INFORMATION ABOUT THE DATA CONTROLLER

 

 

This Personal Data Processing and Protection Policy is independently applied by the companies operating under the trademark “Flais“. – “Fitness Flais Corporation” Ltd., UIC 204418337; “Power Ronic” Ltd., UIC 204417833; “Happy Group 1” Ltd., UIC 203313098; “Fitness Flais Group” Ltd., UIC 204784530; “Fitness Flais Pro” Ltd., UIC 207110394, “Next Level Fitness” Ltd., UIC 204479347 and managing the facilities operating under the same trademark (collectively and individually referred to as ” Controller”; “Fitness Flais”; “Flais”). 

 

Throughout this Policy, “Controller”, “Fitness Flais”, “Flais”, “We”, “Us”, “Company” refers to the specific company operating under the trademark “Flais” – “Fitness Flais Corporation” Ltd., UIC 204418337; “Power Ronic” Ltd., UIC 204417833; “Happy Group 1” Ltd., UIC 203313098; “Fitness Flais Group” Ltd., UIC 204784530; “Fitness Flais Pro” Ltd., UIC 207110394, “Next Level Fitness” Ltd., UIC 204479347 and managing facility(ies) under the same trademark with which you have a legal relationship and/or have entered into an Agreement on the provision of Sports Services or Remote Agreement.

 

“Fitness Flais Corporation” Ltd., UIC 204418337, manages and administers Premium Fitness Flais Millennium, Fitness Flais Mladost 4, Fitness Flais Studentski grad, Fitness Flais Novi Iskar;

“Power Ronic” Ltd., UIC 204417833, manages and administers Premium Fitness Flais Amaya, Premium Fitness Flais Mladost 1, Fitness Flais Strelbishte;

“Happy Group 1” Ltd., UIC 203313098, manages and administers Fitness Flais Druzhba, Premium Fitness Flais Sky City;

“Fitness Flais Group” Ltd., UIC 204784530, manages and administers Premium Fitness Flais Veslets;

“Fitness Flais Pro” Ltd., UIC 207110394, manages and administers Premium Fitness Flais Hadzhi Dimitar;

“Next Level Fitness” Ltd., UIC 204479347, manages and administers Premium Fitness Flais Nadezhda, Premium Fitness Flais Krasna Polyana, Fitness Flais Knyazhevo, Fitness Flais Manastirski Livadi.

 

Each individual company is the sole and independent controller of the personal data processed of the persons with whom it has a legal relationship, unless otherwise expressly stated in this policy.

 

Flais processes your personal data if you are an individual and fall into one of the following categories:

 

  • Individuals – visitors and customers of the relevant Fitness Flais Facility, part of those listed on the following website: https://www.flaisfitness.bg/lokacii/; 
  • individuals who have voluntarily provided their personal data for the implementation of Fitness Flаis’ marketing policy;
  • individuals who are registered in the customer areas of the website https://www.flaisfitness.bg/;
  • an individual who has submitted a question, comment, request to exercise his or her rights as a data subject or any other statement to the relevant email address of a company operating under the “Flais” trademark;
  • fitness instructors engaged in the provision of services related to the organization and delivery of group classes;
  • representatives or designated contact persons of legal entities that have entered into agreements with Fitness Flais (e.g. sales, service, or other agreements);

           

The above means that Flais determines the purposes and means of processing personal data.

 

All companies, operating under the “Flais” trademark – “Fitness Flais Corporation” Ltd., UIC 204418337; “Power Ronic” Ltd., UIC 204417833; “Happy Group 1” Ltd., UIC 203313098; “Fitness Flais Group” Ltd., UIC 204784530; “Fitness Flais Pro” Ltd., UIC 207110394, “Next Level Fitness” Ltd., UIC 204479347 and managing the facilities operating under the same trademark, together as joint controllers, process your personal data if you are an individual and fall into the following category:

 

  • an individual who has submitted a question, comment or other statement to Flais by filling in the contact form on the website https://www.flaisfitness.bg/kontakti and/or through the profiles and fan pages under the trademark “Flais” in social networks;

 

The essential features of the arrangements between the joint controllers are accessible to the data subject. 

