The GRUPO ACADEMY  is a project under the responsibility of Your Best Academy Unip. Lda, a legal entity registered with the Portuguese commercial entities under NIPC 515004081. It is committed to respecting the privacy and confidentiality of the personal data made available by users and third parties. This document provides information on how these data are processed, always in compliance with the General Data Protection Regulation, as well as the Portuguese personal data protection law (Law No. 58/2019, of August 8), using various administrative and technological measures.

1. Data Controller

Your Best Academy Unip. Lda., as the data controller:

• Ensures that the processing of your personal data is carried out within the scope of the purposes for which they were collected or for compatible purposes;
• Collects, stores, and uses only the personal data strictly necessary for the intended purpose;
• Processes personal data for legally provided purposes or to pursue services requested by you.

Hereinafter, throughout this privacy policy, the data controller will be referred to as GRUPO ACADEMY .

2. Where and How are Personal Data Collected?

We collect personal data actively through the websites of different training schools, at the following addresses:

• Fitness Academy®: https://fitnessacademy.pt/
• Aqua Academy®: https://aqua-academy.pt/
• Sports Academy®: https://sports-academy.pt/
• Nutrition Academy®: https://nutrition-academy.pt/
• Fitness Experts®: https://fitnessexperts.pt/

For the website, this collection occurs directly (through the completion of forms where data are requested) and indirectly (through the recording of actions performed by site visitors, which are essentially anonymous but in some cases may allow identification, in which case this possibility is indicated).

In indirect collection, we use electronic communication protocols, cookies, embedded addresses, transparent pixels, other widgets, or georeferencing data.

3. What is the Purpose of Collecting Personal Data?

All information we collect is processed exclusively by us and/or third parties contracted for this purpose. We commit not to sell, trade, rent, or share with third parties without user consent, except when required by court order. The information collected is internally organized in a database duly registered with the National Data Protection Commission (CNPD) and is used to:

• Improve our services and products;
• Enhance consumer support service;
• Send periodic information that may be of interest to users;
• Improve the content of our website.

Personal data may also be collected to contact the user for commercial and marketing purposes, a process that depends on the user’s prior, express, and specific consent at the time of data collection. Consent for this purpose can be withdrawn at any time by the user, and this possibility must be indicated in each communication for those purposes.

Communications for commercial and marketing purposes may be carried out through various means, namely email, WhatsApp, Telegram, among others.

4. How are Personal Data Processed?

Data are processed confidentially, stored in a database with restricted access to employees who need them for their intended purposes.

The legal obligations binding the GRUPO ACADEMY apply to all its workers or service providers, ensuring users’ rights regarding the protection of their personal data.

5. What Level of IT Security is Applied to Personal Data?

We use physical, technological, and administrative security measures to protect information.

Data collected through GRUPO ACADEMY websites are communicated over the Internet using a secure SSL protocol.

This type of communication is not inviolable but currently corresponds to the best market practices. Additionally, data are stored in databases managed by GRUPO ACADEMY, encrypted, and periodic backups are performed to minimize the risk of data loss in case of storage system failure.

GRUPO ACADEMY also conducts regular reassessments of its technical levels of personal data processing, ensuring their currency and effectiveness.

6. What Happens if There is a Security Breach?

If a security breach occurs that results in proven unauthorized access by third parties, compromising the confidentiality, availability, or integrity of data, we are responsible for reporting such a breach to the supervisory authority (CNPD).

If the data breach results in a high risk for the data subjects affected by the breach, the concerned users must be immediately informed.

7. How Can I Know What Personal Data Are Being Processed?

To know what personal data we are processing, simply request this information via email at suporte@grupo-academy.pt.

8. How Can I Request the Rectification/Update of My Personal Data?

As a user and data subject, you have various rights, including the right to rectify/update data.

This right applies whenever the data processed by us are inaccurate, incorrect, or outdated, regardless of the consequences resulting therefrom.

To exercise any of these rights, send an email to suporte@grupo-academy.pt.

9. How Can I Request to Be “Forgotten”?

As a user and data subject, you have various rights, including the right to be forgotten.

This right entails deleting your user profile from our databases and ceasing to process it. You do not need to provide any justification to exercise this right, although you can do so.

To exercise the right to be forgotten, send an email to suporte@grupo-academy.pt.

10. How Can I Request That My Personal Data No Longer Be Processed?

In addition to data processing based on your prior and express consent, we may also process your data in the pursuit of legitimate interests unless these conflict with your rights, freedoms, and guarantees as a user. Thus, if you disagree with the data processing based on these legitimate interests and not on your consent, you can object.

You can also withdraw your consent for data processing at any time, whether for all or only some purposes, which will stop data processing from that moment.

To exercise any of the rights mentioned in this section, contact us via suporte@grupo-academy.pt.

11. In What Other Situations Can My Data Be Processed Without My Consent?

You can withdraw your consent at any time; however, this does not invalidate the lawfulness of the processing carried out until that moment.

