Throughout this Policy the term “Personal Data” means information relating to an identified or identifiable individual (i.e. a natural person).
This Policy describes our data protection practices and your rights in relation to any collected or disclosed data through our website, application, and other types of services offered by IN2. (the “Service” or “Services”)
Where a consent from you to the processing of Personal Data described in this Policy is required under the applicable law, such consent will be obtained by appropriate mechanism such as ticking a box stating your consent, choosing technical settings for a service or website, or other statement or conduct clearly indicating your acceptance to the processing, depending on the Service you are using.
This Policy is governed by our Terms of Service.
1. Categories of Collected Data:
a. Personal Data we collect or obtain includes:
b. Data Collected Automatically Through Your Use of the application.
Technical information is normally collected as a standard part of your use of our Services. Such information includes, for example, your IP-address, access times, the website you linked from, pages you visit on our website or application, the links you use, the ad banners and other content you viewed, information about your devices and other such technical information your browser provides us with or as may be otherwise collected in connection with certain products and services.
The information we collect automatically enables us to better understand our users, where they come from, and what content is of interest to them. This enables us to improve the quality and relevance of our Services to our users.
c. Data Collected from Third Parties.
We may receive personal information about you from third party sources to assist us in providing and improving our application and Services, but only when these third parties confirmed either that you gave your consent or are otherwise legally permitted or required to disclose your personal information to us.
d. Cookies and Web Beacons.
2. The Purpose of Processing:
IN2 uses Personal Data it receives for several purposes:
3. Disclosure of Your Personal Data:
IN2 may disclose your Personal Data to the following categories of recipients or in the following circumstances:
IN2 does not under any circumstance sell or rent your Personal Data to other businesses or third parties for monetary or other valuable consideration.
4. Personal Data Security:
IN2 implements appropriate technical and organizational security measures and practices to prevent and minimize risks associated with providing and processing Personal Data. The measures we apply are designed to provide a level of security appropriate to the risk of processing your Personal Data.
Such security measures include, where appropriate, the use of firewalls, secure server facilities, tokenization, encryption, implementing proper access rights management systems and processes, careful selection of processors, sufficient training of IN2’s personnel involved in the processing, and other necessary measures to provide appropriate protection for your Personal Data against unauthorized use or disclosure.
5. The Privacy Rights Related to Your Personal Data:
a. Right to Access: You have the right to request information about and access the Personal Data we have collected from and of you.
b. Right to Rectify: You have the right to rectify an incorrect Personal Data we are holding about you.
c. Right to Portability: You have the right to request a copy of the Personal Data that we have collected from and of you in a commonly used and machine-readable form to transmit this information to another entity of your choice.
d. Right to Be Informed: You have the right to request, that we provide certain information about how we have processed, handled, disclosed and stored your Personal Data. This right includes:
e. Right to Be Forgotten: You have the right to request deletion of the Personal Data that we have collected from you. However, kindly be aware that we cannot delete Personal Data that is necessary for completing any transaction that was initiated prior to requesting a deletion or for compliance with binding legal obligations. In addition, kindly note that, IN2 may not delete Personal Data that was disclosed to a business, venue, studio or instructor that makes available a class or activity which you reserve or use through IN2, so that they can process the applicable reservation or activity and make available the class or activity to you. You need to directly contact such business, venue, studio or instructor and request deletion of the Personal Data that was collected from you.
f. Right to Withdraw Your Consent: To the extent that you provided consent to IN2’s processing of your Personal Data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of consent.
Where your personal data was processed based on your consent for direct marketing communication purposes, you have the right to withdraw your consent or unsubscribe for such processing at any time. You can exercise this right by clicking on the “unsubscribe” link in the marketing e-mails we send you.
g. Right to Complaint: For European Union citizens, you have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the General Data Protection Regulation.
Informing IN2 of Your Request:
In case you wish to make use of your rights mentioned above, you may, exercise such rights by contacting us at [email protected]
In some cases, especially if you wish us to delete or cease the processing of your Personal Data, this may also mean that we may not be able to continue to provide the Services to you.
Please note that IN2 may need to identify you and to ask for additional information in order to be able to fulfill your above requests. Please also note that applicable law may contain restrictions and other provisions that relate to your above rights.
The above section provides specific information for residents, as required under the General Data Protection Regulation.
6. Data Retention:
IN2 will retain any Personal Data you choose to provide to us until the earlier of: (a) you asking us to delete the Personal Data, (b) IN2’s decision to delete our Personal Data once the legitimate purpose for which it was collected is fulfilled, or (c) in case of a legal obligation to which IN2 is subject and require us to keep records of your Persona Data for a certain period of time.
7. Third Party Websites and Applications:
8. IN2’s Use of Your Personal Data for Marketing Purposes:
IN2 may use your collected Personal Data for marketing purposes. IN2 grants you many options regarding our use and disclosure of your Personal Data for marketing purposes:
9. Payment Processors and Tokenized Payments:
IN2 uses a third party payment processing company (the “Payment Processor”) that provides internet payment services. Every time you make a card-based payment through IN2, your card information is tokenized to provide for the secure transmission of the card token from your computer/device to our servers, where it is maintained in an environment that uses industry standard measures to ensure its security against loss or theft, and to the Payment Processor. IN2 will store your tokenized payment information safely without requiring you to enter your card details again for future payments. Your token is securely stored, and enables you to make future card-based payment in one-click.
10. Questions, Complaints, Claims:
If you have any questions, complaints or claims with respect to this Policy, please contact us at [email protected]. We will do our best to address your concerns.
By using our website or application, you agree to this Policy. If we decide to update this Policy or use your Personal Data in a different manner, we will notify you via email. Your continued use of our website or application constitutes your agreement to any update to this Policy.