Privacy Policy

TANITA App Universe

1. Identity of the Collector of the Data

1.1  This document is the Corporate Privacy Policy of the Dutch limited liability company TANITA Europe B.V., with corporate seat at Amsterdam and registered office at Hoogoorddreef 56 E, 1101 BE Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under no. 34283024 (“TANITA”).

1.2  With regard to the users of the TANITA App Universe: TANITA is the data controller of Personal Data within the meaning of the General Data Protection Regulation (Regulation EU 2016/679) (“GDPR”).

1.3  With regard to the clients of the TANITA App Universe users: TANITA is the data processor of Personal Data of the clients of the user of the TANITA App Universe within the meaning of the GDPR.

1.4  TANITA processes personal information provided and collected by the users (“Users”) of its app (“TANITA App Universe” or the “App”) on behalf of the User for the purposes set out below, and in accordance with the terms of this Privacy Policy.

1.5  The App is an application for mobile devices which allows Users to collect, store and process their clients’/patients’ personal data, enabling the User to collect and store sensitive health data of its clients and/or patients.

1.6  All correspondence with regard to this Privacy Policy should be directed to info@TANITA.eu or to: TANITA Europe B.V., Hoogoorddreef 56 E, 1101 BE Amsterdam, The Netherlands.

2. Principles for Processing Personal Data

2.1  TANITA takes your privacy and the protection of your Personal Data very seriously. In this Privacy Policy we outline the purpose of our collection of your Personal Data, and the conditions under which we collect and use your Personal Data. The collection of your Personal Data is, if reasonably possible, subject to confidentiality. We will do our utmost to ensure that such collection is done in accordance with all relevant mandatory data protection legislation.

2.2  When collecting your data, we take all reasonably possible technical and organisational precautions to ensure that your data does not become accessible to unauthorised third parties.

3. Personal Data

3.1  For the purposes of this Privacy Policy, “Personal Data” means any information relating to an identified or identifiable natural person, such as a name, age, postal address, email address, telephone number, etc.

4. Health Data Collected and Accessed

4.1  In connection with the use of the TANITA App Universe, TANITA collects, accesses and processes the following categories of Personal Data, including sensitive health data:

Personal Identification Data

•       Full name

•       Date of birth

•       Sex

•       Height

•       Address

•       Country

•       Telephone number

•       Email address

Health & Body Composition Data

The following sensitive health data is collected via TANITA body composition measurement devices and the App:

•       Body weight

•       Body Mass Index (BMI)

•       Body fat percentage

•       Body water percentage

•       Muscle mass

•       Physique Rating

•       Metabolic age

•       Visceral fat rating

•       Muscle Quality Score

•       Basal Metabolic Rate (BMR)

•       Bone mass

•       Bioelectrical Impedance Analysis (BIA) data

•       Phase Angle

4.2  This health data is classified as sensitive Personal Data under the GDPR. It is collected for the purpose of enabling healthcare professionals and practitioners (the “Users”) to assess and monitor the body composition of their clients and patients.

4.3  We may also collect your name and email address for the purpose of: (a) contacting you after you have filled in a contact form; (b) informing you of changes to our products or applicable terms and conditions; (c) maintaining our technical administration; (d) sending you information on our products and events, if consented to; and (e) analysis and research.

4.4  For the purpose of registering your user account, we may collect your name, address, telephone number, email address, age, nationality and occupation.

4.5  If TANITA introduces a new process or application that will result in the processing of Personal Data for purposes beyond those described above, TANITA will inform you in advance.

5. Passing on Personal Data

5.1  Personal Data is only passed on or otherwise transferred to third parties if it is essential for the performance of our services, or if you have given your explicit prior consent.

5.2  For storage purposes, your Personal Data may be transferred to selected third parties of TANITA. TANITA makes use of cloud server services from Microsoft Azure for data processing purposes. TANITA ensures that these third parties comply with all applicable privacy legislation.

5.3  TANITA may not transfer Personal Data to a country outside the European Economic Area (“EEA”), unless the User instructs TANITA in writing prior to the transfer, or TANITA is legally obliged to do so. Any transfer outside the EEA will be conducted only where an adequate level of protection is ensured, for example through EU Standard Contractual Clauses.

