Privacy Policy
Last updated: 21 October 2026
1. Data Controller
The controller of your personal data is Gym Assistance Sp. z o.o., Pawłów 84, 26-510 Pawłów, Poland (KRS 0001028327, VAT: PL7991980870).
Contact: kontakt@gymassistance.pl
2. Data We Collect
- Forms (contact, quote): name, email, phone number, message. The quote form also collects your postcode and the gym configuration you chose.
- WhatsApp: if you message us on WhatsApp, we receive your phone number and the conversation. WhatsApp is operated under Meta's terms.
- Booking (Cal.com): name, email, chosen date and time.
- Technical data: IP address, browser type, pages visited (with your consent).
- Enquiry context: when you submit a form we record your IP address and approximate location (country, region, city — derived from the IP address), the page URL, referrer and campaign parameters. We process these solely to handle your enquiry, tailor the offer to your region and protect the form against abuse.
3. Purpose and Legal Basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries | Art. 6(1)(b) GDPR |
| Contract performance | Art. 6(1)(b) GDPR |
| Website analytics | Art. 6(1)(a) GDPR (consent) |
| Measuring ad effectiveness (Google Ads) | Art. 6(1)(a) GDPR (consent) |
| Protecting forms against spam and abuse | Art. 6(1)(f) GDPR (legitimate interest) |
| Direct marketing | Art. 6(1)(f) GDPR |
| Tax and accounting obligations | Art. 6(1)(c) GDPR |
4. Cookies
Essential cookies (always active):
- Storing your cookie consent decision (
ga_cookie_consent)
Analytics cookies (with your consent only):
- Traffic analysis to improve the site (Google Analytics)
Advertising cookies (with your consent only):
- Measuring whether a Google Ads advert led to an enquiry (Google Ads). After you submit a form, we send Google a one-way hash of your email address and phone number (SHA-256, created in your browser — the address and number cannot be read from it) so that Google can match the enquiry to an ad click (enhanced conversions).
YouTube videos load only after you click them, in privacy-enhanced mode (youtube-nocookie.com).
Manage cookies in your browser settings or withdraw consent via the cookie banner.
5. Data Sharing
- MailerSend — delivers the email with your enquiry to our team (EU/US, safeguard: EU-U.S. Data Privacy Framework)
- Google — enquiry spreadsheet (Google Sheets) and, only with your consent, Google Analytics and Google Ads (EU/US, safeguard: EU-U.S. Data Privacy Framework)
- SMSAPI — short text notification to our team about a new enquiry: name and phone number (Poland)
- Cal.com — booking platform (EU/US, standard contractual clauses)
- Vercel — hosting (EU/US)
- Public authorities — when required by law
We do not sell your personal data.
6. Retention
- Contact form data: up to 3 years from last contact
- Client records: 10 years (tax/accounting obligations)
- Analytics data: up to 26 months or until consent is withdrawn
7. Your Rights
Under GDPR you have the right to access, rectify, erase, restrict processing, portability, object, and withdraw consent at any time.
Write to: kontakt@gymassistance.pl
You may also lodge a complaint with your national data protection authority.
8. Security
We apply appropriate technical and organisational measures to protect your data. The site uses HTTPS encryption.
9. Changes
We may update this policy. Material changes will be communicated by publishing the new version on this page with an updated date.
Privacy questions?
Write to us: kontakt@gymassistance.pl