Cookie Policy of Upfit
This document informs Users about the technologies that help Upfit to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with Upfit.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
Upfit uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information – such as the presence of other Trackers - in the linked privacy policies of the respective third-party providers or by contacting the Owner.
How Upfit uses Trackers
Necessary
Upfit uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers managed directly by the Owner
-
sessionStorage (Upfit)
sessionStorage allows Upfit to store and access data right in the User's browser. Data in sessionStorage is deleted automatically when the session ends (in other words, when the browser tab is closed).
Personal Data processed: Trackers.
Trackers managed by third parties
-
Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
-
iubenda Cookie Solution (iubenda srl)
The iubenda Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of personal information and in particular to the use of Cookies and other Trackers on Upfit.
Personal Data processed: Trackers.
Place of processing: Italy – Privacy Policy.
Storage duration:
- _iub_cs-*: 1 year
- _iub_cs-*-granular: 1 year
- euconsent-v2: 2 years
-
Payments processed via the Apple App Store (Apple Inc.)
Upfit uses a payment service provided by Apple Inc. that allows the Owner to offer the purchase of the app itself or in-app purchases.
Personal Data processed to complete the purchases are processed by Apple, as described in the privacy policy for the App Store.
Personal Data processed: device information, email address, first name and Trackers.
Place of processing: United States – Privacy Policy.
-
Payments processed via the Google Play Store (Google Ireland Limited)
Upfit uses a payment service provided by Google Ireland Limited that allows the Owner to offer the purchase of the app itself or in-app purchases.
Personal Data processed to complete the purchases are processed by Google, as described in the privacy policy for the Google Play store.
Personal Data processed: device information, email address, first name and Trackers.
Place of processing: Ireland – Privacy Policy.
-
Bugsnag (Bugsnag Inc.)
Bugsnag is a monitoring service provided by Bugsnag Inc.
Personal Data processed: app information, device logs, Trackers and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
-
App Store Connect (Apple Inc.)
Upfit is distributed on Apple's App Store, a platform for the distribution of mobile apps, provided by Apple Inc.
App Store Connect enables the Owner to manage Upfit on Apple's App Store. Depending on the configuration, App Store Connect provides the Owner with analytics data on user engagement and app discovery, marketing campaigns, sales, in-app purchases, and payments to measure the performance of Upfit.
App Store Connect only collects such data from Users who have agreed to share them with the Owner. Users may find more information on how to opt out via their device settings here.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy.
Other Trackers
-
Privacy Manager
Through the link to the Privacy Manager, users can access and change their cookie settings on Upfit.
Storage duration: up to 6 months
Functionality
Upfit uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
Trackers managed directly by the Owner
-
Mailing list or newsletter (Upfit)
By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning Upfit. Your email address might also be added to this list as a result of signing up to Upfit or after making a purchase.
Personal Data processed: email address, Trackers and Usage Data.
Trackers managed by third parties
-
Google Workspace (Google Ireland Limited)
Google Workspace is an integrated suite of cloud-based productivity, collaboration and storage services provided by Google Ireland Limited. Gmail or other G Suite services are not scanned by Google for advertising purposes. In addition, Google does not collect or use data inside these services for advertising purposes in any other way.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy.
-
Crisp Widget (Crisp IM SARL)
The Crisp Widget is a service for interacting with the Crisp live chat platform provided by Crisp IM SARL.
Personal Data processed: Data communicated while using the service, Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: France – Privacy Policy.
Experience
Upfit uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
Trackers managed directly by the Owner
-
Direct marketing via popups (Upfit)
Upfit uses popups to interact with the User to propose services and products which may be provided by third parties or that are unrelated to the product or services provided by Upfit.
Personal Data processed: Trackers.
Trackers managed by third parties
-
Google Maps widget (Google Ireland Limited)
Google Maps is a maps visualisation service provided by Google Ireland Limited that allows Upfit to incorporate content of this kind on its pages.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy.
-
YouTube video widget (Privacy Enhanced Mode) (Google Ireland Limited)
YouTube is a video content visualisation service provided by Google Ireland Limited that allows Upfit to incorporate content of this kind on its pages.
This widget is set up in a way that ensures that YouTube won't store information and cookies about Users on Upfit unless they play the video.
Personal Data processed: Trackers, Universally unique identifier (UUID) and Usage Data.
Place of processing: Ireland – Privacy Policy.
Measurement
Upfit uses Trackers to measure traffic and analyze User behavior to improve the Service.