 

This personal data processing and protection policy is an expression of the commitment and responsible attitude towards the protection of your personal data that you share with Flais.

 

Flais makes every effort to ensure that your personal data is lawfully processed in accordance with the applicable provisions of Bulgarian and European Union law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”.

 

In this document you can find information about what personal data is processed, by whom, for what purposes, to whom your data may be disclosed, and what your rights are related to the protection of personal data.

 

For the purposes of this document, “Sports Services Agreement” means a contract (agreement) entered into with the relevant company operating under the trademark “Flais” and managing a facility operating under the same trademark, under which you are entitled to use sports services at the any of the Fitness Flais Facilities for a specified period or for a specified number of visits to sports activities.

 

For the purposes of this document, “Fitness Flais Facilities” shall mean all fitness facilities and fitness equipment therein, as well as special gyms and recreation areas with special equipment and group exercise areas operated and managed by Fitness Flais and operating under the “Flais” trademark.

 

FOR WHAT PURPOSES AND ON WHAT BASIS IS YOUR PERSONAL DATA PROCESSED? FOR WHAT PERIOD IS YOUR PERSONAL DATA STORED?

 

1. Processing of personal data of visitors to the Fitness Flais Facilities.

 

  • personal data processed for the purposes of concluding and performing a Sports Service Agreement

 

In order to be able to take advantage of the sports services at the Flais Facilities, you shall sign a Sports Service Agreement at one of the facilities. You can also enter into such an agreement via the Fitness Flais website and the corresponding Fitness Flais App mobile app, which enable you to purchase a subscription online.

 

To be able to provide you with the sports services you have requested in accordance with the concluded Sports Service Agreement, you may be required to provide certain personal data which is necessary for the purposes of concluding and performing the agreement.

 

The provision of personal data is entirely voluntary but if you do not wish to provide it, you will not be able to conclude a Sports Service Agreement for the provision of sports services. Upon the conclusion of the Sports Service Agreement, the provided personal data shall be utilized for the automated creation of a profile (account) within the online customer area of the respective Flais fitness club. This profile serves as an essential instrument for the fulfilment of the executed Sports Service Agreement (e.g. facilitating access to Flais fitness centers).

 

Scope of the processed data

 

In order to enter into a Sports Service Agreement, we process a minimum set of your identification data.

 

We process personal data to the extent necessary for the performance of the agreement to which you are a party: first name, last name, email address, personal identification number (PIN) and telephone number.

 

Date of birth and gender, if you provide them to Us voluntarily, we will process for purposes deriving from our legitimate interests, such as statistical and analytical purposes (optimal adjustment of each fitness club’s offer to the needs of customers using our sports services).

 

In addition, for the purpose of verifying your identity when using the services provided by a company operating under the trademark “Flais” and managing a facility operating under the same trademark, Flais processes your photo, which is taken on site by receptionists, and the provision of the photo allows it to be determined whether your subscription is being used by another person without the need to collect your additional data. The mobile app can generate a unique QR code in each individual Flais customer account, through which personal QR code customers can identify themselves and gain access to the Flais Fitness Facilities.

 

In addition to the duration of concluded Sports Services Agreements, the aforementioned data shall be retained within a designated software system for a period not exceeding five (5) years following the termination of the last executed Sports Service Agreement, provided that no subsequent Sports Service Agreement has been entered into during this interval. This data retention policy serves to enhance customer service and streamline the process of future Sports Service Agreement executions. Consequently, customers are relieved of the burden of repeatedly providing personal data upon entering into subsequent Sports Service Agreements with Fitness Flais. Concurrently, to safeguard customer interests, the retention period for identification data shall be restricted to a timeframe commensurate with the likelihood of the customer resuming utilization of Fitness Flais fitness centers following a temporary cessation of engagement

