Privacy Policy
Effective date:: 01.03.2021
1. Introduction
This document governs the data handling of the Food&Tracker website and web application’s use (hereinafter Food&Tracker.com or Food&Tracker website and web application or website and/or web application ), which can be found under the https://foodandtracker.com link.
This Privacy Policy applies to the data resulting from the interactions between the Users and/or Visitors (hereinafter: Users or User) and their devices or the during the use of the Food&Tracker.com’s services.
The User is any natural or legal person who visits the Food&Tracker website and/or web application.
By using the Food&Tracker.com, the User accepts and agrees to the data management specified in his Privacy Policy.
2. Legal Basis for data management
The collection, processing and use of data by the Food&Tracker.com is happened in accordance with the applicable legal provisions.
- Act CVIII of 2001 on Electronic Commerce and On Information Security Services (hereinafter: Act E-Com.)
- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (hereinafter: Act Info.)
- Act XXXVIII of 2018 on amending the Act CXII of 2011 on Informational Self-Determination and Freedom of Information in connection with the data protection reform of the European Union and other related laws (hereinafter: Act Info.)
- Act XLVIII of 2008 on The Basic Conditions and Certain Limitations of Commercial Advertising (hereinafter: Act Advert.)
- Regulation (EU) 2016/679 – General Data Protection Regulation (hereinafter: GDPR)
3.Data Controller
The responsible Data Controller for the collection, processing and use of the User’s personal data:
SAILSOFT Fejlesztő, Tervező és Szakértő Korlátolt Felelősségű Társaság
Bláthy Ottó Street 10. 1. floor 4.
2440 Százhalombatta
HUNGARY
4. Encryption
All the incoming and outgoing data traffic when communicating with the web site and/or web application and/or third parties is encrypted via TLS, which means third parties cannot read those data. The code https:// in the address bar and the lock icon show that the connection for using the website and/or web application is encrypted.
5. Collection, processing and use of personal data
5.1. Personal data
Personal data means in terms of GDPR: “‘personal data’ means any information relating to an identified or identifiable natural person;
an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name,
an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
The Food&Tracker.com collects, uses and processes the Users’ personal data in several ways. These methods are described below.
5.2. Data collection during the use of the website
During the use of the Food&Tracker website, the following data is recorded about the User:
- IP address;
- details of the browser (user agent data: type and language of the browser);
- log files (operations in the system) and their dates and time:
- In the case of registered and logged in Users: linked to the User ID, which is linked to the User’s email address;
- In the case of not registered and/or logged out Users: these log files are not linked to any User ID;
- Operating system;
- URL
The purpose of the data management: This data is collected by Food&Tracker.com for statistical purposes, security reasons (investigation of abuse and fraud) and maintenance of the application (correction of error and anomalies).
The legal basis for the data management: Enforcing the legitimate interests of Food&Tracker.com, as Data Controller based on the point (f) of Art. 6 (1) of GDPR.
This data is not available to Users.
5.3. Data collection during the use of the web application
5.3.1. Required information for registration
The User must register for the use of the Food&Tracker web application.
During the registration the following, personal data must be provided by the User:
- Email address: Required to log in the web application and for contact purposes.
- Password: Required to securely log in to the web application.
Duration of data management: Until the User himself/herself cancels his/her registration with the corresponding function in the Food&Tracker web application, as it is described in the point (1) of Art 6 of GDPR.
The legal basis for the data management: Voluntary permission of the user, based on the point (a) of Art. 6 (1) of GDPR.
This data is not available to other Users.
5.3.2. Required data for first login
After registering for the Food&Tracker web application, the User must provide the following, mandatory, personal data when logging in for the first time:
- gender;
- birth date;
- current weight;
- height;
- activity;
- goal to be achieved.
The purpose of the data management: The calculator of the web application – which is also used by the WHO – calculates the recommended calorie intake and the corresponding target values for the User.
Duration of data management: Until the User himself/herself cancels his/her registration with the corresponding function in the Food&Tracker web application, as it is described in the point (1) of Art 6. of GDPR.
The legal basis for the data management: Voluntary permission of the user, based on the point (a) of Art. 6 (1) of GDPR.
This data is not available to other Users.
5.3.3. Recorded data by the consumption log
During the use of the Food&Tracker web application, the following data is recorded about the User:
- meals, fluid intake and calorie intake;
- sports activities and burned calories;
- blood sugar levels;
- weight change.
The purpose of the data management: The User can track his/her eating habits, calorie intake and burned calories, weight changes, fluid intake and blood sugar levels.
Duration of data management: Until the User himself/herself cancels his/her registration with the corresponding function in the Food&Tracker web application, as it is described in the point (1) of Art 6. of GDPR.
The legal basis for the data management: Voluntary permission of the user, based on the point (a) of Art. 6 (1) of GDPR.
This data is not available to other Users.
5.3.4. Automatically recorded data by the Food&Tracker
During the use of the Food&Tracker web application, the following data is recorded about the User:
- date of the registration;
- details of the browser (user agent data: type and language of the browser);
- IP address;
- log files (operations in the system) and their dates and time linked to the User ID, which is linked to the User’s email address;
- Operating system;
- URL.
