At Andrés Ruggeri ("RuggeriFit", "we", "us", "our"), we prioritize your concerns regarding data protection. This Privacy Notice outlines how we use the personal data collected about you and the rights you hold concerning this information.
According to applicable data protection laws, including the General Data Protection Regulation (GDPR), Andrés Ruggeri, with the email address andres@ruggerifit.com, is the data controller.
Information covered by this notice
This privacy notice pertains to all personal data collected and used by us. This includes but is not limited to: your name, age, postal address, email address, telephone number, credit card number, preferences you communicate to us, comments and questions, and technical information from the devices you use to access our website. It also encompasses details about your body and well-being that you share with us.
Summarized overview
| Processing purposes | Legal basis | Retention period |
|---|---|---|
| Managing your account | Article 6(1)(b) GDPR | 36 months after last activity |
| Coaching services | Article 6(1)(b); for health data also 9(2) GDPR | 36 months / 6 months for health data |
| Marketing and surveys | Article 6(1)(a) and (f) GDPR | 6 months after last activity |
| Payment processing | Article 6(1)(b) GDPR | 60 months after last activity |
| Mandatory accounting | Article 6(1)(c) GDPR | 60 months after last activity |
Personal data collection
We and our providers collect personal data when you:
- Purchase products or services, including coaching subscriptions.
- Transmit information via the website.
- Create an account or register for services.
- Opt-in for marketing communications.
- Participate in customer feedback surveys.
- Communicate with us via third-party social media.
- Contact us or provide information.
Automatically collected information
When you visit our website, we collect information using cookies and other technologies:
Technical information
IP address, login information, browser type/version, device identifier, location, time zone setting, operating system/platform, website response times, and download errors.
Visit and interaction information
Websites visited before and after ours, viewed products, length of visits, interactions on the page (scrolling, clicks, mouseovers), and methods used to leave the page.
Use of personal data
Although you have the freedom to decide the extent of personal data disclosure, not providing certain data may limit our ability to provide services and fulfill the contract.
Purposes
- Setting up and managing your online account.
- Providing services, including custom meal and training plans.
- Monitoring changes in your body for an improved coaching cycle.
- Combining information for a personalized experience.
- Gathering statistics for understanding the effectiveness of different approaches.
- Maintaining a history of fitness activities and progress.
- Providing information about products, services, and surveys.
- Processing payments and informing you about service changes.
- Fulfilling legal obligations and internal financial records.
Legal bases
- Fulfillment of contractual obligations (Article 6(1)(b) GDPR).
- Legitimate interests, such as business improvement and fraud prevention (Article 6(1)(f) GDPR).
- Compliance with legal obligations (Article 6(1)(c) GDPR).
- Marketing with obtained consent or legitimate interests (Article 6(1)(a) and (f) GDPR).
Photo usage
Photos shared with Andrés Ruggeri are used to view achievements and results. They will never be shared on the website or social media without prior authorization.
Health data processing
To provide customized meal and training plans, we may process specific health data, including information about allergens, injuries, or other details related to your physical or mental health. The legal basis is Article 9(2)(a) in conjunction with Article 6(1)(b) GDPR, requiring your explicit consent before becoming our customer.
You have the right to withdraw consent at any time. However, if we cannot process relevant data including health information, we cannot provide our services.
Third parties
Safeguarding the confidentiality of your personal information is a top priority. We do not trade or distribute your personal data to external parties.
Access to your personal data is extended exclusively to carefully chosen third parties essential to providing our services:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing. Stripe's privacy policy. |
| Everfit | Training program delivery and mobile app. Everfit's policy. |
| Cloudflare Pages | Website hosting. Cloudflare's policy. |
| YouTube (Google LLC) | Embedded testimonial videos. Google's policy. |
| cal.com | Discovery call booking. cal.com's policy. |
| ManyChat | Instagram DM automation. ManyChat's policy. |
| Make.com | Backend automation. Make's policy. |
| Notion | Internal CRM and client management. Notion's policy. |
Supervisory and law enforcement authorities: in situations where legal obligations require, we may disclose your personal data to relevant authorities.
Potential buyers and advisors: in case of business transitions, we might share your data with potential buyers, who must commit to handling your personal data in strict adherence to this privacy notice.
Data transfers to third countries
The information we collect may be transmitted to and stored outside the European Economic Area ("EEA"). The United States is one of the countries outside the EEA where your data might be transferred (e.g., Stripe, Notion, YouTube).
We commit to taking all reasonable measures to ensure secure and lawful treatment of your personal data, including engaging in EU Standard Contractual Clauses (or equivalent measures) with external parties outside the EEA, in accordance with Article 46(2)(c) GDPR.
Security measures
We have instituted technical and organizational security protocols to safeguard the personal data under our control. These measures include limiting access to personal data to authorized personnel only.
For heightened security, specific personal information in your online account can only be accessed through your username and password. We will never solicit your password through unsolicited communication.
Your rights
- Access: request a copy of the personal data we process about you.
- Rectification: correct incomplete or inaccurate data.
- Erasure: request the deletion of your personal data.
- Restriction: request restriction of processing in certain situations.
- Withdrawal of consent: withdraw consent at any time when processing is based on it.
- Portability: receive your data in a structured, commonly used, machine-readable format.
- Right to object: object to processing based on legitimate interest or for direct marketing.
How to exercise your rights
To exercise any rights, write to us at andres@ruggerifit.com, providing your name, email, postal address, your specific request, and any additional information necessary.
If you believe we have not complied with applicable data protection laws, you have the right to lodge a complaint with your local data protection authority. In Germany, the competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
For any questions about this policy or the processing of your data, contact us at andres@ruggerifit.com.