PRIVACY POLICY

1. DATA CONTROLLER

Who is responsible for processing your data?

NUBAPP APPLICATIONS, S.L.

  • Address: Calle Madres de la Plaza de Mayo 44, Office 5.2, 31013, Pamplona (Navarre, Spain)
  • Tax ID (NIF): B71145759
  • Telephone: +34 948 368 138
  • Email: nubapp@nubapp.com

Hereinafter, “NUBAPP”.

2. WHAT IS NUBAPP?

NUBAPP provides technological solutions for sports centres, gyms and CrossFit boxes through the RESASPORTS and RESAWOD platforms.

Through our applications and web services, users may:

  • Register with sports centres.
  • Book classes and activities.
  • Manage access.
  • Make payments.
  • Check schedules and training sessions.
  • Communicate with their sports centre.

NUBAPP primarily acts as the technology provider for sports centres connected to the platform.

3. PERSONAL DATA WE MAY PROCESS

Depending on the use of the platform or mobile application, NUBAPP may process the following categories of data:

Identification data

  • Full name
  • Email address
  • Telephone number
  • Date of birth
  • Profile photograph (if provided by the user)

Usage and activity data

  • Bookings made
  • Attendance at activities
  • Application usage history
  • Information related to training sessions and sports activity

Financial data

  • Information related to payments and subscriptions
  • Transaction history

NUBAPP does not directly store full bank card details when payments are processed by specialised payment providers.

Technical data

  • IP address
  • Device identifiers
  • Operating system
  • Technical and security logs

4. PURPOSES OF DATA PROCESSING

Personal data may be processed for the following purposes:

Service provision

  • Managing access to the platform.
  • Enabling bookings, registrations and activity management.
  • Managing payments and subscriptions.
  • Handling incidents and technical support.
  • Maintaining the security and operation of the platform.

Communications

  • Sending service-related notifications.
  • Responding to information or support requests.
  • Sending commercial communications where consent or legal authorisation exists.

Security and service improvement

  • Preventing fraud and unauthorised access.
  • Detecting technical incidents.
  • Improving platform performance and functionality.

Legal compliance

  • Complying with legal, tax and regulatory obligations.
  • Responding to requests from competent authorities.

5. LEGAL BASIS FOR PROCESSING

The legal bases legitimising the processing of data are:

  • Performance of the contract or provision of the service.
  • User consent where necessary.
  • NUBAPP’s legitimate interest in ensuring the security, continuity and improvement of the service.
  • Compliance with legal obligations.

6. RECIPIENTS AND DATA DISCLOSURES

Data may be disclosed to:

  • The sports centre or sports entity selected by the user.
  • Technology providers necessary for the provision of the service.
  • Payment and financial service providers.
  • Public authorities where legally required.

NUBAPP does not sell personal data to third parties.

7. SERVICE PROVIDERS AND SUB-PROCESSORS

In order to properly provide the service, NUBAPP may use external technology providers acting as data processors or sub-processors.

Among others, NUBAPP may use services provided by:

  • Amazon Web Services (AWS) for cloud infrastructure, hosting, databases and backups.
  • Email and communication services.
  • Analytics and technical monitoring providers.
  • Payment gateways.

Where such providers are located outside the European Economic Area, NUBAPP shall implement appropriate safeguards in accordance with the General Data Protection Regulation (GDPR).

8. DATA RETENTION

NUBAPP shall retain personal data for as long as necessary to fulfil the purposes described in this policy.

Generally:

  • Data associated with an active account shall be retained while a relationship exists with the user or the associated sports centre.
  • Certain data may subsequently be retained in a blocked form to comply with legal, tax or administrative obligations, or for the defence against potential claims.
  • Technical data and security logs may be temporarily retained for security and fraud prevention purposes.

Data deletion

Users may request the deletion of their personal data at any time by sending a request to:

nubapp@nubapp.com

Additionally, certain data may be deleted directly by the sports centre responsible for managing the user.

Once the request has been received:

  • NUBAPP shall proceed with the deletion or anonymisation of personal data that is no longer necessary.
  • Certain information may remain blocked for legally required periods.
  • Backup copies may temporarily retain residual information until the ordinary renewal of backup cycles in accordance with applicable regulations and internal security policies.

9. USER RIGHTS

Users may exercise the following rights:

  • Access
  • Rectification
  • Erasure
  • Objection
  • Restriction of processing
  • Data portability
  • Withdrawal of consent

To exercise these rights, users may contact:

nubapp@nubapp.com

Users may also lodge a complaint with the Spanish Data Protection Agency.

10. INFORMATION SECURITY

NUBAPP applies appropriate technical and organisational measures to protect personal data against:

  • unauthorised access,
  • loss of information,
  • alteration,
  • destruction,
  • improper disclosure.

Among other measures, NUBAPP uses access controls, encrypted communications, monitoring systems and backups.

11. MINORS

Use of the platform may be linked to sports activities for minors organised by sports centres.

In such cases, the processing of data shall be the responsibility of the relevant sports centre in accordance with its own relationship with the user or their legal representatives.

12. COOKIES

NUBAPP’s website and applications may use cookies or similar technologies to ensure the technical functioning of the service, remember preferences and obtain usage statistics.

For further information, please consult our Cookie Policy.

13. CHANGES TO THE PRIVACY POLICY

NUBAPP may amend this Privacy Policy in order to adapt it to legislative, technical or operational changes to the service.

Where changes are significant, users shall be appropriately informed.

14. CONTACT

For any queries related to privacy or data protection, you may contact:

NUBAPP APPLICATIONS, S.L.

  • Address: Calle Madres de la Plaza de Mayo 44, Office 5.2, 31013, Pamplona (Navarre, Spain)
  • Email: nubapp@nubapp.com
  • Telephone: +34 948 368 138