6. Data Retention

6.1  TANITA only retains your Personal Data for as long as is necessary for the purpose for which it was collected, or as required by applicable law.

6.2  The following retention periods apply:

•       User account data (name, email, contact details): Retained for the duration of your active account, and deleted within 30 days of account deregistration or deletion.

•       Health and body composition data: Retained for as long as the User’s account remains active and for a period of up to 2 years thereafter, unless the User requests earlier deletion or legal obligations require a different retention period.

•       Communication data: Retained until you withdraw consent, after which it is deleted within 30 days.

•       Technical and administrative data (e.g. logs): Retained for a maximum of 12 months, unless retention for a longer period is required by law.

6.3  Upon termination of the agreement between TANITA and the User, TANITA will, at the choice of the User, return all Personal Data to the User or destroy it. If the User does not respond within one month of being offered the return of the data, TANITA will destroy all Personal Data and confirm this in writing upon request.

7. How to Request Data Deletion

7.1  You have the right to request the deletion of your Personal Data, including sensitive health data, at any time. TANITA will process your deletion request without undue delay and within 30 days of receipt.

7.2  To request deletion of your data, you can:

•       Send an email to info@TANITA.eu with the subject line “Data Deletion Request”, including your full name and the email address associated with your account;

•       Write to us at: TANITA Europe B.V., Hoogoorddreef 56 E, 1101 BE Amsterdam, The Netherlands; or

•       Delete your account directly within the TANITA App Universe, which will trigger automatic deletion of your associated Personal Data within 30 days.

7.3  Please note that TANITA may be required to retain certain data for a longer period where required by applicable law (e.g. tax or regulatory obligations). In such cases, TANITA will inform you of the specific data that cannot yet be deleted and the reason for the extended retention.

8. Protection of Personal Data and Data Breach Reporting

8.1  In the event your Personal Data is collected and stored, we ensure that we make use of adequate security measures to assure appropriate protection of your Personal Data. These measures include pseudonymisation and encryption of personal data, measures to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems, and regular testing and evaluation of technical and organisational security measures.

8.2  In the event of a data breach that may negatively affect your privacy, TANITA is obligated to report this to the Dutch Data Protection Authority and, where required, to inform you. Such notification cannot, in any way, be considered as an acceptance of liability for possible damages arising from the data breach.

9. Your Rights

10.1  At any point and free of charge, you have the right to obtain information from us with regard to the collection of your Personal Data, the origin and recipient of that data, and the purpose of the data collection.

10.2  You also have the right to correct, restrict, delete or object to the collection of your Personal Data. Stored Personal Data will be deleted if you withdraw your previously granted consent, if the data is no longer necessary to complete the purpose for which it was stored, or if storage is otherwise impermissible.

10.3  In some cases, you may have the right to data portability, meaning we must provide your Personal Data in a structured, commonly used and machine-readable format. Upon your request, we will inform you of your right to data portability.

10.4  You may withdraw your consent or address any questions or modifications to us at any time by emailing info@TANITA.eu or writing to the address in Section 1.6.

10.5  At any point you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) with regard to our collection of your Personal Data.

11. Sub-Processors and Third-Party Processors

11.1  TANITA may engage third-party sub-processors to assist in providing the App and its services. Any sub-processor engaged by TANITA is bound by the same data protection obligations as TANITA under the GDPR.

11.2  TANITA currently uses Microsoft Azure for cloud storage and processing. TANITA will inform Users of any intended changes to sub-processor arrangements.

12. Right to Modify this Privacy Policy

12.1  TANITA reserves the right to amend this Privacy Policy in accordance with applicable legal data protection provisions at any time. Should such an amendment affect the scope of use of your Personal Data, any modifications will be subject to your prior consent.

12.2  If you have questions about this Privacy Policy or concerns about how we collect, use or protect your personal information, please contact us at info@TANITA.eu.

TANITA Europe B.V. • Hoogoorddreef 56 E, 1101 BE Amsterdam, The Netherlands • info@TANITA.eu