 

Data related to fitness centre visits

 

Given the fact that each Sports Service Agreement entered into relates to a type of sporting activity at a specific Fitness Flais Facility, in the course of the performance of the agreement, the specific company with which the agreement is entered into, in the event that it managing more than one Fitness Flais Facility, receives general information about your sporting preferences and where and when you exercise. That is to say, for the purposes of the performance of the concluded Sports Service Agreements, the specific company with which you have concluded an agreement has information on, for example, which of the fitness centres managed by it under the trademark “Flais” you have a subscription to, whether the subscription applies to fitness services or to attending group classes, as well as at what time of the day the sports service you use takes place.

 

Since, depending on your subscription, you have to be provided with a specific sports service at a particular Fitness Flais Facility and at a specific time, the aforementioned personal data is only used to fulfil the respective contractual obligations and to provide you with access to the respective activity for which you have paid a subscription.

 

Bank card and account details

 

When you make a payment with a bank card for a subscription purchased, Flais processes the data of this bank card and the associated bank account in order for your payment to be processed and the paid service to be provided. In the event that Flais uses the services of a third-party payment service provider, it will not process your bank card and account details. 

 

Purposes of processing

 

The personal data described above is necessary to enable us to enter into and perform our obligations under the Sports Service Agreements entered into with you at the relevant Fitness Flais Facilities. The personal data provided by you is processed in particular for the following purposes:

 

  • the conclusion of Sports Service Agreements and the performance of these Agreements;
  • issuance of membership cards;
  • providing access to visitors, holders of membership cards and personal QR codes, in their profiles (accounts) in the online area for customers of fitness clubs “Flais”, including in the relevant mobile application, for the relevant sports activities and sports centers for which the relevant agreement has been concluded;
  • the performance of our obligations to provide the sports services under the relevant subscriptions and to comply with any legal obligations applicable to the Company;
  • online request, payment and conclusion of the Sports Service Agreement;
  • processing of payments made via bank cards;
  • to establish your identity when using the services provided by the Company and especially to facilitate your verification at the entrance to the sports facilities (the entrance of Club Members who are provided with a subscription card and a personal QR code for access to the gyms in the online customer area);
  • Statistical and analytical purposes.

 

Grounds for processing

 

The legal basis on which we process the personal data described above is the conclusion and performance of the agreement between you and the respective company operating under the trademark “Flais” for the subscription provision of sports services (Article 6, para. 1, item “b” of the GDPR). The creation of an account (profile) in the Customer Area of the Company on the website https://www.flaisfitness.bg/ and, optionally, in the mobile application is made for the purpose of the execution of the concluded Agreement for the provision of sports services (Art. 6, para. 1, item “b” of the GDPR).

 

The reason for storing your identification data after the termination of your last agreement is based on the legitimate interests of the Controller to offer you a better service, to facilitate the process of concluding individual Sports Service Agreements and thus to improve the quality of the services provided (Art. 6, para. 1 item “f” GDPR).

 

The legal basis for processing your photo is also based on legitimate interest (Art. 6, para. 1, item “f” GDPR) in connection with establishing your identity when using the services provided by Flais and, in particular, to facilitate your verification at the entrance to the sports facilities (the entrance of Members of the clubs to which you subscribe), as well as for the performance of the agreement between you and Flais for the provision of sports subscription services (Art. 6, para. 1, item “b” GDPR).

 

The basis for the processing of the data to issue an invoice for the payment received is compliance with legal obligations under tax law (Art. 6, para. 1, item “c” GDPR).

 

In the case of processing your data for direct marketing purposes, the basis for processing is your voluntary and informed explicit consent, if you wish to provide it (Art. 6, para. 1, item “a” GDPR).

 

We process your personal data within the scope of date of birth and gender, in case you decide to provide them voluntarily, on the basis of our legitimate interests which are related to statistical and analytical purposes (Art. 6, para. 1, item “f” GDPR).