Trackers managed by third parties
-
Google Analytics 4 (Google Ireland Limited)
Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of Upfit, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- _ga: 2 years
- _ga_*: 2 years
-
Google Analytics Demographics and Interests reports (Google Ireland Limited)
Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for Upfit (demographics means age and gender Data).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Trackers and unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- IDE: 2 years
- _gcl_*: 3 months
- test_cookie: 15 minutes
-
Google Analytics for Firebase (Google Ireland Limited)
Google Analytics for Firebase or Firebase Analytics is an analytics service provided by Google Ireland Limited.
In order to understand Google's use of Data, consult Google's partner policy.
Firebase Analytics may share Data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config or Notifications. The User may check this privacy policy to find a detailed explanation about the other tools used by the Owner.
Upfit uses identifiers for mobile devices and technologies similar to cookies to run the Firebase Analytics service.
Users may opt-out of certain Firebase features through applicable device settings, such as the device advertising settings for mobile phones or by following the instructions in other Firebase related sections of this privacy policy, if available.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy.
-
Google Play Beta Testing (Google Ireland Limited)
Google Play Beta Testing is a beta testing service provided by Google Ireland Limited.
Personal Data processed: email address, Trackers and various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy.
Marketing
Upfit uses Trackers to deliver personalised ads or marketing content, and to measure their performance.
Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practises across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customise their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on Upfit.
Upfit participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Upfit uses iubenda (identification number 123) as a Consent Management Platform.
Trackers managed by third parties
-
Google Ads conversion tracking (Google Ireland Limited)
Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on Upfit.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
- IDE: 2 years
- test_cookie: 15 minutes
-
belboon (belboon GmbH)
Belboon is an advertising service provided by belboon GmbH.
Personal Data processed: Trackers and Usage Data.
Place of processing: Germany – Privacy Policy.
Storage duration:
- trackingoptout: 1 year
- tsc: 1 year
- tsv: 1 year
-
Google Signals (Google Ireland Limited)
Upfit uses Google Signals, a feature of Google Analytics, which will associate the visitation information that it collects from Upfit with Google information from accounts of signed-in Google-account users who have consented to this association for the purpose of ads personalisation. This Google information may include User location, search history, YouTube history and Data from sites that partner with Google – and is used to provide aggregated and anonymised insights into Users' cross device behaviours.
If a User falls under the described association, they may access and/or delete such Data via My Activity provided by Google.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
-
SendinBlue Email (SendinBlue SAS)
SendinBlue is an email address management and message sending service provided by SendinBlue SAS.
Personal Data processed: email address, Trackers and Usage Data.
Place of processing: France – Privacy Policy.
-
Mailgun (Mailgun Technologies, Inc.)
Mailgun is an email address management and message sending service provided by Mailgun Technologies, Inc.
Personal Data processed: email address and Trackers.
Place of processing: United States – Privacy Policy.
-
Amazon Affiliation (Amazon Europe )
Amazon Affiliation is a commercial affiliation service provided by Amazon.com Inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: Luxembourg – Privacy Policy.
-
Awin (AWIN AG)
Awin is a commercial affiliation service provided by AWIN AG.
Personal Data processed: Trackers and Usage Data.
Place of processing: Germany – Privacy Policy.
Storage duration:
- AWSESS: duration of the session
- _D9J: 1 year
- _aw_channel: 1 year
- _aw_j_*****: 3 months
- _aw_m_*****: 1 year
- _aw_sn_*****: 1 year
- _awc_*****: 1 year
- adv_awc: 1 year
- aw*****: 1 month
- awc: 1 year
- awin_source: 1 year
- awpv*****: 1 day
- bId: 1 year
- source: 1 year
- xd_hash: indefinite
How to manage preferences and provide or withdraw consent on Upfit
Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on Upfit.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
How to control or delete Cookies and similar technologies via your device settings
Users may use their own browser settings to:
- See what Cookies or other similar technologies have been set on the device;
- Block Cookies or similar technologies;
- Clear Cookies or similar technologies from the browser.
The browser settings, however, do not allow granular control of consent by category.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying consent
Users are free to decide whether or not to grant consent. However, please note that Trackers help Upfit to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, in the absence of the User's consent, the Owner may be unable to provide related features.
Owner and Data Controller
Up Gesundheit GmbH
Wurzner Str. 154a
04318 Leipzig
Germany
Data Protection Officer: Stanislaw Schmidt (interim)
Competent regulatory authority: Sächsische Datenschutzbeauftragte
Devrientstr. 5
01067 Dresden
post@sdtb.sachsen.de
Owner contact email: data-protection@upfit.io
Since the use of third-party Trackers through Upfit cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by Upfit.