Legal

Privacy Policy

How we process your personal data at Elite Fitness Figueres: controller, purposes, legal basis, recipients and rights.

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, users of this website are informed about the processing of their personal data.

Basic data protection information

Main website controllerElite Fitness
Tax ID[TO BE PROVIDED BY THE OWNER]
Registered addressPasseig del Cementiri 17, 17600 Figueres, Girona, Spain
Websitehttps://elitefitnessfigueres.com
PurposeTo manage website browsing, respond to contacts made by phone or email, provide information about services, maintain site security and obtain aggregated technical statistics through Vercel Web Analytics.
Legal basisUser consent, performance of pre-contractual or contractual measures, compliance with legal obligations and legitimate interest.
RecipientsData is not sold to third parties. Technical providers, hosting, email, Vercel and Google Maps may be involved.
RightsAccess, rectification, erasure, objection, restriction, portability and withdrawal of consent where applicable.

Elite Fitness Figueres operates through two differentiated units:

Gym — Unit 2

Address
Passeig del Cementiri 17, Nave 2, 17600 Figueres, Girona
Phone
+34 692 874 456

Hybrid Center — Unit 5

Address
Passeig del Cementiri 17, Nave 5, 17600 Figueres, Girona
Phone
+34 698 959 729

If it is confirmed in the future that each unit is managed by a different legal controller, the relevant identification details and channels for exercising rights will be updated.

2.Scope of this policy

This Privacy Policy refers to the use of this website and to data that may be processed when browsing, calling, sending an email or accessing external links from the website.

The website is informational: it has no online store, own payment gateway, user registration, private area or integrated contact forms.

3.Data the website may process

Depending on how users interact with the site, the following categories of data may be processed:

  • Technical browsing data needed for security, availability and proper operation of the site.
  • Data voluntarily provided when calling or writing by email, such as name, phone number, email, centre of interest and query content.
  • Technical browser preferences, such as light or dark theme selection through local storage.
  • Aggregated technical statistics through Vercel Web Analytics, without cookies and without direct user identification.
  • Data that third parties may process when interacting with Google Maps, Instagram or other external sites linked from the website.

4.Purposes and legal basis

Data is processed to enable browsing, maintain website security and stability, respond to queries, provide information about services, manage communications initiated by users, measure technical site performance and comply with legal obligations.

The legal basis may be user consent, pre-contractual or contractual measures, compliance with legal obligations and the legitimate interest in maintaining a secure, operational and useful website.

5.Retention

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, afterwards, for the periods required by applicable law.

  • Technical data will be retained for the periods needed for security, maintenance and availability.
  • Email or phone communications will be retained while necessary to handle the query or requested relationship.
  • Data linked to in-person services will be retained in accordance with the contractual relationship and applicable legal periods.
  • Where erasure applies, data may remain blocked for statutory liability periods.

6.Recipients and providers

Personal data is not sold or transferred to third parties for commercial purposes.

Some technology providers may process data outside the European Economic Area. In such cases, processing must take place with the safeguards required by applicable law.

  • Hosting and web infrastructure provider.
  • Email provider.
  • Vercel, as deployment, performance and aggregated technical analytics provider.
  • Google, in connection with Google Maps and its services.
  • Public authorities, regulators, courts or tribunals where there is a legal obligation.

7.In-person services and sensitive data

Registrations, payments, attendance, changes or in-person services are managed through the centre’s own channels and are not part of direct contracting carried out from this website.

In the context of in-person sports services, the centre may need to know basic information about injuries, limitations or relevant circumstances in order to adapt the activity and reduce risks.

Users should avoid sending especially sensitive data by email unless necessary. If health data, minors’ data, images or authorisations are processed, information will be provided through the relevant channel and the appropriate legal basis will apply.

8.User rights

Users may exercise the following data protection rights:

  • Access.
  • Rectification.
  • Erasure.
  • Objection.
  • Restriction of processing.
  • Portability.
  • Withdrawal of consent where processing is based on consent.

To exercise these rights, users may send a request clearly identifying the right they wish to exercise to:

If users consider that processing does not comply with applicable law, they may lodge a complaint with the Spanish Data Protection Agency.

9.Security

Elite Fitness Figueres applies reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, disclosure or destruction.

However, no system connected to the Internet can guarantee absolute security.

10.Changes and updates

Elite Fitness Figueres may update this Privacy Policy to adapt it to legal, technical, organisational or website operation changes.

If new tools, forms or relevant processing activities are added, this policy will be updated before or when they are launched.

This Privacy Policy was last updated on 20 May 2026.