 

Storage period

 

After the termination of your Sports Service Agreement, your identification and contact details will be stored by Us in an electronic customer database for a period of 5 years after the termination of your last agreement, provided that a new Sports Service Agreement has not been concluded in the meantime. This is done to make it easier and quicker for you to enter into a subsequent agreement and to issue membership cards and invoices for purchases made by you more quickly. Thus, when you enter into a new Sports Services Agreement, for your better service and convenience, we will not re-collect your personal information, but will use the information you originally provided. After the 5 year period described above, all of your personal data will be deleted from all software and electronic systems.

 

Personal data that you have provided in the course of entering into an agreement with a Data Controller and agreeing to the terms and conditions and upon notification of this privacy policy, shall also be retained for a longer period as set out below in the section on personal data processed on the basis of the protection of the legitimate interests of Flais or on any other basis.

 

Your personal data concerning your bank card payments, which is necessary to fulfil our legal obligations under tax and accounting legislation, may be stored for the maximum period of 10 years set out in tax and accounting legislation.

 

Personal data provided for direct marketing purposes is stored and processed until you explicitly withdraw your consent to this.

 

  • personal data processed on the basis of your consent to send an e-newsletter and/or for other activities for marketing purposes

 

In order to receive information about current offers and promotions, new products and services and special offers, you can subscribe to receive our e-newsletter. For this purpose, it is necessary to provide your e-mail address in the process of concluding the Sports Service Agreement or at a later stage. If you subscribe, we will process your email address in order to send you our e-newsletter. We may also use the telephone number you provide when organising special marketing events, subject to your express consent.

 

Your email and telephone number information is processed for the purpose of this clause based on your consent given at the Fitness Flais Facilities and/or electronically.

 

Personal data processed for the purpose of sending an electronic newsletter is processed until you unsubscribe from receiving the newsletter by opening the electronic unsubscribe link available in the electronic messages we send you.

 

You can also withdraw your consent to receive information about current offers and promotions, new products and special offers by contacting Us as indicated below.

 

We may also organise various games, giveaways and other marketing activities for the purpose of promoting and advertising our services and products. For the purposes of your participation in these activities, you may provide us with various personal identification and contact details which we will use to identify you, verify your eligibility for the game/promotion, to draw a winning entrant, to publish the names of winning entrants and to send prizes to winning entrants.

 

We will process this data on the basis of your consent given by participating in the relevant promotional activity in accordance with its terms and conditions. The data of participants in promotional activities will be deleted 6 months after the end of the announced game and the sending of the prizes to the winning participants.

 

The provision of the described personal data for the purpose of this paragraph is entirely voluntary. If you do not wish to provide Us with your data, however, you will not be able to receive our e-newsletter or participate in the relevant marketing activities.

 

We process general information about your sports preferences, when and where you practice your sports activities at the Flais Facilities in order to perform analysis and obtain statistics (subsequently, based on this information, we can prepare offers for you). The legal basis for this type of processing is our legitimate interest (Article 6, para. 1, item “f” GDPR) concerning the improvement of the quality of sports services and the development of products and services offered by Us. Nevertheless, the sending of a personalised offer by email, by telephone call – in the respective manner chosen by you – is based on the consent provided (as stated above), which you can withdraw at any time.

 

  • personal data related to the implementation of video surveillance in Fitness Flais Facilities

 

Categories of personal data

 

Fitness Flais Facilities are equipped with a limited number of CCTV cameras. Through the recordings from the installed cameras we can process your images from the CCTV and video capture.

 

Purposes and basis for processing

 

The purpose of video surveillance is to provide security for the fitness centers, as well as to protect our and your property and ensure order and security at the Facilities.

 

We process your personal data related to the video surveillance carried out on the basis of protecting our legitimate interest to guard our business premises and to keep them in order and to protect our and your property from unlawful intrusion (Article 6, para. 1, item “f” GDPR).

