Personal Data Privacy Policy
1. Identity of the Data Controller
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), you are hereby informed that the controller responsible for the processing of personal data collected on this website and through the services provided is:
- Company name:
- Jorge Pérez Blanco
- Tax ID (CIF/NIF):
- 29494338N
- Registered address:
- Calle General Gutiérrez Mellado 32
- Contact email:
- zonecalisthenic@gmail.com
- Phone:
- 695957082
Hereinafter, "the Company".
2. Purposes of Processing and Legal Basis
The personal data provided will be processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Management and provision of outdoor personal training services | Performance of a contract |
| Management of bookings, billing, and payments | Performance of a contract |
| Development of personalised training plans, physical condition, and health-related variables associated with the contracted services | Explicit consent (when sensitive data is collected) |
| Sending informational communications related to the contracted services | Prior consent of the data subject |
| Sending personalised commercial communications | Prior consent of the data subject |
| Compliance with legal obligations | Legal obligation |
3. Personal Data Collected
The following data may be processed:
Identification data
- Full name
- ID card / Passport
Contact data
- Postal address
- Phone number
- Email address
Administrative management data
- Banking or payment details (when necessary)
Health data relevant to sporting activity (considered specially protected data)
- Information on physical condition and health
Data is collected directly from the data subject, on a voluntary basis, and always with clear information about its processing.
4. Consent
The data subject gives explicit consent for the processing of their personal data by means of:
- Express acceptance of this Privacy Policy.
- Active ticking of consent boxes where applicable.
- Signing physical or electronic forms related to the contracting of services.
The processing of health data will be carried out exclusively with the explicit, informed, and prior consent of the data subject.
5. Data Retention Period
Personal data will be retained for the time necessary to fulfil the purposes for which it was collected and for the legally required periods:
- Client and contractual relationship data: 5 years from the end of the relationship.
- Tax and accounting data: 6 years in accordance with tax regulations.
- Sensitive data with consent: as long as consent is maintained and deletion is not requested.
Once the retention period has been reached, the data will be blocked or securely deleted.
6. Disclosure of Data to Third Parties
Data may be transferred or disclosed to:
- External collaborators providing services necessary for the business (tax advisors, accounting consultants, banking entities for collections).
- Public administrations and official bodies when there is a legal obligation.
- Technology providers that assist in the secure management and storage of data.
Data will not be transferred to third parties without the consent of the data subject, except where required by law.
7. Rights of Data Subjects
In accordance with the GDPR and the LOPDGDD, data subjects have the following rights:
- Access to the personal data being processed.
- Rectification of inaccurate or incomplete data.
- Erasure of data when it is no longer necessary.
- Restriction of processing in certain circumstances.
- Objection to the processing of their data.
- Data portability to another controller where applicable.
- Withdrawal of consent at any time if processing is based on consent.
How to exercise your rights
You may exercise your rights by sending a written request to:
Email: zonecalisthenic@gmail.com
Postal address: Calle General Gutiérrez Mellado 32 1º D, Las Palmas de Gran Canaria
Please attach a copy of your identification document.
If you are not satisfied with the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency (AEPD):
8. Security Measures
The Company has adopted and maintains appropriate technical and organisational measures to ensure the security of data, protecting it against unauthorised access, alteration, loss, or unauthorised processing, in compliance with the GDPR and applicable regulations.
9. Image Processing
In the event of capturing photographs or videos of training sessions for promotional purposes, the Company will request express and specific consent from participants. No image will be published without explicit authorisation.
10. Profiling and Automated Decision-Making
Data will not be used for automated decision-making or profiling with legal effects or that produce significant consequences for the data subject without their explicit consent.
11. Changes to the Privacy Policy
The Company reserves the right to modify this Privacy Policy to adapt it to legal or business changes. Any update will be published and clearly notified.