We are committed to protecting your privacy and recognize that some of the information you provide for creating custom workout plans and monitoring your fitness level and progress may be particularly sensitive or confidential.
We process only the personal data you explicitly provide to us and will never share your data with third parties without your prior and explicit consent.
All data is handled with the utmost care and treated as confidential.
Data processing complies with EU Regulation 2016/679 (General Data Protection Regulation, GDPR) and Hungary’s Act CXII of 2011 on the Right to Informational Self-Determination and on the Freedom of Information (Freedom of Information Act).
We do not use cookies on our website, including those from third parties.
Purposes of Data Processing and Legal Basis
The purposes of data processing are to provide fitness training information, create custom workout plans, directly promote these services via email and instant messages, monitor your fitness level and progress, and maintain communication related to these purposes.
The purposes of data processing for personal data concerning health are exclusively to create custom workout plans and monitor your fitness level and progress, strictly within the scope of practice of online personal training. This only includes processing essential data for these purposes such as body composition, physical activity level, and exercise-related precautions or contraindications.
With your prior explicit consent, anonymized photos of you (with your face obscured) may be used to promote our services on our website, social media platforms, and other marketing channels. This always requires individual consent.
Legal basis for processing:
- When you initiate contact or voluntarily provide data, the legal basis for processing is your consent.
- For orders, processing is necessary for the performance of a contract or to take steps prior to entering into a contract. Processing may also be required to comply with legal obligations.
- The legal basis for processing health-related personal data is always your explicit consent.
Recipients of Personal Data
Recipients of billing and shipping data include employees, accountants, auditors, legal representatives, payment and billing service providers, resellers (merchants of records), and courier services.
Recipients of personal data submitted through our website include service providers responsible for the development and maintenance of our website and its functions.
We do not share personal data with third parties unless you provide prior, explicit, and individual consent, such as for the public use of anonymized photos for marketing purposes.
Data Processing Regarding the Reseller (Merchant of Record)
You can purchase our services through a reseller (merchant of record) who acts as a data processor on our behalf. You consent to us forwarding your billing data to the reseller (merchant of record). We do not forward personal data concerning health to the reseller (merchant of record).
However, you may also establish a separate legal relationship with the reseller (merchant of record), and their privacy policy applies. At the time of publishing this privacy policy, the reseller’s privacy policy is available here.
By accepting our privacy policy, you release us from the liability of data processing conducted by the reseller (merchant of record) for data that you provide to the reseller (merchant of record) outside the scope of purchasing our services.
Data Processing Regarding the Recommended Fitness Application
To provide our services, you need to register with a third-party fitness application and grant us access to your data provided through it. We are an independent data processor of the personal data you share with us via the app, in compliance with this privacy policy. We are not affiliated with the third-party app developer in regards to data processing.
By using the application, you establish a separate legal relationship with the app developer, and their privacy policy applies. You may use the application independently of us and revoke our access to your data at any time.
You consent to us forwarding your name and email to the app developer. However, you can register, manage, and delete your account independently of us. At the time of publishing this privacy policy, the app developer’s privacy policy is available here.
By accepting our privacy policy, you release us from liability for data processing conducted by the app developer. However, we remain responsible for adhering to our own privacy policy.
Data Retention
Your billing data (name, address) is stored as legally required for record keeping, typically until December 31 of the 8th year following invoice issuance.
Your email address is stored until you withdraw consent.
Your data in the third-party app, unless otherwise indicated, is not stored by us, but processed only temporarily while you allow access. Once revoked, access and processing cease immediately.
Anonymized personal data used for marketing purposes is stored until the end of marketing activities or until consent is withdrawn.
In case of participation in sweepstakes, your name and Facebook username are stored until the contest ends. Winners’ names and shipping addresses are stored until the prize is received.
Your Rights
You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing as well as the right to data portability.
Where the processing is based on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (e-mail: ugyfelszolgalat@naih.hu / mail: 1363 Budapest, Pf.: 9.). Alternatively, you may contact the supervisory authority in your country of residence. A list of EU supervisory authorities is available here.
Consequences of Not Providing Data
Providing your billing data and email is required for entering into a contract for online fitness coaching. Without these, the contract cannot be established.
Providing your fitness data is optional but failure to do so prevents the workout plans from being personalized.
Providing photos is optional; however, failure to do so may result in less personalized workout plans. Providing photos for marketing purposes is optional with no impact on services.
Providing data in sweepstakes is optional, but without it, participation or prize receipt may not be possible.
Data Controller
Name: Aconter-Report Bt.
Address: 1146 Budapest, Francia út 49. A building, Hungary
Email: support@kondi.app
Company registration number: 01 06 786199 (Company Registry Court of Budapest-Capital Regional Court)
Registered in Hungary.