 

In order to ensure that the protection of Flais’ legitimate interests does not take precedence over your interests, fundamental rights and freedoms, which require the protection of personal data, we have taken a number of measures and safeguards which include, for example, the placement of CCTV cameras in a limited number of locations at Fitness Flais Facilities. In this regard, CCTV cameras have only been placed at the entrances to the Fitness Flais Facilities, above the reception areas, above the group class room entrances, and above the locker room entrances (with no visibility into the locker rooms themselves) in order to, if necessary, identify individuals who have gained unauthorized access or tampered with our or your property.

 

Some of the other safeguards we have taken include prominently displaying clearly identifiable signs notifying you of the CCTV being carried out and where you can read this Policy; using camera settings (perimeter covered, angle of capture, zoom scale) to limit unnecessary disturbance and your privacy. In addition, we ensure that only a limited number of responsible persons have access to the CCTV recordings, that the data is not disclosed to third parties, and that the video recordings are only opened and inspected when an event requiring their analysis occurs.

 

The CCTV footage at each Fitness Flais Facilities shall be retained for a maximum period of two weeks from the date of recording. Only in the event of an identified breach or incident may recordings be retained until the proceedings in the case have been concluded, but no longer than three years from the date of recording.

 

  • personal data processed for the purposes of complying with our legal obligations

 

When you enter into a Sports Service Agreement or purchase a product from Flais, certain legal obligations arise for us. In order to comply with them, we shall process your personal data, including, for example, your identification, contact details and other information provided to Us by you.

 

For example, we may process your personal data for the purposes of issuing an invoice and complying with our obligations as a supplier under the Value Added Tax Act. In addition, under applicable accounting and tax legislation, we are obliged to account for the invoice issued and reflect it in our accounting and tax records.

 

Your data may also be processed for the performance of our obligations under applicable consumer law – for example, when making claims, cancelling a contract, returning purchased products and refunding their value, resolving consumer disputes, sending a notice of amendment to the terms and conditions of sports services and the like.

 

The basis on which we process this personal data is precisely the performance of obligations under the law (Article 6, para. 1, item “c” GDPR).

 

Your personal data processed for the purposes of issuing invoices and fulfilling our other legal obligations under tax, accounting, consumer and other laws may be stored for the maximum statutory period of 10 years.

 

  • personal data processed for the purposes of our legitimate interests

 

We may process your identification data, written declarations and consents signed by you, data on orders and purchases made by you in our fitness centres, data on payments made by you, data on questions, complaints and the like sent by you in order to be able to defend ourselves in the event of legal claims made by you against Us.

 

We may also process your identification data for the purpose of including you in our electronic customer database to facilitate and make it quicker and easier for you to enter into Sports Service Agreements, and to issue membership cards and invoices for purchases made by you at any of Fitness Flais Facilities.

 

We will only process this personal data if our legitimate interests are not overridden by your interests, fundamental rights and freedoms which require the protection of personal data.

 

The basis for processing your data is to protect our legitimate interest in defending ourselves against any legal claims, and to maintain a database of our customers’ data in order to quickly and easily enter into Sports Service Agreements, and to issue membership cards and invoices.

 

Data processed for the purpose of defending against legal claims (such as written declarations and consents) will be retained by Us until the expiry of the 5-year limitation period for legal claims under the Obligations and Contracts Act. They will only be accessible to a limited number of persons engaged by the relevant Administrator, who will only be entitled to access them in the event of a legal dispute.

 

  • Personal data processed when registering an account in one of our online customer areas and using the account functionalities

 

The website https://www.flaisfitness.bg used by Flais, as well as our mobile application Fitness Flais App, enable the creation of profiles in customer areas, which allow the use of functionalities such as the possibility of online conclusion of an Agreement for the provision of sports services with the respective company depending on the selected Fitness Flais Facility, online booking for a visit to a group class, access to the gyms through a personal QR code, information about the concluded Agreement for the provision of sports services and opportunities for the execution of the concluded Agreement.

