Privacy Policy

Personal data protection (GDPR & Spanish LOPDGDD)

1. Information for users

Evergy Fitness International, S.L., in accordance with the applicable data protection regulations, informs users that the personal data collected through the forms on the website https://evergyfitness.com/ will be processed in compliance with Regulation (EU) 2016/679 of 27 April (General Data Protection Regulation – GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

The collection and processing of personal data is primarily intended to maintain the commercial relationship and provide the services of Evergy Fitness International, S.L., as well as to comply with applicable legal obligations.

Evergy Fitness International, S.L. adopts the necessary technical and organisational measures to ensure the security, integrity and confidentiality of personal data. Where necessary, documentation may be requested to verify the identity of the data subject.

2. Joint data controllers

The personal data provided within the scope of the professional relationship may be jointly processed by the following group companies (the “Entities”), in accordance with Article 26 GDPR:

Thomas Wellness Group, S.L. — Tax ID: B84956093
Pilates Iberia, S.L. — Tax ID: B22512206
Evergy Fitness International, S.L. — Tax ID: B02706273

Registered office (shared): C/ Lanzarote 13, Bajo B, 28703, San Sebastián de los Reyes (Madrid), Spain.

3. Purposes of processing

Evergy Fitness International, S.L. processes the personal data collected through the website for the following purposes:

To comply with commercial, corporate, accounting, tax and legal obligations.
To provide the information requested via the contact form.
To perform contracts entered into remotely with the user.
To manage the purchase of products offered through the website and related administrative tasks.
To manage user registration and access to private areas (where applicable).
To send commercial information, newsletters and communications regarding services, updates and sector-related content (by electronic means where applicable).
For security purposes and fraud prevention.
Where applicable, to share data within the corporate group for account consolidation, harmonisation of corporate policies and strategic, commercial and financial management (internal administrative purposes).

You may object to receiving commercial communications at any time by sending an email to info@thomas.es.

Fields marked as mandatory on the forms are required in order to fulfil the stated purposes.

4. Data retention periods

Personal data will be retained for as long as the commercial relationship remains in force or until you request their deletion, and for the periods necessary to meet potential legal liabilities arising from the services provided.

Data processed on the basis of consent will be retained until such consent is withdrawn or the data subject objects to the processing, as applicable.

5. Legal basis for processing

The legal bases that legitimise the processing of your personal data are:

Your request for information and/or the contracting of services from Evergy Fitness International, S.L., the terms and conditions of which are made available in advance.
Your freely given, specific, informed and unambiguous consent.
Compliance with applicable legal obligations.
Legitimate interest in fraud prevention, system performance improvement, proper handling of requests, access to private areas and internal administrative data sharing within the group.

Failure to provide data, or providing inaccurate or incomplete data, may prevent us from processing your request or entering into a contract.

6. Source of the data

The personal data have been provided directly by the data subject. If you provide data relating to third parties, you guarantee that you have obtained their express consent and that you have informed them of the content of this Privacy Policy.

7. Data recipients and international transfers

Data may be disclosed to service providers engaged by Evergy Fitness International, S.L., acting as Data Processors, only where necessary for the provision of the service (e.g. hosting providers, IT support or legal advisors). Such providers are contractually required to process the data solely in accordance with our instructions and for the intended purpose.

As a result of web hosting services, data may be transferred to providers located outside the European Economic Area, in particular to Cloudflare, Inc. (San Francisco, CA). Cloudflare, Inc. is certified under the EU–US Data Privacy Framework (Adequacy Decision of 10 July 2023) and also relies on Standard Contractual Clauses adopted by the European Commission. Further information is available at dataprivacyframework.gov.

Personal data will not be disclosed to third parties, except where required by law.

8. Rights of data subjects

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by:

Email: info@thomas.es
Postal mail: C/ Lanzarote 13, Bajo B, 28703, San Sebastián de los Reyes (Madrid), Spain

The data subject guarantees that the data provided are accurate, complete and up to date, and undertakes to notify any changes.

If you believe that your personal data have not been processed in accordance with applicable regulations, you may lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es.

9. Commercial communications

In accordance with Spanish information society services legislation (LSSI), Evergy Fitness International, S.L. will not send advertising or promotional communications by electronic means unless they have been previously requested or expressly authorised.

Where a prior contractual relationship exists, we may send commercial communications relating to products or services similar to those initially contracted. In all cases, users may request to stop receiving commercial communications through the indicated customer service channels, in particular by writing to info@thomas.es.

10. Updates to this Privacy Policy

Evergy Fitness International, S.L. may update this Privacy Policy periodically to reflect improvements in processes or services, or changes in applicable regulations. We recommend reviewing it regularly.