other Service provided by the Company. We recommend you pay attention before sharing any information.

The Company hires third-party natural or legal persons (hereinafter the Third Parties) for certain tasks such as the processing of collections as well as the Cloud Computing service (Amazon). These Third Parties will have access to the personal information of the clients necessary to perform their functions, but may not use it for other purposes. In addition, they must treat personal information in accordance with this Privacy Policy and the applicable legislation on the protection of personal data, always respecting their confidentiality.

In this regard, in the case of processing of personal data of customers by Third Parties contracted by the Company, a contract must be signed with such Third Parties in relation to the treatment that establishes that said Third Party may not apply or use the personal data to the that you access for a purpose other than the one contained in the service contract, or assign them to other people. It should also be provided that once the contractual provision has been fulfilled, the personal data processed must be destroyed, unless there is an express authorization from the Company when the possibility of further orders is presumed, in which case they may be stored with due security conditions for a period of time. Up to two years.

In the event that the Company or most of its assets are acquired in the future by a third party, the personal information of the clients will be one of the transferred assets, being subject to the commitments acquired in this privacy policy ( or in which it is in force) unless expressly authorized otherwise by the client. The same criteria will be applied in cases of merger, transformation or corporate division in which the Company intervenes.

The Company is not authorized to disclose customer information, including its private content such as the content of its emails, other private communications or files stored in private folders except in the following cases: (a) when required by court; (b) when you understand in good faith that it is necessary to comply with applicable law or respond to a valid legal process by competent authorities (including government agencies); (c) when necessary to protect our customers (for example to prevent spam or fraud attempts to other users of the Services or to help prevent the loss of life or serious injury to anyone); (d) when necessary to operate and maintain the security and integrity of our Services, including the prevention or arrest of attacks on our servers and computer systems, whatever their modality or scope; (e) when necessary to protect the rights and / or assets of the Company and (f) when this may be appropriate or necessary to enforce the Terms and Conditions of our Services and investigate and / or defend against third party claims.

2. What data is collected and how it is collected

The personal information we collect from our clients allows us to operate our services effectively and offer a personalized service according to the client's needs. Below we describe the types of information we collect:

Information you provide us: We receive and collect the information you provide us:

Basic and profile information:

“ANI” (mobile number) to grant access to the contents, registration status and score (data strictly necessary for the use of the service).

Username (nickname) to customize the experience.

Health Information:

Age

Sex

Weight

Height

HDL cholesterol

Total cholesterol

Minimum and maximum blood pressure

This data is strictly necessary to provide the service correctly.

All this information is collected when you subscribe to any of our Services, when interacting with our app. The information you give us is useful to respond to your needs, personalize and improve our Services and get in touch with you.

Information collected automatically: We collect information when you use our Services as well as that related to your computer or any device you use to access our Services (mobile devices). This information may include the history of viewing our content, details about your interactions with customer service (such as the date and time of the consultation); device identification (ID), software and device characteristics (such as type and configuration), connection information, statistics on page display, reference URL, IP addresses (internet protocol or number that identifies a device on a network , such as a computer or printer); information collected through the use of cookies, web signage and other similar technologies.

The Company will not request information that is incompatible with the purpose provided in this privacy policy for the collection of personal data or that directly or indirectly discloses sensitive data, such as racial and ethnic origin data, political opinions, religious beliefs , philosophical or moral, union affiliation, information regarding health or sexual life.

3. How your information is stored

The data will be stored electronically by the Company on servers dedicated for this purpose, the Company being responsible for them. The Company implements all the necessary measures to maintain the security of the personal information of its clients, contemplating the internal practical, technical and organizational measures necessary to guarantee the security, integrity and confidentiality of the data, diligently trying to avoid unauthorized access, destruction , use, modification or disclosure of the data

The Company will make its best efforts to prevent unauthorized access to the personal information of its customers. . The area responsible for Technology and Systems of the Company is in charge of compliance with the regulations related to information security, through the Policies, Standards, Manuals and Security Procedures.

We store your information securely in Amazon RDS and Google Cloud.

We will store your personal information for a maximum period of 10 years

3.1 Data protection methods.

Your information hosted on Amazon servers is protected under the following directives:

Cloud security: AWS is responsible for protecting the infrastructure that runs AWS services in the AWS cloud. AWS also provides services that you can use safely. External auditors periodically test and verify the effectiveness of our safety in the framework of AWS compliance programs. For more information about compliance programs that apply to Amazon RDS, see AWS Services in the scope of the compliance program. We use AWS Identity and Access Management (IAM) policies to assign permissions that determine who can manage Amazon RDS resources.

Each administrator has their respective access credentials established, monitored and managed by the area responsible for the infrastructure.

