PRIVACY POLICY

1. General Information

Level Up Gym, located at 36 Andrea Papandreou Street, Agios Nikolaos, Crete, maintains and processes your personal data with confidentiality and respect for your private life. It continuously takes the necessary technical and organizational measures for their further protection, amending its security and processing policy in accordance with the General Data Protection Regulation (GDPR) of the European Union.

Personal data is collected, processed, registered, and stored confidentially by the Data Controller, namely Evangelos Saridakis, acting on behalf of "Evangelos Saridakis & CO. L.P." (36 Andrea Papandreou, Agios Nikolaos) in accordance with the provisions of European Law, as reflected in the General Data Protection Regulation (EU 2016/679).

2. Personal Data Collected

• Data we collect directly from you when you register at our gym: First Name, Last Name, Address, City/Area, Postal Code (ZIP), Mobile Phone Number, E-mail, Date of Birth.
• Data we collect from the use of the Trial Session Form, Personal Card, and Attendance Register:
  • a) Information regarding your visits to the Gym is collected.
  • b) Information regarding the goal you want to achieve at our gym is collected.
  • c) Data regarding the date of the sessions, their remaining balance, as well as the program you follow is collected.
• Data we collect during communication through our website: Last Name, First Name, and E-mail.

3. Special Categories of Personal Data

Regarding the retention and processing of your sensitive personal data by "Evangelos Saridakis & CO. L.P.", and specifically informing our gym about the existence or absence of medical conditions as stated on the Gym Registration form, our company informs you that the processing of these special categories of personal data (sensitive data) is carried out for the purpose of protecting your health, so that we know if you can safely use our company's specialized exercise equipment.

4. Methods of Collecting Personal Data

The collection of your personal data by the company is carried out either through your physical presence at the gym or via the data submission form available on our website (www.levelupgym.gr).

5. Purposes of Processing Your Personal Data

The purposes for which we process your data are as follows:

• Concluding our contract.
• Identity verification upon arrival and stay at our gyms, for the provision of our services.
• Enabling online booking using the customer code and online PIN you will receive from us during your first registration.
• Sending informational messages via email, SMS, or other electronic means regarding new programs and general offers.
• Sending more specific, personalized offers that apply exclusively to you as our members.

6. Your Rights and Choices

We inform you that for all the aforementioned processing purposes, you may exercise, as applicable and at any time, the right to access, rectify, and/or delete your Personal Data without specific justification. You can do this by sending a relevant letter to the Company, via email to [email protected], or by a written request submitted in print at our gym.

You may also withdraw any consent you have provided to us or object to the processing of your personal information at any time for legitimate reasons. We will apply your preferences within a reasonable period. In some cases, withdrawing your consent to the use or disclosure of your personal information may mean that you will not be able to take advantage of some of our products or services.

7. Disclosure to Third Parties

The personal data collected is never disclosed to third parties (except where provided by Law and the Competent Authorities, and as defined in paragraph 10 of this policy), and its personal character is safeguarded. The company maintains records with this information exclusively for communication, improvement of services provided, and client management.

8. Retention Period of Personal Data

Our company retains and processes your data for as long as your membership is active and for an equal duration after its expiration. Specifically, our company will delete your data by the end of the calendar year in which your membership became inactive, unless a different retention period is required by current applicable legislation.

9. Security and Confidentiality of Personal Data

The COMPANY has made significant efforts to take all precautionary measures to maintain the confidentiality and security of personal data and to prevent its distortion, damage, destruction, as well as unauthorized third-party access. The technical and organizational security measures include state-of-the-art technology. Nevertheless, the company cannot control the risk associated with the operation of the Internet and therefore draws your attention to the existence of potential risks regarding its use and operation.

10. Information We Share

We do not sell or disclose personal information we collect about you, except as described herein. We may share your personal information:

• (i) if we are required to do so by law or legal process,
• (ii) to law enforcement authorities or other government officials, or
• (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

11. How We Protect Personal Data

We maintain appropriate administrative, technical, and physical safeguards designed to protect the personal data you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

12. How to Contact Us

"Evangelos Saridakis & CO. L.P." informs you that you can contact [email protected] or call 2841024074 in case you have questions or need clarifications regarding this policy as well as the General Data Protection Regulation. You can also use the same contact details if you wish to exercise your aforementioned rights regarding your personal data which we retain and process with your consent.