 

Create an account in one of the customer areas

 

Creating an electronic account in the customer area of the Flais is possible by filling in an online registration form, which contains mandatory fields marked as such.

 

An account in the customer area of Flais can be created electronically by concluding an online Sports Service Agreement – on the website https://www.flaisfitness.bg/ or in the corresponding mobile application Fitness Flais App. Customers of the Fitness Flais Facilities who have concluded a Sports Service Agreement on site – at the reception of a Facility, automatically receive at the email address they have provided the login details to their account (profile) in the online Flais Customer Area, through which profile and, optionally, with the mobile app, the concluded Sports Service Agreement is executed.

 

“MultiSport” cardholders visiting Fitness Flais Facilities can obtain a profile in the Flais customer area after completing a free profile creation form online.

 

Customer accounts created at https://www.flaisfitness.bg/can also be accessed from the Flais mobile app. The mobile app uses all the features available to a user with a customer account registered at https://www.flaisfitness.bg/. The mobile app generates a unique QR code in each individual customer’s account, through which personal QR code customers are identified and given access to the respective Fitness Flais Facility

 

Processing of personal data provided to create an account in one of the customer areas

 

In order to create an account in one of the customer areas, we need to receive your identification data and e-mail address. These are used for the purpose of maintaining your electronic profile, as well as for the purpose of sending electronic messages from us in connection with your profile (e.g. profile registration messages, password recovery or change messages and the like) or in connection with the use of features of your electronic profile and for the purpose of fulfilling the concluded Sports Service Agreement (e.g. messages confirming the conclusion of a Sports Service Agreement, messages confirming the reservation of a visit for a group class and the like, receipt of a personal QR code to identify the customer and access to the Facilities).

 

The data we collect when using the online Sports Service Contract functionality is the same as the personal data described above in this Policy that is required to enter into a Sports Service Agreement at the Facilities. The grounds and purposes for the processing of the data required for the Sports Service Agreement, as well as the retention periods, are discussed in item 1 of this Policy, section “a) personal data processed for the purposes of concluding and performing the Sports Service Agreement”.

 

Personal data processed when booking online for a group class

 

In case you take the opportunity to request a group class at one of the Fitness Flais Facilities electronically, due to the nature of the service itself, we receive general information about your sports preferences and where and when you exercise.

 

This data collection is necessitated by the inherent nature of the service, enabling Fitness Flais to fulfil its obligation to provide you with the opportunity to engage in the requested sporting activity at the designated Facility and time.

 

Grounds for processing

 

The legal basis on which we process your personal data for the purposes of creating and administering an electronic account is the conclusion and performance of the Sports Service Agreement concluded between you and the relevant Flais (Article 6, para. 1, item “b” of the GDPR).

 

The data obtained in connection with the online conclusion of the Sports Service Agreement and in connection with the online reservation of a visit for a group class are processed for the conclusion and performance by Us of the Sports Service Agreement and the agreement for the online reservation of a visit for a group class concluded between you and Flais (Article 6, para. 1, item “b” of the GDPR).

 

The provision of personal data is entirely voluntary. However, if you do not provide such personal data, we will not be able to provide you with the service of reserving a visit for a group class, as well as to fulfil the concluded Agreement for the provision of sports services, the fulfilment of which requires the existence of a profile in the customer area (e.g. to identify the customer with a personal QR code that is obtained in the profile and to access the gyms with this QR code).

 

Storage period

 

Your personal data provided when registering an account on one of our websites will be stored by us for the duration of your registration.

 

Conversely, data collected specifically for the purpose of reserving a visit for a group class shall be deleted following the conclusion of the respective group class session.

 

Data retention periods in relation to Sports Service Agreements are retained for the periods described in the section relating to the conclusion and performance of a Sports Service Agreement.