The purpose of the data management: This data is collected by Food&Tracker web application for statistical purposes, security reasons (investigation of abuse and fraud) and maintenance of the application (correction of error and anomalies).
The legal basis for the data management: Enforcing the legitimate interests of Food&Tracker.com, as Data Controller based on the point (f) of Art. 6 (1) of GDPR.
This data is not available to other Users.
5.4. Sharing with friends
One of the features of the Food&Tracker web application is that the User can share his/her own-created Food Categories and nutrition data of the own-recorded food and meals with his/her friends and family. The following data is recorded during the sharing:
- shared data (Food Category, foods, meals);
- the User ID of the recipient User;
- the User ID of the sharing User.
The purpose of the data management: Arrival of the shared data into the recipient User’s web application.
Duration of data management: Until the recipient User himself/herself cancels his/her registration with the corresponding function in the Food&Tracker web application, as it is described in the point (1) of Art 6. of GDPR.
The legal basis for the data management: Voluntary permission of the user, based on the point (a) of Art. 6 (1) of GDPR.
This data is not available to other Users.
5.5. Web data
In order to the Food&Tracker website and web application to be user-friendly and effective, certain personalized settings to be stored and to collect other information by Food&Tracker.com and third parties commissioned by Food&Tracker.com store so-called cookies on the Users’ hard disk.
The legal basis for this type of data management: Enforcing the legitimate interests of Food&Tracker.com, as Data Controller based on the point (f) of Art. 6 (1) of GDPR.
5.5.1. Cookies
5.5.1.1. The definition of the cookies
The cookie is a “packet of information” (small text files), which is sent by the server to the web browser, and then it is sent back by the web browser to the server each time, when a request is created to the server. The cookies are created by the web server itself with the help of the web browser on the User’s device, where they are stored in a separate directory.
5.5.1.2. Cookies used by Food&Tracker.com
The Food&Tracker.com uses session cookies. These cookies can be:
- Temporarily, which are deleted from the User’s device, when the browser is being closed.
- Persistent, which are not deleted from the User’s device, when the browser is being closed. An example is the “Remember me” function, which eliminates the need to log in manually to the web application each time by the User.
5.5.1.3. Cookies used by third parties
Third parties commissioned by Food&Tracker.com may also use cookies for their operation. The Food&Tracker.com to measure the traffic data uses the services of Google Analytics, which creates statistics anonymously. The Google Analytics collects the following data including, but not limited to the following:
- details of the browser (user agent data: type and language of the browser);
- which subpages have been visited by the User within Food&Tracker.com;
- how long the Visitor has been on Food&Tracker.com;
- how long the User has been using the Food&Tracker web application.
For more information about the privacy policy of Google Analytics and the used cookies, the User or Visitor can review the Google Analytics’ Privacy Policy.
5.5.1.4. Delete and disable cookies
The User has the right to delete or block the cookies used by the Food&Tracker.com and/or by the third parties commissioned by Food&Tracker.com. The User can delete or disable the cookies using the corresponding function of the different browsers. This functions can be usually found in the browsers’ Settings.
The User acknowledges that if the cookies are deleted or disabled, the Food&Tracker.com website and web application will be available on a limited basis, as the use of cookies is essential to provide certain features and settings.
5.5.2. HTML5 Local Storage
Besides the cookies, the Food&Tracker.com also uses HTML5 Local Storage.
HTML5 Local Storage in the browsers is different from the cookies, but it is used for the same purpose. Its purpose is to pair the tracking ID with a specific web server by the web browser, so the web server can identify the web browser.
The User has the right to delete or block the HTML5 Local Storage used by the Food&Tracker.com.
The User can delete or disable the HTML5 Local Storage using the corresponding function of the different browsers. This functions can be usually found in the browsers’ Settings.
6. Method and security of data storage
The data is stored electronically on Azure cloud service servers provided by Microsoft. For more information about the privacy policy of Microsoft and the used cookies, the User can review the Microsoft’s Privacy Policy.
7. Transmission and disclosure of data
The User’s personal data won’t be passed or disclosed on to third parties and any natural persons by the Food&Tracker.com, unless it is requested to do so by an authority or official office with a proper legal basis.
8. User Rights
8.1. Right to review the data
The User has the right to review his/her personal data stored by Food&Tracker.com with the prepared functions for this purpose, available in the web application.
The legal basis for review the data: Art 15 of GDPR.
8.2. Right to withdraw and erase data
The User has the right to erase the previously recorded personal and other data any time, without any justification with the prepared functions for this purpose, available in the web application.
The legal basis for erase data: Art 17 of GDPR.
8.3. Right to lodge a complaint
The User has the right to lodge a complaint to the Hungarian National Authority for Data Protection and Freedom of Information.
Contact details of the Hungarian National Authority for Data Protection and Freedom of Information:
Address: Falk Miksa Street 9-11, 1055, Budapest, Hungary
Postal address: Mailbox 9, 1363, Budapest, Hungary
Telephone: +36 (1) 391-1400
E-mail address: dpo@naih.hu
Website: https://www.naih.hu/
The legal basis to lodge a complaint: Art 77 of GDPR.
9. Contacts
Should the User or Visitor have any questions, comments or feedback regarding the services provided by the Food&Tracker.com or this Privacy Policy, please contact info@foodandtracker.com.