Privacy Policy
Introduction
At BrevisFit, we are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently. This Privacy Policy explains how we collect, use, store, and protect your information when you sign up for our fitness services, including filling out online forms, participating in fitness assessments, or communicating with us.
By using our services, you consent to the practices described in this policy. If you have any questions, please contact us at [email protected]
What Information We Collect
We collect the following types of personal data:
- Personal Identification Information: Name, date of birth, email address, phone number.
- Health & Fitness Information: Self-reported medical conditions, physical activity history, fitness goals.
- Technical Data: IP address, device type, and browser information when using our website.
- Communication Data: Any messages or inquiries sent via email, social media, or our contact forms.
Note: We do not collect or store highly sensitive medical records unless explicitly required and with your separate consent.
For online training sessions conducted via video calls, we do not record sessions unless explicitly requested by the participant. If a recording is requested, we will obtain clear consent before recording, and the participant will be informed about how the recording will be stored and used. Google Meet and similar services do not record sessions by default.
How We Use Your Data
We process your data to:
- Provide and personalize your fitness program (e.g., adjust exercises based on health conditions).
- Contact you for appointment reminders, updates, or important service-related information.
- Ensure your safety by understanding potential health risks before engaging in physical activity.
- Improve our services by analyzing trends and feedback.
- Comply with legal and regulatory obligations.
We do not sell or share your personal data with third parties for marketing purposes.
Legal Basis for Processing Data (GDPR Compliance)
We collect and process your data under the following lawful bases:
- Consent (Article 6(1)(a)) – You provide explicit consent when filling out forms.
- Contractual Obligation (Article 6(1)(b)) – Processing is necessary to deliver our services.
- Legal Obligation (Article 6(1)(c)) – We may process data to comply with legal or regulatory requirements.
- Legitimate Interest (Article 6(1)(f)) – We may process limited data for administrative or security purposes.
How We Store and Protect Your Data
We take security seriously and implement the following measures:
- Encryption & Secure Storage: All data is stored on secure servers with encryption.
- Limited Access: Only authorized personnel can access your information.
- Data Retention Policy: Your data will be retained 2 months after inactivity and then securely deleted unless required by law.
Your Rights Under GDPR
Under GDPR, you have the following rights:
- Right to Access: Request a copy of your data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data.
- Right to Restriction: Limit how we use your data.
- Right to Data Portability: Receive your data in a structured format.
- Right to Object: Stop processing based on legitimate interests.
To exercise your rights, contact [email protected]. We will respond within 30 days as required by GDPR.
Third-Party Services & Data Transfers
We may use Google Forms, Google Drive, and email services to collect and store data. These services are provided by Google, which states compliance with GDPR and the EU-U.S. Data Privacy Framework. However, compliance also depends on how data is collected, stored, and processed. We take appropriate measures to ensure our data processing practices align with applicable privacy laws.
Cookies & Website Tracking
We may use cookies to enhance your experience on our website at www.brevis-fit.com. You can manage or disable cookies in your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. We encourage you to review it periodically. If significant changes occur, we will notify you via email or website notice.
Contact Information
Email: [email protected]
Business Address: Simon Knez, Landgraf-Georg-Straße 15, 64283 Darmstadt, Germany
If you believe your data is being misused, you have the right to lodge a complaint with your local Data Protection Authority (DPA).
Effective Date: 21.03.2025
Last Updated: 23.03.2025
