Privacy Policy

Filip Morch Personal Fitness Training ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and Luxembourg data protection laws.

1. Data Controller

The data controller responsible for your personal information is:

Filip Morch Personal Fitness Training
Email: filip.morch@gmail.com
Phone: +352 621 633 330
Location: Luxembourg

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, mailing address
• Health Information: Medical history, injuries, physical limitations, fitness level, training goals
• Demographic Information: Age, gender, occupation (when relevant to training)
• Payment Information: Billing details for coaching services (processed securely)
• Emergency Contact Information: For in-person training safety purposes

2.2 Training Data

• Workout logs and training history
• Performance metrics (times, distances, heart rate data when provided)
• Progress photos and measurements (with explicit consent)
• Nutrition logs and dietary information (when shared)
• Communication records (emails, messages, consultation notes)

2.3 Website Usage Data

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on site
• Referral source and exit pages
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

3.1 Primary Purposes

We use your personal information for the following purposes:

• Service Delivery: Designing personalized training programs, conducting coaching sessions, monitoring progress, and providing ongoing support
• Communication: Responding to inquiries, scheduling sessions, sending training plans and updates, providing feedback and guidance
• Safety: Assessing health risks, adapting training for injuries or limitations, emergency contact purposes
• Payment Processing: Invoicing and payment management
• Service Improvement: Analyzing training effectiveness, improving coaching methods, developing new programs

3.2 Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: Processing necessary to provide coaching services you've requested
• Consent: Explicit consent for health data, marketing communications, and testimonials
• Legitimate Interest: Improving services, fraud prevention, website security
• Legal Obligation: Compliance with tax, accounting, and other legal requirements

4. How We Share Your Information

4.1 No Sale of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Service Providers: Third-party platforms used for payment processing, email services (subject to data protection agreements)
• Emergency Situations: With medical professionals or emergency services if necessary for your safety
• Legal Requirements: When required by law, court order, or legal process
• Professional Referrals: With your consent, referral to registered dietitians, physical therapists, or other professionals when appropriate

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• Secure storage of physical documents in locked, access-controlled areas
• Encryption of digital data and secure password protection
• Regular security assessments and updates
• Limited access to personal information (only authorized personnel)
• Secure communication channels for sensitive information

5.2 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

6. Data Retention

6.1 Retention Period

We retain your personal information for as long as necessary to:

• Active Clients: Duration of coaching relationship plus 2 years for historical reference and continuity of care
• Former Clients: Up to 5 years after last session for legal compliance and potential re-engagement
• Financial Records: As required by Luxembourg tax and accounting laws (typically 10 years)
• Marketing Consents: Until you withdraw consent or 3 years of inactivity

6.2 Data Deletion

After retention periods expire, personal data is securely deleted or anonymized. You may request earlier deletion subject to legal requirements (see Section 10).

7. International Data Transfers

Your personal data is primarily stored and processed in Luxembourg within the European Economic Area (EEA). If we use service providers outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection
• Privacy Shield certification (where applicable)

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us improve site functionality and user experience.

8.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics or similar)
• Functionality Cookies: Remember your preferences and settings

8.3 Cookie Control

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Our website does not respond to "Do Not Track" signals but respects your cookie preferences.

9. Marketing Communications

9.1 Consent

We only send marketing emails, newsletters, or promotional materials with your explicit consent. This includes training tips, blog updates, and special offers.

9.2 Opt-Out

You can unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Emailing filip.morch@gmail.com with your request
• Calling +352 621 633 330 to opt-out

Opting out of marketing does not affect essential service communications (session confirmations, training plans, billing information).

10. Your Rights Under GDPR

As a data subject, you have the following rights:

10.1 Right of Access

You can request a copy of all personal data we hold about you.

10.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

10.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements.

10.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

10.5 Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

10.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

10.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: filip.morch@gmail.com
• Phone: +352 621 633 330
• Subject line: "Data Privacy Request"

We will respond to your request within one month (may be extended to two months for complex requests). We may request proof of identity before processing your request.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children without parental consent. If training minors, we require explicit parental or guardian consent and involvement.

12. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or services (e.g., Instagram, Facebook). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. Significant changes will be communicated via:

• Email notification to active clients
• Prominent notice on our website
• Updated "Last Updated" date at the top of this policy

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

14. Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux, Luxembourg
Website: cnpd.public.lu
Phone: (+352) 26 10 60 - 1
Email: info@cnpd.lu

We encourage you to contact us first at filip.morch@gmail.com so we can address your concerns directly.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact:

Filip Morch Personal Fitness Training
Email: filip.morch@gmail.com
Phone: +352 621 633 330
Location: Luxembourg

---