Privacy Policy

tl;dr We respect you and your data

Introduction

Gymnormous is committed to protecting the privacy of our users and customers. This privacy policy explains how we collect, use, share, and protect personal information in accordance with the General Data Protection Regulation (GDPR).

Data Controller, DPO, and Contact


Data Collection

We collect personal data when you use our services, or interact with us. This may include:

  1. Name and contact information
    When you create an account with us, we collect your email address to communicate with you. On your profile, you may set the name you want others to see you as.
  2. Workout data and location
    When you log workouts and fill in workout data or the gym location so you can track your workouts, we collect that data only for that purpose.
  3. Usage data and cookies
    We use cookies only to keep you signed in, this is a technical requirement to use the website. We keep minimal server logs only for debugging purpose and never profile your behavior.

Purpose of Processing

Your data is processed for the following purposes:

  1. To provide and improve our services
    Example: We use your data to manage your account, process orders, and enhance our website features. If you sign up for an account, we use your data to personalize your shopping experience and ensure faster checkout.
  2. For customer support and communication
    Example: If you contact customer support, we use your data to respond to your inquiries, resolve issues, and keep you updated on the status of your support requests.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  1. Your consent
    Example: When you sign up for Gymnormous we process your email address based on your consent. You can withdraw consent at any time by closing your account.
  2. Our legitimate business interests
    We may process your data to analyze the application and improve our product offerings or website performance. This helps us provide you with better services.

Subprocessors / Third-Party Service Providers

We use trusted third-party service providers (subprocessors) to help operate Gymnormous. These providers process personal data only on our behalf and under appropriate contractual and security safeguards.

Subprocessor Purpose Data Processed Location
MailPace Transactional email delivery (password resets, account verification, and service notifications) Email address and email content necessary to deliver the message European Union

Data Transfer Outside the EU

Your data is stored inside the European Union. We use MailPace (mailpace.com) to send transactional emails such as password reset emails, account verification messages, and service-related notifications. MailPace stores and processes data within the European Union. We do not transfer your personal data outside the European Union for the purpose of providing our services.

Use of Cookies and Other Trackers

Our website uses cookie only for technical reasons.

Data Subject Rights

Under GDPR, you have the right to:

  1. Access your personal data
    Example: You can request a copy of all the personal information we hold about you, such as your account details, workout history, and preferences.
  2. Rectify incorrect data
    Example: If you notice an error in your personal details (like a misspelled name, you can request that we correct it.
  3. Erase your data in certain circumstances
    Example: You can request the deletion of your account data if you no longer wish to use our services or if your data is no longer necessary for the purposes it was collected.
  4. Restrict or object to processing
    Example: If you believe your data is being processed unlawfully, you can request that we restrict or stop processing your personal data.
  5. Data portability
    Example: You can request a copy of your data in a machine-readable format, which can be transferred to another service provider.

Data Retention

Personal data is retained as long as necessary for the purposes stated, unless a longer retention period is required or permitted by law.

Changes to this Policy

We may update this policy. We will notify you of significant changes and update the “last updated” date at the top of the policy.

Example: If we introduce new features on our website that require additional data collection or processing, we will update this policy and inform you about the changes.

Contact Us

For questions or to exercise your data protection rights, please contact us at: