Privacy policy

At mdelosreyestrainer.com, we respect your privacy and are committed to protecting the personal data of everyone who visits our website or uses our services.

This Privacy Policy explains what information we collect, why we collect it, how long we retain it, and your rights under the General Data Protection Regulation (GDPR).

1. Data controller

2. Scope

This Privacy Policy applies to every visitor of mdelosreyestrainer.com and anyone contacting us through the available communication channels.

3. Personal data we collect

When you voluntarily contact us, we may collect:

• Name
• Email address
• Telephone number
• Preferred contact method
• How you found us
• Your main goal
• The reason behind your goal
• Information voluntarily provided regarding age, training experience, lifestyle, or any relevant circumstances
• Service of interest

Users are responsible for providing accurate and up-to-date information.

4. Purpose of processing

Your personal data may be processed to:

• Respond to enquiries.
• Contact you using your preferred communication method.
• Assess whether our services suit your needs.
• Prepare personalised quotations.
• Manage online personal training and nutrition coaching services.
• Process payments and issue invoices.
• Comply with legal obligations.

Your personal data will never be processed for purposes incompatible with those described above.

5. Legal basis

Personal data are processed based on:

• Your consent.
• Pre-contractual measures requested by you.
• Performance of a contract.
• Compliance with legal obligations.
• Legitimate interests in responding to your enquiries.

6. Data recipients

Personal data will never be sold or disclosed to third parties unless required by law, necessary for providing the requested services, or based on your explicit consent.

The following service providers may process personal data on our behalf:

Web hosting

The website is hosted by IONOS, which provides hosting and technical maintenance services for the website.

Email services

Electronic communications may be handled through the email service provider used by the Data Controller.

Payment providers

If you purchase any of our services, payments may be processed through:

• PayPal
• Stripe (once available)
• Bank transfer

These providers process only the information necessary to complete the payment transaction in accordance with their own privacy policies.

Accounting and legal obligations

Where legally required, personal data may be shared with our tax advisor or competent public authorities to comply with accounting, tax, or legal obligations.

7. Data retention

Personal data are retained only for as long as necessary to fulfil the purposes described in this Privacy Policy.

As a general rule:

• Contact enquiries: up to 12 months after the last communication unless a contractual relationship is established.
• Client information: throughout the contractual relationship and afterwards for the legally required retention period.
• Accounting and invoicing records: according to applicable tax legislation.

Once these periods expire, personal data will be securely deleted or anonymised.

8. Data security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, alteration, disclosure, accidental loss, or destruction.

However, no method of transmitting information over the Internet can be guaranteed to be completely secure.

9. International data transfers

As a general rule, personal data are not transferred outside the European Economic Area.

Should any technology provider process personal data outside the EEA, appropriate safeguards required under the GDPR will be implemented to ensure an adequate level of protection.

10. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data where legally applicable.
• Request restriction of processing.
• Object to the processing of your personal data where permitted by law.
• Request data portability where technically feasible and legally applicable.

To exercise any of these rights, please contact:

We may request additional information to verify your identity before processing your request.

11. Right to lodge a complaint

If you believe that the processing of your personal data does not comply with applicable data protection legislation, you have the right to lodge a complaint with a supervisory authority.

As the Data Controller is established in Germany, the competent supervisory authority is the Data Protection Authority of the federal state of Baden-Württemberg. In accordance with Article 77 GDPR, you may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence or where the alleged infringement occurred.

12. Cookies

At present, mdelosreyestrainer.com does not use analytics, advertising or tracking cookies.

Should non-essential cookies be introduced in the future, this Privacy Policy will be updated accordingly and, where legally required, your prior consent will be requested before such cookies are placed on your device.

13. Changes to this privacy policy

This Privacy Policy may be updated to reflect changes in legislation, technology, or the services provided.

The version published on this website shall always be the current and applicable version.

Users are encouraged to review this Privacy Policy periodically.

14. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact: