×
GDPR Compliance Information
Last Updated: December 2024
Your Rights Under GDPR
As a data subject under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
Right to Information
You have the right to be informed about the collection and use of your personal data. This information is provided in our Privacy Policy and this GDPR notice.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is free of charge and we will respond within one month.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data. You can update most information through your account dashboard.
Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data under certain circumstances, including:
- The data is no longer necessary for the original purpose
- You withdraw consent and there's no other legal basis
- Your data has been unlawfully processed
- Deletion is required for compliance with legal obligations
Right to Restrict Processing
You can request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data for:
- Direct marketing purposes
- Processing based on legitimate interests
- Scientific or historical research
- Statistical purposes
Rights Related to Automated Decision Making
You have the right not to be subject to automated decision-making, including profiling, that produces significant legal effects.
Legal Basis for Processing
We process your personal data based on:
- Consent: For marketing communications and optional features
- Contract: To provide our fitness services
- Legal Obligation: To comply with applicable laws
- Legitimate Interest: To improve our services and prevent fraud
Data Protection Officer
Our Data Protection Officer oversees GDPR compliance and handles data protection inquiries:
Data Protection Officer
CultivateFit
2847 Fitness Boulevard
Austin, TX 78701, USA
Email: [email protected]
Phone: (512) 555-9847
International Data Transfers
When we transfer your data outside the European Economic Area, we ensure appropriate safeguards through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for certain countries
- Appropriate technical and organizational measures
Data Retention Periods
- Account Data: Retained during active subscription plus 7 years
- Marketing Data: Retained until consent is withdrawn
- Transaction Data: Retained for 10 years for legal compliance
- Website Analytics: Anonymized data retained for 3 years
Security Measures
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a data breach that poses high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.
Exercising Your Rights
To exercise any of your GDPR rights:
- Email us at [email protected]
- Call our privacy hotline at (512) 555-9847
- Submit a request through your account dashboard
- Send written request to our physical address
Response Time
We will respond to your requests without undue delay and within one month. In complex cases, we may extend this by two additional months.
Right to Complain
If you're not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or the Irish Data Protection Commission if you're in the EU.
Children's Data
We do not knowingly process personal data of children under 16 without appropriate parental consent. If we become aware of such processing, we will delete the data immediately.
Updates to GDPR Information
This GDPR information may be updated periodically. We will notify you of significant changes through email or website notifications.
