Privacy Policy

This website is operated by the company ICON FITNESS GYM OPERATIONS S.A, having its registered office at Ethnikis Antistaseos 43 & Sarantaporou, Chalandri, with Tax Identification Number (TIN)ΑΦΜ 800760680, Tax Office: FAE Athens (General Commercial Registry Number: ), as lawfully represented (hereinafter referred to as “”). Your agreement with the following terms of this Privacy Policy constitutes your free and explicit consent to the collection, use, and further transfer of your personal data for purposes related to the use of our website, as described below. Therefore, we recommend that you carefully read the following Privacy Policy:

AREA OF APPLICATION OF THE PRIVACY POLICY

At ICON FITNESS, we are committed to protecting your personal data. This Privacy Policy sets out the measures adopted by our Company with regard to the Personal Data we collect directly from you and/or through the website ICON FITNESS.gr, in accordance with Regulation (EU) 2016/679 (GDPR), as supplemented by the relevant national and European legislation on the protection of personal data. For the purposes of this Privacy Policy, the following definitions shall apply: The term “personal data” refers to any type of information that identifies you. Such information may include first name, last name, contact details, address, email address, and tax identification number. In this context, it is important to inform you about how and by what means we use the information we collect. The term “sensitive personal data” refers to any type of information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as personal information concerning genetic data, biometric data for the unique identification of a natural person, health data, or data concerning a person’s sex life or sexual orientation.

DATA WE COLLECT

Visits to our website do not automatically result in the recording of any personal data that identifies you. However, certain non-personal or non-identifiable information may be collected and retained on our website (for example, the User’s web browser type or the User’s operating system used to access pages of the website), for the purpose of improving our services, such as enhancing browsing experience and website management. Furthermore, we automatically collect information relating to you, such as your Internet Protocol (IP) address and your domain name. This information may be used to provide you with a more personalized experience when visiting our website. Nevertheless, in order to make use of certain Content and Services of our website, you may be required to provide personal data such as: first name, last name, address, email address, and telephone number. When you choose to become a member of our Gym, we may collect debit or credit card numbers, date of birth, and information regarding your health status. If you are a privileged member with specific benefits, in addition to the above personal data, we will request the relevant supporting documentation (e.g. membership card, etc.). In all cases, we will provide you with the necessary information so that you are able to give prior consent to the processing of your personal data for one or more specific processing purposes. You may also be asked to provide us with information regarding your location or your personal preferences and interests, in order to offer you more personalized services. The information provided will be stored in our databases, either manually or by electronic means. We also collect information that you provide to us through your responses to our surveys, questionnaires, comments, etc. In addition, we may offer you certain tools for the self-assessment of your physical condition, and you may provide us with personal data relating to your health condition or health issues.

USE OF PERSONAL DATA

We collect your personal data in order to provide you with high-quality products and services. The personal data we collect are used for the management and provision of products and services you request or in which you have expressed interest, such as:

Registration for our services, as offered from time to time (e.g. Personal Training, Group Programs, etc.).
Registration on our membership list.
Participation in our contest.

Our Company, provided that it has been lawfully authorized by the data subject, may also use such data for the following purposes:

Sending personalized information regarding new products and services.
Sending regular updates that we consider it will be of interest to the User.
Sending information upon request regarding products and services.
Market research and marketing purposes.
Serving internal administrative purposes of our website and improving the services provided.
Actions of “direct marketing”, including any communication by our Company for purposes of scheduling assessments, providing business-related information arising from the commercial relationship, informing about our Company’s events and parties, as well as registration in personal (or non-personal) training programs.

All personal data collected and subject to further processing by our Company are appropriate, relevant, and limited to what is necessary in relation to the needs and purposes for which they are collected. Furthermore, we process your personal data in a manner that ensures their accuracy, continuous updating, and security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage, by taking all technical and organizational measures deemed appropriate for this purpose, in particular through encryption, encoding, pseudonymization, and anonymization of personal data, as well as through the control, monitoring, and regular logging of all processing activities. We will provide you with all necessary information required for you to give your prior consent to the processing of your personal data by our Company, for one or more specific purposes, and for their registration in the relevant records maintained by our Company. Where consent is given for the automated processing of your personal data, our Company collects and processes information based on your personal preferences and interests solely for the purpose of providing you with personalized information and/or notifications regarding our Company’s services and activities through direct marketing actions. The data collected are subject to automated processing and aim, within the corporate group to which our Company belongs, to determine the User’s / Customer’s profile, the accumulation of vouchers, and future communications, in particular direct marketing actions. The data collected are also intended to fulfill legal obligations and to be used in contractual relationships with Insurance Companies, Banks, and other entities. Our Company undertakes to maintain strict confidentiality of all data, restricting access thereto exclusively as required in accordance with the ordinary course of its business activities. The contact details you provide to us will be stored in our database and may be used for the occasional transmission of information, via email or postal mail, regarding products and services similar to those forming the subject matter of your contractual agreement with our Company. If you do not wish to receive such information, you are kindly requested to exercise your rights, as described below in the section “RIGHTS OF THE DATA SUBJECT”.

COLLECTION OF PERSONAL PREFERENCES AND INTERESTS THROUGH OUR WEBSITE

In addition to the collection of data through the aforementioned means, where expressly authorized, our Company uses technology that enables the collection of information about users of the website iconfitness.gr. For example, the website server automatically collects information regarding which pages you visited, as well as which web browser you used. Our website includes hyperlinks to other pages of the website. Technology may also be used to monitor the frequency with which such links are used and which pages are most frequently viewed. When provided by the User of the Company’s website, such information may be used for direct marketing purposes.

