Privacy Policy

Thank you for your interest in Fits For Me. The protection of your personal data is important to us. In this privacy policy we inform you about which data we process, for what purposes, and what rights you have.

1. Data controller

The data controller pursuant to the General Data Protection Regulation (GDPR) and the Luxembourg Data Protection Act of 1 August 2018 is:

Fits For Me S.à r.l.
Niederkorn Mall, 1, rue de l’Atelier
L-{{POSTLEITZAHL}} Niederkorn, Luxembourg
Email: info@fitsforme.org
Phone: {{TELEFONNUMMER}}

2. Data protection contact

You can reach our data protection contact at admin@fitsforme.org.

3. General information on data processing

3.1 Scope of processing

We process our users’ personal data only insofar as this is necessary to provide a functional website and our content and services. Processing generally takes place only with the user’s consent or where processing is permitted by law.

3.2 Legal bases

Where we obtain consent for processing operations, Art. 6(1)(a) GDPR serves as the legal basis. For processing necessary for the performance of a contract, Art. 6(1)(b) GDPR applies. Where processing is necessary to fulfil a legal obligation, Art. 6(1)(c) GDPR applies. For processing based on legitimate interests, Art. 6(1)(f) GDPR applies.

3.3 Data deletion and storage period

Personal data are deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place where this is provided for by Luxembourg, European or national legislation, in particular for commercial and tax retention periods (generally 10 years).

4. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data are collected:

• IP address (truncated)
• Date and time of access
• Browser type and version
• User’s operating system
• Referrer URL
• Pages accessed

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technically error-free provision).

5. Hosting

This website is hosted by Webflow, Inc. (398 11th Street, San Francisco, CA 94103, USA). Webflow processes users’ personal data on our behalf (data processing agreement under Art. 28 GDPR). Data transfers to the USA take place on the basis of the EU-US Data Privacy Framework and additional standard contractual clauses.

More information: webflow.com/legal/privacy

6. Contact via email

If you contact us by email at info@fitsforme.org, the personal data transmitted (name, email address, request) will be stored to process the enquiry. Legal basis: Art. 6(1)(b) and (f) GDPR. The data will be deleted as soon as the enquiry has been finally processed and no statutory retention obligations apply.

7. Membership and studio access

Within the scope of a membership, we process the following data: name, address, email, date of birth, phone number, payment data (bank details), membership number, studio access history.

Legal basis: Art. 6(1)(b) GDPR (performance of contract). The data are stored for the duration of the membership and for the duration of statutory retention periods.

Membership management system in use: Clubplanner (provider: Club Planner BVBA, Belgium). Data is processed in an EU-based data centre.

8. Trial training booking

To book a trial training session (25 EUR, fully credited toward a membership), we process name, email, phone and preferred date. Legal basis: Art. 6(1)(b) GDPR.

Bookings are made via Clubplanner (provider: Club Planner BVBA, Belgium), available at fitsforme.clubplanner.app. When you click the booking link, you leave our website and use the Clubplanner platform. The privacy policy of Clubplanner additionally applies.

9. Booking of physiotherapy appointments via Doctena

On our website we link to the external booking portal Doctena (doctena.lu). When you click the link, you leave our website. Doctena is a service of DOCTENA S.A., 65, avenue de la Gare, L-1611 Luxembourg.

When you use the Doctena booking portal, personal data and possibly special categories of personal data within the meaning of Art. 9 GDPR (health data) are processed by Doctena. The privacy policy of Doctena applies: doctena.com/en/privacy.

10. Embedded map (Google Maps)

On our contact page, we embed a map of the Google Maps service (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When called up, data is transmitted to Google. The embedding only takes place after your consent in the cookie banner. Legal basis: Art. 6(1)(a) GDPR.

More information: policies.google.com/privacy

11. Web analytics with Google Analytics 4

We use Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable an analysis of the use of the website. The information generated by the cookie is generally transmitted to a Google server in the USA and stored there. The IP address is anonymised before storage.

Legal basis: Processing only takes place with your express consent in the cookie banner (Art. 6(1)(a) GDPR). You can revoke your consent at any time via the cookie settings.

Data transfers to the USA take place on the basis of the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) as well as additional standard contractual clauses.

More information: policies.google.com/privacy

12. Cookies

Our website uses cookies. Detailed information can be found in our separate Cookie Policy.

13. Your rights

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact: admin@fitsforme.org

14. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. Competent supervisory authority:

Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz
L-4370 Belvaux, Luxembourg
Phone: +352 26 10 60-1
cnpd.public.lu

15. Data security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Personal data is transmitted encrypted via HTTPS / TLS.

16. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services.

Last updated: {{DATUM}}

‍