fitVibe — Privacy Policy

fitVibe Privacy Policy

This English text is a translation of the Greek original, provided for convenience only. In the event of any discrepancy between the two versions, the Greek version prevails.
1.

Introduction, Role & Contact Details

The company WELLORA I.K.E. ("fitVibe", "we" or "us") respects the protection of your personal data. This Policy explains how we process your data in accordance with the General Data Protection Regulation (GDPR).

  • Data Controller: WELLORA Ι.Κ.Ε. (WELLORA I.K.E.)
  • Distinctive Title: FITVIBE
  • General Commercial Registry (G.E.MI.) Number: 193275301000
  • European Unique Identifier (EUID): ELGEMI.193275301000
  • Tax Identification Number: 803260388
  • Competent Tax Office: KEFODE Attica
  • Address: 5 Amaltheias Street, 16344 Ilioupoli, Greece
  • Contact Email: info@fitvibe.gr

Age Restriction: The Website is not directed at persons under 16 years of age. If you are between 16 and 18 years of age, the processing of your personal data takes place only if we have obtained the explicit consent of your parent or legal guardian. If collection of data from persons under 16 years of age without the required parental consent is established, the data will be deleted immediately.

For information about the use of cookies, pixels and similar technologies (such as analytics and advertising cookies), please refer to the separate Cookies & Ads Policy of fitVibe.

2.

Data We Collect & Legal Basis (GDPR)

We collect your data only where there is a legal basis for the processing:

Data Category Example of Data Legal Basis for Processing Purpose of Processing
Account Data Name, email, telephone, password, city of registration. Performance of a contract (Article 6(1)(b)) Creation and management of the account and identification.
Payment Data Purchase history, fitCoins, billing details. Performance of a contract & legal obligation Payment processing, management of fitCoins & compliance with tax laws.
Usage/Booking Data Classes, booking history, cancellations, reviews/ratings. Performance of a contract & legitimate interest Provision of the booking service and improvement of the Platform/evaluation of Partners.
Technical Data IP address, device type, browsing data (via cookies/analytics). Legitimate interest Security, fraud prevention, analysis and improvement of the Website.
Marketing Email for offers/newsletter. Consent Sending updates and promotional communications.
Precise Geolocation GPS data from the mobile device. Explicit consent Provision of location-based services (e.g. displaying nearby Studios).
fitness sync / Huawei Health / Health Connect Data Steps, active calories, distance and workouts, only when the user permits it in the Android application. Weight and body measurements are recorded separately and manually by the user. Explicit consent Summary of fitness activity, personalisation of the program and optional display of the relevant data to the studio selected by the user.
Third-Party Data Emergency contact details, contact synchronisation (if selected). Explicit consent Enabling Social networking features.

fitVibe may use some of the above data (such as booking history and preferences, but not Health Connect or Huawei Health data) for a limited form of profiling, for the purpose of displaying suggested classes, studios or offers that we consider to match your interests. Such automated processing produces no legal effects and does not significantly affect your rights within the meaning of the GDPR.

In the Android application, connecting to a fitness provider such as Huawei Health or Health Connect is optional and is enabled only after the explicit permission of the user through the Android permissions. We request only the data required for the visible fitness features of fitVibe: steps, active calories, distance and workouts. We do not request Health Connect access to weight, medical records, background data or history beyond the permitted time limit. The user may revoke access at any time from the settings of the respective provider on their device and delete the already stored summaries from the "My activity" screen.

3.

Disclosure of Data to Third Parties & Sharing

We disclose your personal data to the following categories of recipients:

a) To Partners (Studios/Gyms):

  • What is disclosed: Your name and the details of your booking.
  • GDPR role: The Partner acts as a separate and independent Data Controller for the data it receives for the check-in.
  • Obligation: The Partner is contractually bound to use this data only for the fulfilment of the booking.

b) To Data Processors:

  • Service providers: Providers of hosting, payments (payment gateways), marketing, analytics, and customer support. These act on written instructions and under contracts in accordance with Article 28 of the GDPR.

c) To Other fitVibe Users (Social):

  • Your name, photograph and activities (e.g. upcoming classes, badges) may be visible to other users with whom you are connected (e.g. friends) or in the public areas of the Website (e.g. reviews).
  • Management: You are able to restrict or disable this visibility through the Privacy tab in your Account Settings.

d) fitness sync / Huawei Health / Health Connect Data:

  • Health Connect and Huawei Health data are used only for the fitness features displayed within the fitVibe environment.
  • We do not sell, transfer or use Health Connect or Huawei Health data for advertising, data brokers, marketplace ranking, studio/class recommendations, offers, credit assessment or lending.
  • Disclosure to a studio takes place only when the user enables the relevant feature and gives the required consent.
  • We do not disclose raw Health Connect or Huawei Health records to the studios. Studios see only an aggregated fitness summary, and only where the user has enabled sharing for that particular studio.
  • Revoking access to Health Connect or Huawei Health stops any new synchronisation. The user may also request deletion of the already stored fitness summaries through the account deletion request or by contacting info@fitvibe.gr.

e) Legal Proceedings:

  • To judicial, regulatory or governmental authorities, where required by law or for the establishment/defence of our legal claims.
4.

International Data Transfers (Outside the EEA)

Your personal data may be transferred to countries outside the European Economic Area (EEA). If the destination country is not considered adequate by the European Commission (e.g. the USA), we take the appropriate safeguards. These include the application of the Standard Contractual Clauses (SCCs) of the European Commission to ensure the protection of the data.

5.

Your Rights under the GDPR

You have the right to exercise the following rights at any time:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object (in particular to marketing/profiling)
  • Right to withdraw consent

For deletion of your account and the associated data, you may use the public form Account deletion request.

Right to Lodge a Complaint: You have the right to lodge a complaint with the competent supervisory authority, the Hellenic Data Protection Authority (HDPA).

6.

Security, Retention & Contact

  • Data security: We use technical and organisational measures (e.g. encryption, access controls) to protect the data from unauthorised access, loss or destruction.
  • Retention: We retain your data only for as long as is necessary for the purposes set out in this Policy and in accordance with our legal obligation.
  • Contact: To exercise your rights or for any question, contact us by email: info@fitvibe.gr.
  • Updates: This Policy may be updated. Continued use after the update constitutes acceptance.

For reasons of transparency, we note by way of indication that:

  • Account and booking data are retained for as long as you maintain an active account with fitVibe and for a reasonable period after deletion, where this is required for the establishment or defence of legal claims.
  • Payment data and tax records are retained for as long as is provided for by the applicable tax legislation.
  • Marketing data (e.g. newsletter subscription) are retained until you withdraw your consent or opt for deletion.
  • Health Connect and Huawei Health data are retained only for as long as is required for the fitness features of fitVibe or until the user withdraws consent or requests deletion.
  • Technical data and security logs are retained for a limited period, proportionate to the purpose of security and abuse prevention.
7.

Automated Decision-Making & Profiling

fitVibe does not carry out fully automated decision-making that produces legal effects or significantly affects the user within the meaning of the GDPR. We may, however, use limited profiling (e.g. analysis of booking history and preferences, without using Health Connect or Huawei Health data), for the purpose of:

  • recommending relevant classes, studios or offers to you,
  • improving the overall user experience of the platform,
  • preventing abuse, fraud or impermissible use of the service.

In any event, you retain the right to object to such a form of processing, in accordance with your rights described above.