The Service Provider and Perfect Gym Solutions sp. z. o. o. (registered in Warsaw) are Co-Controllers of Customer personal data, processing it in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation). Perfect Gym Solutions sp. z. o. o. has appointed a Data Protection Officer, contactable at dpo@perfectgym.com.

How We Use Your Data

The Co-Controllers may use collected information for the following purposes:

To Enable Use of the Mobile App

• Provide the Mobile app to the Customer
• Carry out the Customer's requests
• Communicate with the Customer about the Mobile app
• Provide customer support, including handling concerns about the Service Provider's Services

For Marketing and Legitimate Business Interests

• Inform the Customer about services, competitions, offers, promotions or special events
• Inform the Customer about products and services of Professional Clients and Partners
• Personalize the Customer's experience
• Manage business operations, including developing services, conducting research, and assessing the effectiveness of sales, marketing, and advertising
• Use analytics and profiling to personalize experience, deliver tailored content, diagnose technical issues, prevent fraud, and determine usage patterns
• Maintain and improve products, offers, promotions, services and technology
• Ensure the security of networks and systems

To Comply with Applicable Law

• Protect against, identify and prevent fraud, crime, claims and other liabilities
• Comply with legal obligations and Co-Controllers' policies
• Establish, exercise or defend legal claims
• Monitor and report compliance issues

With Customer Consent (Where Required by Law)

• Send emails or text messages about products, services, competitions, offers, promotions or special events
• Send emails or text messages about products and services of Professional Clients and Partners
• Provide location-based services
• Deploy cookies and similar technologies, and provide online services including the Mobile app

The Customer can disable notifications, including commercial notifications, in the app settings.

Data Sharing

Verified Customers' personal data may be shared by the Co-Controllers with Professional Clients and Partners to the extent necessary to provide the Service Provider's Services.

Data We Collect

In order to use the Mobile app, the following personal data may be collected:

• First and last name
• Date of birth
• Gender
• Phone number
• Email address
• Photo
• Workout history — stored on Partner servers; displayed in the Mobile app only after additional consent given when connecting to the Perfect Gym Go app
• Club visits
• Class attendance
• Payment and credit card data
• Location data (GPS and Bluetooth)

With Customer consent, personal data may also be used to send commercial information and push notifications by email or to the phone number provided by the Customer.

Data Retention

Personal data listed above is archived for a period of 5 years after the Customer's last use of the Service Provider's Services.

Your Rights

Each Customer has the right to:

• Access, correct and supplement their personal data
• Request rectification, erasure, or restriction of processing, or object to processing
• Data portability
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint with a supervisory authority appropriate for their place of residence (e.g. the Office for the Protection of Personal Data, Stawki 2, Warsaw, Poland)
• Obtain information about the source of their data, where it was not collected directly from them

Right to Erasure

Customers may request deletion of their personal data where:

• The data is no longer necessary for the purposes for which it was collected
• The Customer withdraws consent and there is no other legal ground for processing
• The Customer objects to the processing
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation under EU or Member State law

Right to Portability and Restriction

Customers have the right to receive their personal data in a portable format, and to request restriction of processing, imposing a temporary limitation on how their data is used.

Right to Object to Direct Marketing

Where personal data is processed for direct marketing purposes, the Customer has the right to object at any time.

International Transfers

Where personal data is transferred to a third country or international organization, the Customer has the right to be informed of the appropriate safeguards relating to that transfer.

Copies of Personal Data

The Co-Controllers will provide a copy of personal data undergoing processing upon request, provided this does not adversely affect the rights and freedoms of others.

Exercising Your Rights

To enforce any of the above rights, Customers must contact Perfect Gym Solutions sp. z. o. o. in writing or via the tools available in the Mobile app. Contact: dpo@perfectgym.com

Additional Notes

If data required for the use of the Mobile app is deleted, the Customer will lose the ability to use the app. Providing personal data is voluntary, but necessary for proper use of the Mobile app.