 

  • Processing of personal data of representatives or contact persons of legal entities – our business partners

 

If you are a representative or contact person of our supplier of goods or services or another of our business partners – a legal entity, we may process a limited range of your personal identification and contact data for the following purposes:

 

  • entering into an agreement with you as a representative of the legal entity;
  • contacting you in connection with the performance of the agreement;
  • defending legal claims and collecting debts on our side;
  • the inclusion of the legal entity you represent in our electronic database of partners in order to facilitate and speed up the issuance of invoices.

 

We process your personal data on the basis of the conclusion and performance of the agreement between the company represented by you and the respective company operating under the “Flais” trademark, as well as for the purposes of our legitimate interest to contact our counterparties in connection with the performance of the agreements concluded by us and to assert legal claims or defend against such claims in connection with purchases made, delivery of services, payments, etc.

 

Your data processed for the purposes of issuing invoices and fulfilling our other legal obligations under tax, accounting, consumer and other laws may be stored for the maximum ten-year period established by the Accounting Act, the Value Added Tax Act and the Tax and Social Security Procedural Code.

 

Your contact details as a representative or contact person of the legal entity you represent may be stored in our customer database until the termination of the contractual and commercial relationship with the respective business partner.

 

  • Personal data processed for the purpose of concluding and executing agreements with external fitness instructors

 

Personal data processed on the basis of an agreement or compliance with a legal obligation

 

In case you are a fitness instructor who has entered into an agreement with Flais for the provision of a group class service, we process your following data:

 

  • identification data;
  • contact details;
  • details of your professional skills and experience;
  • details of your group class schedule;
  • details of your bank accounts.

 

We process the personal data listed on the basis of the conclusion and performance of the agreement between you and Flais, and for the purposes of our legitimate interest to assert or defend against legal claims. Your data is also processed on the basis of compliance with our legal obligations to withhold mandatory health and social security contributions and taxes and to issue documents in accordance with applicable accounting and tax legislation.

 

Your data processed for the purpose of complying with our legal obligations under tax and accounting laws may be stored for the maximum ten-year period established by the Accounting Act, the Value Added Tax Act and the Tax and Social Security Procedural Code.

 

Your data processed for the purpose of the performance of the agreement with Flais may be stored in our database until the termination of the agreement.

 

Personal data processed on the basis of consent

 

Flais may ask for your consent to publish your photograph and a brief description of your professional activities on Flais’ websites.

 

The purpose for this type of processing is to advertise your activity as a fitness instructor, as well as to advertise the sports activities in our fitness clubs. The processing of this personal data is based on your consent. In the absence of such consent or its withdrawal, we do not process the aforementioned data.

 

Your photograph and description of professional activity are published on the Flais websites for as long as you are in a contractual relationship with Flais or until you withdraw consent.

 

  • Data processed for the purposes of sending answers to questions, posting comments and other statements to Us

 

You can send Us questions and inquiries by filling out the contact form in the contact section of our websites, as well as through our profiles and fan pages on social networks. In order to identify you and send you our reply or publish your comment, we process your identification data (names) and contact data (telephone and e-mail).

 

We process your personal data provided to Us when sending questions and other statements to Us, by completing and submitting the contact form on our websites or through our fan pages and social media accounts (Facebook, Instagram, YouTube), on the basis of our legitimate interest – Article 6, para. 1, item “f” GDPR. The processing of your personal data by Us is separate and distinct from the processing of your data by the controllers of the relevant social networks for the purposes and on the grounds set out by them.

 

Your completion of the contact form, your submission to Us and your posting of questions, queries and comments is entirely voluntary, but if you do not wish to provide Us with your personal data, you will not be able to address your query to Us.

 

  • Data collected by cookies

 

For more information on the use of cookies, please see our Cookie Policy, available on the following website – https://www.flaisfitness.bg/cookie-policy/.

 

TO WHOM CAN WE DISCLOSE YOUR PERSONAL DATA AND WHERE IS IT STORED?

