COMMITMENT TO DATA PROTECTION AND COMPLIANCE

In compliance with the GDPR (General Data Protection Regulation) and Spanish Organic Law 3/2018, AEROBIC AND FITNESS, S.L.U. informs users that the personal data they provide when using the forms or contract requirements will be collected in AEROBIC AND FITNESS, S.L.U. and will be processed for the purpose of being able to provide and inform about the services or products AEROBIC AND FITNESS, S.L.U. offers. By filling out a form on this website, the user acknowledges that the information and personal data he provides are his own, accurate and true.

This Privacy Policy, in relation to Social Networks, describes the use that AEROBIC AND FITNESS, S.L.U. makes use of users' personal data when registering through the profiles you have in the social networks Facebook, Twitter, Instagram, etc. (Social login), and browsing our website with your social network user, for the conditions and purposes indicated below.

By registering with your Facebook, Twitter, Instagram, etc. social network ID, the user expressly consents to the processing of your personal data in accordance with this Privacy Policy AEROBIC AND FITNESS, S.L.U.

1. Who is responsible for the processing of your personal data?

The person responsible for the treatment is AEROBIC AND FITNESS, S.L.U. with NIF B59202432 and tax address C/ Narcis Monturiol s/n P.I. This Decision shall enter into force on the date of its adoption. You can contact us by phone +34 93 835 5950 or by e-mail at whataerobicyfitness.com

2. For what purposes do we process your personal data?

Personal data will be collected during the process of ordering or opening a new account. These data shall be incorporated into a file under the responsibility of AEROBIC AND FITNESS, S.L.U, to manage the processing and execution of your order. If you have previously given your express consent, we will use your data to send you information about our organisation and the sector, to organise activities, campaigns or events and to send you information and commercial communications.

You can unsubscribe at any time by sending a message to whataerobicyfitness.com or by clicking on the link provided at the bottom of the commercial communication.

3. How long will we keep your personal data?

In any case, Aerobics and Fitness, S.L.U keep your personal data for as long as they are necessary for the contractual performance of the business relationship, unless you ask us to delete them.

It shall also retain them for the period necessary to comply with the legal obligations which in each case correspond according to the type of data.

4. What is the basis for processing your personal data?

The legal basis for data processing is the mutual interest and consent of the user.

5. To whom will your personal data be communicated?

Data may only be communicated to organisations within the same group or linked to AEROBIC AND FITNESS, S.L. in the field of the management of its products and/or services for the same purposes as those referred to above, as well as to those competent Public Administrations where required by the regulations in force. The employees of Aerobics and Fitness, S.L. have authorised access rights in accordance with the AEROBIC AND FITNESS internal security structure, S.L. can access your data for the purposes described in this Privacy Policy. All employees of Aerobics and Fitness, S.L. have been trained and informed of their compliance responsibilities and sign the relevant confidentiality agreement. Likewise, they can access your data, third organizations whose intervention is required and/or necessary for the proper management of the provision of the service. AEROBICS AND FITNESS, S.L. have established contracts or contractual arrangements and security measures with third parties to ensure an adequate level of security and protection of personal data.

6. What are your rights in relation to your personal data?

You can request access, rectification, deletion, restriction of processing, portability and opposition to the processing of your data at any time. You can withdraw your consent to receive commercial communications and exercise the above rights by sending an e-mail to: whataerobicyfitness.com accompanied by documentary proof of identity. Unless you tell us through the unsubscribe option in the e-mail.

If you do not receive a satisfactory answer and wish to lodge a complaint or obtain further information about any of these rights, you can contact the Spanish Data Protection Agency (www.agpd.es).

7. What is the relationship of stored personal information?

The basic identification and contact details necessary to create invoices, such as name, address of dispatch, NIF/CIF, bank account number, if the customer wishes a bank directory, are stored.

8. What is the data storage policy/availability/backups and their location?

Information shall not be deleted unless deletion is requested by the user and is carried out (see point 3). It is always available, although it may be blocked for marketing/commercial informational mailings, if the rights of deletion, limitation of treatment or opposition by the user are exercised.

Backups of servers containing personal data are made, properly controlled and guarded.

9. What is the Privacy and Information Security and Access Policy?

Access to the database is protected by user and password.

In the case of remote access, this is done using VPN protocol

10. What is the Security Incident Response and Impact Analysis Policy?

AEROBIC AND FITNESS, S.L. has taken appropriate technical and organisational protection measures and these measures have been applied to the personal data affected by the potential personal data breach. There is no access to customer/user data for persons who are not authorised to access it.

AEROBIC AND FITNESS, S.L. has carried out and maintains an updated Risk Analysis of the vulnerability of personal data and its impact on the security of privacy of customers/users.

11. What is the policy for deleting information in the event of loss of service?

AEROBIC AND FITNESS, S.L. deactivates the accounts of customers/users who decide to unsubscribe and have exercised their right to deletion. In this case, the personal data will be blocked and kept for the time required by regulations, exclusively to account for the legal obligations that justify the past relationship between the parties.

12. Who is our Data Protection Officer?

AEROBIC AND FITNESS, S.L. has no legal obligation to appoint a DPO (Data Protection Officer), in accordance with current legislation.

Regardless, Aerobics and Fitness, S.L. has appointed a Data Security Officer to ensure the proper functioning of this Privacy Policy and to ensure that its requirements regarding personal data of internal and external users are maintained.

In case Aerobics and Fitness, S.L.U if a breach of the security of personal data is identified, users will be notified as soon as possible in relation to the breach and, if there is a significant risk, the competent authority would also be notified.

The registered user shall retain at all times the possibility of exercising his rights of access, rectification, opposition, deletion, limited processing, portability or opposition to the processing of his data. Likewise, and in accordance with Law 34/2002, of 1 July, on information society services and electronic commerce, you can revoke your consent to receive commercial communications at any time. If you have any questions or wish to exercise your rights, you can contact: AEROBIC AND FITNESS, S.L. by e-mail reve@aerobicayfitness.com or mail to Aerobics and Fitness, S.L. in C/ Narcis Monturiol s/n P.I. This Regulation shall be binding in its entirety and directly applicable in all Member States