Privacy Policy

Data controller

This policy explains what personal data we collect, how we use it and what your rights are in accordance with EU Regulation 2016/679 (GDPR) and the Personal Data Protection Act (ZVOP-2).

What personal data we collect

Depending on the method of communication and nature of the service, we may collect the following data:

Contact and identification data:

• Name and surname
• Email address
• Phone number

Service-related data:

• Body measurement data (weight, height, body composition) — only with your explicit consent
• Health status, injury or limitation data — only what you personally share with the trainer
• Progress and training data (programs, results)
• Food diary or goals — only if participating in nutrition counseling

Technical data (website):

• IP address and browser data (cookies)
• Pages you visited and time of visit

Purpose and legal basis of processing

We process your data for the following purposes:

• Service delivery — to provide you with the agreed coaching, measurements or counseling (legal basis: contract)
• Communication — responding to inquiries, confirming appointments, sending invoices (legal basis: contract / legal obligation)
• Progress tracking — recording measurements and results for program improvement (legal basis: consent)
• Marketing communications — informing about news, promotions and Body in Motion content (legal basis: consent)

By submitting your email address via the contact form, you consent to being contacted by the company regarding your enquiry. For sending marketing messages, we obtain your explicit consent (opt-in) separately.

Data retention

We retain your personal data only as long, as long as necessary for the purpose for which they were collected:

• Contact data — until consent is revoked or 2 years from last contact
• Service and billing data — 10 years (legal requirement for accounting records)
• Progress and measurement data — until end of contractual relationship or until consent is revoked
• Cookies — in accordance with the cookie policy (up to 12 months)

After the retention period expires, we securely delete or anonymize data.

Data sharing with third parties

We do not sell or share your personal data with unauthorised third parties.

Data may be shared with the following controllers and processors:

• Formspree — contact form processor (servers in the EU/USA, adequate protection in accordance with GDPR standards)
• Accounting service — for invoicing and tax reporting purposes
• Government authorities — when required by law

We have concluded appropriate data processing agreements with all processors.

Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

At any time you can unsubscribe from receiving marketing messages — either by exercising this right via email or by clicking the unsubscribe link in every message.

Cookies

Our website uses cookies to improve user experience. Cookies are small text files stored in your browser.

We use the following types of cookies:

• Essential cookies — ensure website functionality (e.g. storing cookie consent)
• Analytical cookies — anonymous traffic tracking for the purpose of content improvement

On your first visit, we ask for your consent to use cookies. You may revoke your consent at any time by deleting cookies in your browser settings.

Contact and complaints

For all questions regarding personal data protection, contact us:

If you believe we are violating your rights regarding personal data protection, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia:

• Website: www.ip-rs.si
• Email: gp.ip@ip-rs.si