Privacy and data handling

Plain answers about what we collect, where it lives, and how to get rid of it. If your question is not here, ask us on the call.

Last updated: [DATE]

Who is responsible

For the quiz answers your trial prospects give, the gym is the controller and Warmup is the processor: we only handle that data on the gym’s instructions. For enquiries you send us directly, we are the controller.

[LEGAL ENTITY NAME, REGISTERED ADDRESS, COUNTRY, CONTACT EMAIL]

Confirm whether Warmup Solutions is a registered company and where, because it decides the controller / processor wording above.

Blocked on the entity question

What we collect

From trial prospects: Name, email address, phone number if given, chosen appointment time, and the eight quiz answers: goal, motivation, current level, what has stopped them before, training frequency, interest in extras, age, and a free-text note.
From you, the gym owner: Name, gym name, email address, phone number, and whatever you tell us on the call.
From visitors to this site: Nothing. This site sets no cookies, loads no analytics and embeds no third-party trackers.

Why we are allowed to

Prospect data: processed on the gym’s documented instructions so the gym can prepare for the visit. Art. 6(1)(b) and 6(1)(f) GDPR, with the gym as controller.
Your data as a gym owner: to answer your enquiry and to perform the contract. Art. 6(1)(b) GDPR.

Where it is stored

On servers inside the European Union.

[HOSTING PROVIDER AND REGION]

Needs the real provider and region

Who else touches it

Producing the brief involves a small number of service providers. Every one of them is listed here, with what it does and where it runs.

[AUTOMATION PLATFORM] — runs the flow between booking, quiz and email.
[AI PROVIDER] — writes the approach recommendation.
[EMAIL SENDER] — delivers the brief and the four pre-visit emails.
[BOOKING TOOL] — takes the appointment.

Name each one, its country, and whether a data processing agreement is in place. A German gym owner will ask this on the call whether or not they read this page.

Needs the real sub-processor list

How long we keep it

Prospect answers are deleted whenever the gym asks, with no notice period and no fee. Otherwise they are kept for as long as the gym’s account is active.

[RETENTION PERIOD, e.g. “automatically deleted after 12 months”]

Needs a real retention period

Your rights

Under the GDPR you can ask for access to your data, correction, erasure, restriction of processing, portability, and you can object to processing. You can also complain to a supervisory authority. Articles 15 to 21 GDPR.

To exercise any of these, write to the address above. We answer within a month.

Data processing agreement

We sign a data processing agreement (Auftragsverarbeitungsvertrag) with every gym before any prospect data moves. Ask for it on the call and you will have it before you pay anything.