Additionally, your data processing may be necessary for the execution of a service contract or other current agreements or in other situations due to legal obligations to which GRUPO ACADEMY is subject.

12. What Other Data Can Be Collected?

GRUPO ACADEMY websites use cookies to ensure a better user experience and third-party cookies, such as Google and Facebook, for traffic measurement and analysis.

These cookies may store some information that can identify a site visitor. However, the visitor can configure their web browser not to accept cookies if they wish.

Additionally, web server logs may record visitor information such as browser, operating system, device (including brand, model, and version), origin of the visit, access date/time, IP address, Internet service provider, and geographical access area.

In any case, the cookies we use do not collect personal information that allows the user to be identified, only retaining generic information, such as the form or region/city of access, among others.

The cookies we use serve various purposes, such as:

• Essential – necessary for website navigation, ensuring access to private areas, allowing service execution, e.g., session cookies;
• Analytical – necessary for collecting information for statistical analysis of website navigation and usage (e.g., Google);
• Social Networks – enabling direct interaction with social networks;
• Performance – necessary for monitoring the website user experience.

This information is used for statistical purposes and to improve the user experience on the site, possibly forwarded to third parties exclusively for statistical analysis, tracking, and navigation performance, search trend analysis, without identifying the user.

13. Can Sensitive Data Be Processed?

As a rule, data collected through the GRUPO ACADEMY website and subsequently processed by GRUPO ACADEMY do not involve sensitive user data.

Sensitive data include, but are not limited to:

• Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs;
• Trade union membership;
• Genetic data, biometric data solely for identifying a human being;
• Health-related data;
• Data concerning a person’s sexual life or sexual orientation.

Processing such data will only be lawful in the following situations:

• If the data subject has given explicit consent for one or more specific purposes;
• If processing is necessary for the performance of obligations and the exercise of specific rights of GRUPO ACADEMY or the user in labor law, social security, and social protection law;
• If processing is necessary to protect the vital interests of the user or another natural person if the user is physically or legally incapable of giving consent;
• If processing relates to personal data that have been made public by the user;
• If processing is necessary for the establishment, exercise, or defense of legal claims.

14. Will My Data Be Shared with Third Parties?

Data may be shared with third parties, such as infrastructure providers (server/web hosting and email services) or other service providers specifically contracted for this purpose.

Additionally, data may be shared with third parties in the case of specific partnerships established by GRUPO ACADEMY. In such cases, all data subjects will be informed in a timely manner, and they will have the opportunity to object to this sharing.

Data may also be shared with judicial, tax, and regulatory authorities to comply with legal requirements.

15. What Happens to Personal Data Transmitted Through GRUPO ACADEMY’s Social Media Presence?

Data will be used exclusively within the scope of the intended processes, such as providing clarifications and information regarding inquiries directed to us.

Using these data for any other purpose, such as commercial and marketing, depends on the user’s prior, express, and specific consent.

16. What Is the Retention Period for Personal Data?

Data retention complies with principles of temporal limitation to the strictly necessary. Considering the commercial activity associated with GRUPO ACADEMY, the following timeframes are practiced:

• Statistical data are retained in a manner that does not allow the identification of the respective holder from the second year of retention;
• As for newsletter subscribers’ data, necessary for the periodic sending of information by email, data are retained as long as the subscriber does not request their removal, without prejudice to the maximum legal limit of 20 years.

For each specific purpose, data will be processed during the period indicated to the user and whose consent integrates the consent for data processing for that purpose.

17. Disclaimer

GRUPO ACADEMY shall not be liable for any damages or losses in civil liability (including, but not limited to, direct, indirect, or consequential damages, lost profits, and moral damages) arising from the use, correct or incorrect, of its services, websites, and respective content by the user, including unauthorized access to the user’s computer and system by third parties.

GRUPO ACADEMY websites and portals may reference content and services provided by third parties, for which updates are the responsibility of those entities. Therefore, GRUPO ACADEMY cannot be held responsible for the complete accuracy and timeliness of any information on its websites.

Websites may contain links to sites operated by third parties over which GRUPO ACADEMY has no control and for which it assumes no responsibility.

18. Can This Privacy Policy Change?

Yes, given the evolution of legislation and technology, it is possible that GRUPO ACADEMY’s privacy policy may change.

All changes will be reflected in this document, available online, with a reference to the update date.

19. Do You Have Any Questions About This Privacy Policy?

For questions, please contact us via email at suporte@grupo-academy.pt.

Information regarding the data controller

• Corporate Name: Your Best Academy Unip. Lda
• NIPC: 515004081
• Address: Consiglieri Park, Estrada Consiglieri Pedroso, nº 71, Edifício D, 5º Dir., 2730-055 Queluz de Baixo – Portugal
• Phone: +351 210 522 749
• Email: suporte@grupo-academy.pt

This privacy policy aims to comply with Regulation No. 2016/679 of the European Parliament and the Council of 27 April 2016.

Document created on: October 31, 2022.
Last updated: January 17, 2024.