Website Privacy Policy
pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018
This policy covers only the website move-pontives.it. The processing of data of registered gym members is covered by a separate privacy notice, handed out at sign-up.
1. Data Controller
SENONER STEFAN REMO (MOVE Fitnesscenter — Val Gardena) VAT no. 03022220218 — Tax code SNNSFN94H03B160Q — REA BZ-246853 Zona Artigianale Pontives 15, 39040 Laion (BZ), Italy E-mail: movepontives@gmail.com — Phone: +39 351 661 5789
No Data Protection Officer (DPO) has been appointed, as the conditions of Art. 37 GDPR do not apply.
2. What data we collect
2.1 Browsing data
Like any website, the systems that serve move-pontives.it automatically record some technical information needed for operation and security: IP address, browser and device type, operating system, page requested, date and time of the request, outcome of the request.
This data is not used to identify people and is not combined with other information.
2.2 Data you give us
If you contact us by e-mail, phone or WhatsApp, we process the data you choose to share (name, contact details, content of the message) solely in order to reply.
The website has no contact forms and does not collect data through forms.
2.3 Visitor statistics
We use two separate tools:
- Cloudflare Web Analytics — measures visits in aggregated, anonymous form. It uses no cookies, does not track people and does not allow them to be identified.
- Google Analytics 4 — active only if you give consent through the cookie banner. It provides more detailed statistics on how the pages are used.
2.4 Map
The directions page can show an interactive Google map. The map is loaded only if you give consent. Without consent you see a placeholder with a link to Google Maps.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Serving the website, ensuring its operation and security | Legitimate interest of the Controller (Art. 6(1)(f)) |
| Anonymous, aggregated statistics (Cloudflare) | Legitimate interest of the Controller (Art. 6(1)(f)) |
| Replying to enquiries by e-mail, phone or WhatsApp | Responding to the data subject’s request and pre-contractual steps (Art. 6(1)(b)) |
| Detailed statistics (Google Analytics 4) | Consent (Art. 6(1)(a)) |
| Displaying the Google map | Consent (Art. 6(1)(a)) |
Providing data is never mandatory. Refusing statistics cookies and the map does not limit your use of the website in any way.
4. Recipients of the data
| Recipient | Role | Country |
|---|---|---|
| Cloudflare, Inc. | Hosting, delivery network, security and anonymous statistics — Processor (Art. 28) | USA — transfer based on Standard Contractual Clauses and supplementary measures |
| Google Ireland Limited | Google Analytics 4 and Google Maps, only with consent — Processor | Ireland, with possible transfer to the USA under the EU-US Data Privacy Framework |
| Meta Platforms Ireland Ltd. | Only if you choose to contact us via WhatsApp; in that case WhatsApp’s own terms also apply | Ireland / USA |
Data is not disseminated nor transferred to third parties for their own commercial purposes. It may be disclosed to the competent authorities where required by law.
5. Retention period
| Type of data | Retention |
|---|---|
| Technical browsing logs | Up to 30 days, unless needed to investigate unlawful activity |
| Anonymous, aggregated statistics | Up to 6 months in non-identifiable form |
| Google Analytics 4 (with consent) | 14 months |
| E-mails and messages received | 12 months from the last contact, unless a contractual relationship begins |
| Your cookie choice | 6 months |
6. Transfers outside the European Union
Hosting the website and some of the services used involve a possible transfer of data to the United States. These transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission and, for Google, its participation in the EU-US Data Privacy Framework.
7. Your rights
At any time you may exercise the rights provided for in Articles 15-22 GDPR:
- access to your data
- rectification and erasure
- restriction of processing
- data portability
- objection to processing based on legitimate interest
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise these rights, write to movepontives@gmail.com. We will reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy — www.garanteprivacy.it.
8. Minors
The website is not aimed at children under 14 and does not knowingly collect their data. Gym registration of minors aged 14 to 18 is governed by separate documents handed to the parent or guardian.
9. Automated decision-making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
10. Cookies
For the full list of cookies used and to change your choices at any time, see the Cookie Policy.
Version 1.0 — [publication date]