Privacy Policy

1. Controller

2. What data we collect and why

This privacy policy applies to the GymPlus marketing website (gymplus.surge.sh). We collect personal data in the following situations:

Contact form
When you submit our contact form, we collect your name, email address, and the content of your message. This data is used solely to respond to your enquiry. The legal basis is our legitimate interest in responding to potential customers.

Website analytics (Google Analytics)
With your consent, we use Google Analytics to understand how visitors use our website. Google Analytics collects:

• Pages visited and time spent on each page
• Referring website or source
• Browser type, device type and operating system
• Approximate geographic location (country/city level)
• Anonymised IP address

This data is used to improve our website and content. The legal basis is your consent, which you can withdraw at any time.

3. Cookies

We use cookies only with your consent. If you accept analytics cookies, Google Analytics places the following cookies:

• _ga - distinguishes unique users, expires after 2 years
• _ga_XXXXXXXXXX - maintains session state, expires after 2 years
• _gid - distinguishes users, expires after 24 hours

We also store your cookie preference in your browser's local storage so we don't ask again on every visit.

You can withdraw your consent at any time by clearing your browser's cookies and local storage, or by using the Google Analytics opt-out browser add-on.

4. Data transfers outside the EU

Google Analytics transfers data to Google's servers, which may be located outside the European Economic Area, including in the United States. Google LLC participates in the EU-US Data Privacy Framework and provides appropriate safeguards under GDPR.

5. Data retention

• Contact form enquiries are retained for as long as necessary to handle your request and any follow-up, then deleted.
• Google Analytics data is retained for 26 months by default.

6. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time (for analytics)
• Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

7. Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.

8. Contact