At Richard Geres Personal Training (The Personal Training Company Ltd.), we are committed to safeguarding your privacy and protecting the personal data you share with us. This Privacy Policy explains what personal data we collect, why we collect it, how it is handled, and your rights under the EU General Data Protection Regulation (GDPR) and the Data Protection Act (Cap. 586 of the Laws of Malta).
1. Data Controller Information
The entity responsible for processing your personal data (the “Data Controller”) is:
- Company Name: The Personal Training Company Ltd. (trading as Richard Geres Personal Training)
- Studio Location: Corinthia Hotel St George’s Bay, St Julian’s STJ 3301, Malta
- Contact Email: info@richardgeres.com
- Telephone: +356 999 77 444
2. Information We Collect
We only collect personal information that is necessary to provide you with our fitness coaching, consultation, and assessment services. This includes:
- Consultation & Contact Details: When you complete our online consultation request form, we collect your full name, email address, phone number, and town of residence.
- Health & Fitness Goals: Any health, lifestyle, or weight loss background and struggles that you voluntarily disclose to help us tailor your consultation.
- Appointment & Scheduling Details: When your consultation form is submitted, you are directed to an online booking calendar where you select an appointment date and time.
- Technical & Browsing Data: Your IP address, browser type, device information, and interaction data collected through cookies in accordance with your preferences.
3. Purpose and Legal Basis for Processing
We process your personal information on the following legal grounds:
- Consent (Art. 6(1)(a) GDPR): By ticking the consent box on our consultation form, you consent to us processing your details to contact you regarding your consultation and to receive fitness guidance. You may withdraw consent at any time.
- Contractual Necessity (Art. 6(1)(b) GDPR): To manage your appointment booking, communicate scheduling changes, and deliver personal training services.
- Legitimate Interests (Art. 6(1)(f) GDPR): To improve website performance, monitor service quality, and prevent spam or security abuse.
4. Third-Party Services and Data Processors
We will never sell, rent, or forward your personal data to third parties for marketing purposes. To operate our business securely, we work with trusted third-party service providers who act as data processors under strict confidentiality and GDPR compliance obligations:
- Keap / Infusionsoft: Our Customer Relationship Management (CRM) and consultation scheduling platform. Data submitted through our consultation form is processed via Keap’s secure infrastructure.
- Complianz: Manages cookie consent and user tracking preferences on our website.
- Web Hosting & Security Providers: Ensuring our website operates securely with SSL encryption.
5. Data Retention
We retain consultation inquiry data only for as long as needed to fulfill your inquiry or sustain an active client relationship. If you do not proceed with coaching, or if you request deletion of your information, your records will be securely archived or deleted in accordance with statutory retention requirements.
6. Your Rights Under GDPR
As a data subject in Malta and the European Union, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no legal requirement to keep it.
- Right to Restrict or Object to Processing: Object to processing based on legitimate interests or request restriction of processing.
- Right to Data Portability: Obtain your personal data in a structured, commonly used format.
- Right to Withdraw Consent: You may unsubscribe from emails at any time using the “Unsubscribe” link included in every communication.
To exercise any of these rights, please contact us at info@richardgeres.com.
You also have the right to lodge a complaint with the national supervisory authority in Malta: The Office of the Information and Data Protection Commissioner (IDPC) (www.idpc.org.mt).
7. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our legal obligations or services. The latest version will always be published on this page with the effective revision date.