For more information visit: https://aws.amazon.com/en/compliance/gdpr-center/

Regarding Google Cloud, Each administrator has their respective access credentials established, monitored and managed by the area responsible for the infrastructure.

For more information visit https://cloud.google.com/security/?hl=en and https://cloud.google.com/security/gdpr/?hl=en

4. What are your data protection rights?

Duty of Confidentiality: The Company and the people involved in any phase of the processing of your personal data are obliged to maintain professional secrecy regarding them and to absolute confidentiality. Such obligation will subsist even after the end of its contractual relationship with the Company. The person obliged to maintain the duty of confidentiality may be relieved of said obligation by judicial resolution and when there are well-founded reasons relating to public safety, national defense or public health. In this regard we let you know that the Company keeps your personal data confidential and limits access to your personal data to those who specifically need them to carry out their activities related to the Services we provide. The Company signs the corresponding confidentiality agreements with employees, suppliers, third parties or external personnel that intervene in the processing of your personal data, in accordance with the provisions of this privacy policy and current legislation.

We want to make sure you know your rights. Every user has the right to the following:

Right to access - You can access your personal data through the application, at any time.

Right to rectification - You have the right to request that we correct any incorrect information or that incomplete information is completed.

Right to have data deleted - You can request that all your information be deleted from our servers, under certain conditions.

Right to restrict processing - You can request that your data processing be restricted, under certain conditions.

Right to object to processing - You can object to the processing of your data, under certain conditions.

Right to data portability - You can ask our company to transfer your data to another organization or directly to you, under certain conditions.

If you make any request, we have one month to answer you. If you would like to exercise any of these rights, please contact us at: soporte@opticomsa.com.ar

5. What are cookies?

Cookies are text files placed on your computer to collect standard information from internet logs and visitor behavior. Another function that cookies have is that with them the websites can recognize you individually and therefore provide you with the best personalized service on your website. You can delete cookies at any time from your computer. However, cookies help to provide a better service for websites, they do not give access to information from your computer or from you, unless you want to and provide it directly.

For more information about Cookies, visit: allaboutcookies.org.

6. How we use cookies

The Services provided by the Company and its websites use cookies for various reasons, including: (a) Store your preferences and settings, that is, customize the services we offer, providing information that may be of interest to you : example: if you choose to watch an action movie in the “ondemand” movie service, we can store that movie in a cookie and then recommend that you watch another action movie; (b) Analysis of websites or Services: we can use cookies to count the number of visitors to our websites or to our Services and to develop general statistics linked to them.

If you do not want a cookie to be installed on your hard drive you can configure your computer's browser to not receive them. "Cookies" are only associated with an anonymous user and his computer and do not provide the user's personal data by themselves, nor can they read data from their hard disk, nor read cookie files created by other providers. If they decline, you may not be able to use some of our services.

Here is a list of the cookies used on our website.

7. Types of cookies (own)

8. Third-party cookies

In addition to our own Cookies, we may use other third-party cookies to generate statistics on the use of the Service or other functions. These cookies are called Statistics or Performance:

To opt-out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout/

Third party links

This website may contain links to other sites that may be of interest to you. Once you click on these links and leave our page, we no longer have control over the site to which you are redirected and therefore we are not responsible for the terms or privacy or the protection of your data on those other third-party sites. These sites are subject to their own privacy policies, so it is recommended that you consult them to confirm that you agree with them.

9. How to manage Cookies

You can configure your browser to not accept cookies, following the steps below: https://www.allaboutcookies.org/manage-cookies/stop-cookies-installed.html

Some features may work incorrectly or stop working by restricting Cookies.

10. Use of "Logs"

"Logs" are files stored on the Company's server that record data about your browsing and allow us to provide you with our Services as well as help us analyze the operation of our systems, locate incidents and problems that may arise and solve them. in the shortest possible time.

11. Scope of this privacy policy

This privacy policy only applies to our website and subdomains, and not to third-party sites that may be associated with ours.

12. Changes to the privacy policy

By contracting any of the Services provided by the Company you accept the terms of this privacy policy.

This privacy policy may be modified on some occasions. Any changes will be communicated by publication on our website

We recommend that you visit our website frequently to check the most recent changes. Unless otherwise indicated, our current privacy policy will be applicable for all the information we treat linked to you. In no case will we substantially modify our policies to make them less effective in protecting your personal data collected in the past. We keep our policy updated in this document. Last update: October 2019.

Contact channels

You can contact us via: soporte@opticomsa.com.ar

We inform you that the person in charge of data protection in the Company is the Technology Sector of the Company who is responsible for ensuring the correct and effective application of this policy, the relationship with our Clients and with the Authority of Application. If you have any questions regarding this privacy policy, please contact us at the following mailbox.

More information - Further Information

- https://eugdpr.org/

- https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en