Privacy policy

Data controller

Orofino Francesco Mauro, VAT no. 02193670763, registered office at Via E. Scarpetta 2, 85025 Melfi (PZ), Italy. The gym is located at C.da Valchiera snc, 85025 Melfi (PZ).

For any privacy request, write to orogym93@gmail.com.

What data we process

• Account data: first name, last name, date of birth, email, language and password, which we only store in encrypted form.
• Data entered by the gym: phone number, if you give it to us, and internal notes visible to staff only.
• Training data: workout plans, completed workouts, weights, reps, progress and plan revision requests.
• Body measurements, if you choose to enter them: weight, body fat percentage, circumferences and notes.
• Technical data: IP address, used to limit login attempts, date of last login and server error logs.
• Browsing data on the website, only if you accept analytics cookies: pages visited, device and interactions, collected with Google Analytics.
• Data you share with us when you contact us by phone, WhatsApp or email.

Why we process it and on what basis

• Creating and managing your account, approving it and providing your plan, weight log and progress: performance of our contract with you (Art. 6.1.b GDPR).
• Sending service emails, such as the account approval notice and password reset: performance of the contract.
• Protecting the service from unauthorised access and fixing errors: our legitimate interest (Art. 6.1.f GDPR).
• Answering your requests: steps taken at your request (Art. 6.1.b GDPR).
• Understanding how the website is used, with visit statistics: your consent (Art. 6.1.a GDPR), which you can withdraw at any time from Cookie preferences.
• Complying with legal obligations, where they apply (Art. 6.1.c GDPR).

Body measurements

Body measurements may reveal information about your health. Entering them is entirely optional: to do so you must give your explicit consent in the app, and we record its date (Art. 9.2.a GDPR). We process them only to show you your progress and let the trainers follow you.

You can withdraw your consent at any time from the Body measurements screen in the app: the measurements are deleted, with no effect on the rest of the service.

If you don't provide your data

Account data is required to sign up: without it we cannot create your account. All other data is optional or comes from using the service.

Who can see the data

• Authorised OroGym staff: administrators and trainers, to follow you and run the service.
• Providers processing data on our behalf, only as needed: server hosting and email delivery.
• Google, which provides Google Tag Manager and Google Analytics, only if you accept analytics cookies: it receives browsing data, your IP address and technical browser data, and may process them outside the European Union too, including in the United States.
• Public authorities, where required by law.

We do not sell your data and do not use it for advertising or profiling.

How long we keep it

• Account and training data: as long as the account is active. When it is deleted, we also delete the related data.
• Server error logs: 14 days.
• Google Analytics statistics: 14 months at most.
• App login: valid for 60 days from the last renewal, then you need to log in again.
• Data we must keep by law: for the period the law requires.

Minors

You can sign up yourself from the age of 14. Anyone under 14 can use the service only if enrolled directly by the gym, with the consent of whoever holds parental responsibility.

Security

The website and the app talk to the server over encrypted connections, passwords are never stored in clear text and access to data is limited to authorised staff.

Your rights

At any time you can ask to access, correct or delete your data, restrict its processing, receive it in a portable format, object to processing based on legitimate interest and withdraw your consent (Arts. 15-22 GDPR). Write to orogym93@gmail.com. You can also delete your account and all related data yourself, from the Profile section of the app.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

The website uses technical cookies and, only if you accept, Google Analytics cookies: see the cookie policy for details.

Changes

If the way we process data changes, we update this page and the date above.