ONEFORONE PRIVACY POLICY
Last updated at 12 December, 2023

We are committed in defending the rights of personal data protection of our customers and contacts therefore we publish this information, in order to inform properly:

  • Of your rights and use of this website BEFORE providing the data;
  • Of the measures that guarantee the protection and integrity of the data;
  • So that the consent prior to the submission of data on your part may be duly substantiated.

All this fulfilling with all the obligations legally provided in the Organic Law 15/1999, of December 13, of Data Protection (LOPD), in its Development Regulation 1720/2007, of December 21 and in the European Regulation of Data Protection (RGPD), as well as all Spanish and European regulations applicable to this matter.

Therefore, any user who wants information, must necessarily mark the option, read and accept the website's privacy policy, the legal warning and the cookies policy.

1. Who is responsible for the processing of your data?

1FOR1 APP, S.L. (acting as Oneforone). Reachable at info@oneforoneapp.com and through Instagram at https://www.instagram.com/oneforoneapp.

2. What personal data do we process and for what purpose?

  • Identifying data in the application (name, email, social login ID). Its purpose is to identify you in the application and be a member of Oneforone.
  • Location data provided by the user of the application: The purpose is to better describe the experience and location you are doing and the places you visit so that other members of the community can know or even take it as a possible route for future experiences or events. You will be the one to tell us where you are, through the native location system of your device and it will link with the Apple (iOS only) or Google Maps application to locate your location or route whenever you want.
  • Videos or images that users decide to share with the community that the user extracts from his mobile phone gallery.
  • Videos or images from the web or videos or images from private locations that the user posts. The private capture is within the domestic sphere, so the personal data protection regulations do not apply, but the moment you share or disseminate third-party information or third-party material, you are responsible for having obtained the necessary permissions to do so beforehand.
  • Comments and contributions that users can post on the application and that may involve personal data for the content they provide. In this case the purpose of this treatment is to manage their participation within Oneforone's community.
  • Publication and sharing on social media (User, location). Any TikTok or Instagram user outside of the Oneforone community who wants us to post or share certain images published on those platforms will only have to use our corporate hashtags or tag us in their posts. The purpose of this point lies in Oneforone's legitimate interest to get to know more members of the community and be able to share their activity based on the previous relationship established by the use of corporate hashtags and tags of our profile on social media.
  • Optionally, you may request to receive periodic information related to the Oneforone community via NEWSLETTER. In this case the purpose is to be able to maintain a continuous relationship with members, who have expressly ticked this option.
  • Additionally we inform that Oneforone will count on a data history (name, email, social login ID). This is necessary to be able to have a history of the users which will allow for subsequent proceedings.
  • Data that may indirectly provide information of a personal nature, derived from the activation of cookies and similar applications (IP addresses, browsing preferences, etc.).

This personal information may be collected through the following platforms:

  • Oneforone App
  • Oneforone Web

Once collected, your data becomes part of a treatment to which the corresponding security measures are applied.

3. How long will we keep your data?

The personal data collected through the Oneforone App will be kept for the duration of time necessary to be able to carry out the procedure for which it was provided and for the fulfillment of legal obligations. Once the procedures are completed, the basic contact information will stay in Oneforone's database, to allow for subsequent proceedings. Once the relationship has finished they will be blocked only in order to comply with the possible legal obligations.

When you decide to unsubscribe as a user, your videos, albums and locations will be kept temporarily, in case you decide to use our application again. Therefore, we maintain the right to keep this type of information for 90 days. Once this period has elapsed, we will proceed to delete it, keeping only the basic user data for historical and analytical purposes.

4. What is the legitimacy for the treatment of your data?

Legally we can treat the data we request from you once you've given us your consent to do so. This happens when you consent by expressly creating a profile in Oneforone after having been informed of our Privacy Policy and our Terms and Conditions.

In general, in order to access our application, you must accept our terms of service, as well as having read our privacy policy, cookies and other related legal texts. In the case of the archive and the sharing and publication of videos or images on social media. In the first scenario, the basis of this point lies in Oneforone's legitimate interest to provide a good service to users and manage the relationship with them, as well as guaranteeing the safety of users. For the second scenario, Oneforone has legitimate interest in getting to know more members of the community and share their activity based on the previous relationship established by the use of corporate hashtags and tags of our profile on social media.

Finally, you allow us to make public those videos that you share in our app by expressly posting them.

5. Is your data communicated to other recipients?

The data that you enter on the website will not be communicated to other entities, except for legal imperative or to be able to give fulfillment to the reason for which they were provided.

The Oneforone app makes use of third-party tools, which make it possible to integrate the utilities and tools you can enjoy:

Within our application you can activate different features such as the location, push notifications or access to your gallery upon personal selection. The data collected upon activation of these functions will be treated in the same way as the rest of the information collected via our forms.

Your data can be collected via forms on our website which are hosted on the GCP servers, located in the USA. This company despite being outside of the European Union is subject to the Privacy Shield to guarantee the protection of information. You can consult their privacy policy at: https://cloud.google.com/terms/cloud-privacy-notice

6. What rights do you have when you provide us with your information?

Right of information

You have the right to be informed clearly BEFORE your data is collected about what data is being treated, with what purpose they are treated, where they have obtained the data and if they are going to communicate it or have communicated it to someone.

Right of access

To know which of your data is being treated, for what purpose, where they have obtained the data and if they are going to communicate it or have communicated it to someone.

Right of rectification

To modify your inaccurate or incomplete data.

Right of deletion

To cancel/delete your inappropriate or excessive data.

Right of cancellation

To cancel your inadequate or excessive data.

Right of opposition

To prevent your data from being treated or to stop being treated, only in the cases established by law.

Right of treatment limitation

To request the non-use of data treatment in the cases established by law.

Right to data portability

To be able to receive your data provided in a structured electronic format for normal use and in order to be able to transmit them to the person in charge.

Right not to be the subject of individualized decisions

In order to not make a decision about you that produces legal effects or affects you based only on the treatment of your data.

7. How can you exercise your rights or request data deletion?

To request data deletion navigate to the data deletion page, log in to your account, delete your account and wait 90 days until we delete your data permanently. To request immediate data deletion, follow the steps below.

To exercise any of your rights you must request it to the email info@oneforoneapp.com including:

  1. Photocopy of the ID Number (passport or other identity document) or electronic signature.
  2. Content of the request you make and, if necessary, the documents that prove it.
  3. Address (for notification purposes), date and signature.

If you exercise your rights by a voluntarily appointed representative, you must provide the document or electronic instrument that proves the representation.

In the event that the owner of the data is an under-age or disabled, the rights will be exercised by their duly accredited legal representative.

8. What can you do if your rights have not been catered?

In case you consider that we have not satisfied your request, you can submit a claim to the Spanish Agency for Data Protection in the section of its website:
https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/nuevaReclamacion.jsf?QID=Q500&ce=0

9. Links to other websites

This privacy policy only applies to personal data collected through our website, but this website contains links to other websites so the Center is not responsible for the privacy practices of these other websites.

That is, when you click on one of these links you are leaving our website, so you should read the privacy policies of those other websites that collect personal data.

If you want more information, the Spanish Agency for Data Protection has published a citizen's guide, you can access it at:
https://www.aepd.es/es/documento/guia-ciudadano.pdf

10. Children's Privacy

These Services do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18 years of age. In the case we discover that a child under 18 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do the necessary actions.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.