TRANSFER OF PERSONAL DATA

In cases where you have provided your consent, your personal data may be shared with other companies within the group, or such data may be transferred to other companies that may contact you regarding products or services of interest to you. If you are located in a country other than that in which our Company’s servers are located, communications may involve cross-border transfers of information. By visiting our website and communicating with our Company by electronic means, you authorize the processing and transfer of your Personal Data as set out in this Privacy Policy.

DATA RETENTION PERIOD

All personal data are retained for a predefined and limited period depending on the purpose of processing, upon the expiration of which such personal data are deleted from our databases. Personal data provided to our Company through the website are retained for one (1) year from the date of provision or, in the event of a commercial relationship between the user and our Company, for a period of two (2) years following the termination of the commercial relationship, after which the data will be destroyed and all processing activities relating thereto will be completed.

APPLICABLE LAW

In the event of any dispute or claim relating to this website, Greek law shall apply, irrespective of the nature of the dispute. For all actions or legal proceedings arising out of or relating to this Privacy Policy, its validity, application, performance, breach, or content, the competent courts shall be the Greek Courts, whose jurisdiction you irrevocably acknowledge. Notwithstanding the above, our Company reserves the right to exercise its legal rights before the courts of the place where this Privacy Policy is violated.

INFORMATION SECURITY

In order to prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of your personal data, we have taken reasonable measures to safeguard personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Our Company has taken reasonable precautions to secure the personal information available through the online community.

YOUR RIGHTS

At our Company, we ensure the protection and respect of the rights of data subjects. Specifically, data subjects always retain the right to be informed about the processing of their personal data (right of access) and to request and receive further information regarding the processing carried out. In addition, data subjects have the right to request: (i) The rectification of inaccurate personal data concerning them; (ii) The erasure of the personal data they have provided; (iii) the restriction of the processing of their personal data; (iv) the portability of their personal data; and (v) to object to the further processing of their personal data. In such cases, our Company shall respond in writing within thirty (30) days from receipt and verification of the request. Furthermore, in the event that one or more of the aforementioned rights of rectification, erasure, or restriction of processing of your personal data are exercised, the relevant requests shall also be forwarded to any third-party recipient to whom the personal data may have been disclosed within the framework of the aforementioned purposes of processing.

DATA PROTECTION CONTACT PERSON

In order to ensure the effective protection of your personal data, you may submit your requests and questions regarding this Privacy Policy as follows: Name: Manolis Agapitos Telephone: +30 210 6710250 E-mail: Dataprotection_GR@iconfitness.gr Postal Address: Ethnikis Antistaseos 43 & Sarantaporou, 15231, Chalandri, Attica. Website: www.iconfitness.gr If you believe that your personal data have been affected in any way, you may contact the Hellenic Data Protection Authority as follows: Website: www.dpa.gr Postal Address: 1–3 Kifisias Avenue, P.C. 115 23, Athens, Greece Call Center: +30 210 6475600 Fax: +30 210 6475628 E-mail: contact@dpa.gr This Privacy Policy may be amended from time to time. Any changes will be posted on this page. The effective date of this Policy is May 17th, 2018.

COOKIES POLICY

For the collection of the information referred to above in the Personal Data Protection Policy, temporary “cookies” may be used, which remain in a cookie file in the user’s browser until it is closed. A cookie is a small piece of information sent to the user’s server and stored on the hard drive of their computer, without causing any damage to it. The use of cookies by our Company always requires the explicit consent of the user, who receives a notification and may, being fully informed, choose whether to accept or reject it.

Strictly Necessary Cookies

Essential cookies enable you to browse the Website and use its services and features. Without these strictly necessary cookies, the Website may not function as smoothly as we would like and we may not be able to provide the Website or certain services and features. Google Tag Management – Website tracking rules provider – Expire after 24 months – Third party https://www.google.com/policies/privacy/](https://www.google.com/policies/privacy/

Performance Cookies

Performance cookies collect information about how you use the Website and allow us to improve its operation. For example, performance cookies show us which pages of the Website receive the most traffic, help us record any difficulties you may have encountered while using the Website, and indicate whether our advertising is effective. This allows us to understand overall usage patterns of the Website rather than the usage of an individual user. We use this information to analyze Website traffic and do not examine it to identify personalized information. Google Analytics Website traffic monitoring Expire after 24 months Third party https://www.google.com/policies/privacy/](https://www.google.com/policies/privacy/

Advertising Cookies

Advertising cookies are used to display targeted offers or advertisements based on your interests on the Website or to manage our advertising. These cookies collect information about your activity on this or other websites in order to provide you with targeted advertising. Munchkin Records final visit and activity Expire after 24 months Third party https://documents.marketo.com/legal/cookies/ AddThis Detects behavioral advertising, analytics, and market research Expire after 24 months Third party https://www.addthis.com/

Comments

Disqus Τracks comment behavior analytics Expire after 24 months Third party https://help.disqus.com/customer/portal/articles/466259-privacy-police

Social Media Cookies

Social media cookies collect information regarding the use of social networking platforms. Facebook Detects members/non-members of social media platforms for behavioral advertising, analytics, and market research Expire after 24 months Third party https://www.facebook.com/help/cookies/ Terms of Use https://iconfitness.gr/wp-content/uploads/2018/05/terms-conditions_gr.pdf Privacy Policy https://iconfitness.gr/wp-content/uploads/2018/05/privacy-policy_gr.pdf Cookies Policy https://iconfitness.gr/wp-content/uploads/2018/05/cookies-policy_gr.pdf