 

We work with partners and suppliers who may process your personal data as independent data controllers or act on our behalf as data processors. We only disclose to these recipients those of your personal data that are minimally necessary for the performance of the relevant service. In addition, when we disclose your data to processors on our behalf, we take all necessary measures to ensure that your data will be processed in compliance with all legal requirements and that the processor has taken the necessary technical and organisational measures to protect the data.

 

The parties to whom we may disclose your personal data include payment service providers who will process your payment for the Sports Service Agreements and other products entered into, IT and hosting service providers who maintain our websites, debt collection companies, courier service providers and the like.

 

We may also disclose some of your data to our accounting service providers for the purposes of reflecting invoices and other accounting documents in our accounting records.

 

If requested by public authorities under applicable law (e.g. the NRA, the Consumer Protection Commission, courts, etc.), we may be under a legal obligation to disclose your personal data to those public authorities.

                           

The data we collect and process is stored within the European Economic Area.

 

WHAT ARE YOUR RIGHTS IN RELATION TO THE PROTECTION OF YOUR PERSONAL DATA?

 

  • Right of access

 

You have the right to request confirmation from Flais as to whether we are processing your personal data and, if so, to obtain access to that data and information about the purposes of processing, time limits and recipients of personal data. We will provide you with access to your data free of charge and, if you request it, we will provide you with a copy of the data.

 

  • Right to rectification

 

You have the right to request correction of inaccuracies in your personal data or completion of incomplete personal data.

 

  • Right to erasure (right “to be forgotten”)

 

You have the right to request that we delete personal data relating to you which is no longer necessary for the purposes for which it was collected or in respect of which you have withdrawn your consent to processing or have exercised your right to object to processing. We may refuse to erase your personal data in certain lawful circumstances.

 

  • Right to restriction of processing

 

In certain cases, you can ask Us to restrict the processing of your personal data, in which case it will only be stored and not otherwise processed.

 

  • Right to data portability

 

You have the right to receive the data we process about you in a structured, commonly used and machine-readable format and to transfer it to another controller.

 

  • Right to object to processing

 

You have the right to object to the processing of your personal data for direct marketing purposes, as well as to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR.

 

  • Right to withdraw consent

 

In the event that we process your personal data on the basis of consent, you have the right to withdraw your consent to the processing of your personal data at any time, without prejudice to the lawfulness of the processing on the basis of consent, before it is withdrawn.

 

  • Right of appeal

 

You have the right to file a complaint with the Commission for Personal Data Protection if you believe that there has been a violation of applicable data protection law. Complaints to the CPDP may be submitted in person or by letter to Sofia 1592, 2 “Prof. Tzvetan Lazarov” Blvd.; by fax – 029153525; electronically to the email address of the CPDP – kzld@cpdp.bg. More information on the procedure can be found at: https://www.cpdp.bg/.

 

CONTACT US

 

You may contact Us regarding any questions about the processing of your personal data, including in connection with the exercise of your rights described in this Policy, in one of the following ways:

 

By post – to Sofia 1700, 35 Simeonovsko shose Blvd., 3rd floor 

 

By email – to the following email addresses, depending on the company operating under the “Flais” trademark with which you have a legal relationship:

  • flaiscorp@flaisfitness.bg – “Fitness Flais Corporation” Ltd., UIC 204418337, in connection with Premium Fitness Flais Millennium, Fitness Flais Mladost 4, Fitness Flais Studentski grad, Fitness Flais Novi Iskar;
  • powerronick@flaisfitness.bg – “Power Ronic” Ltd., UIC 204417833, in connection with Premium Fitness Flais Amaya, Premium Fitness Flais Mladost 1, Fitness Flais Strelbishte;
  • happygroup@flaisfitness.bg – “Happy Group 1” Ltd., UIC 203313098, in connection with Fitness Flais Druzhba, Premium Fitness Flais Sky City;
  • flaisgroup@flaisfitness.bg – “Fitness Flais Group” Ltd., UIC 204784530, in connection with Premium Fitness Flais Veslets;
  • flaispro@flaisfitness.bg – “Fitness Flais Pro” Ltd., UIC 207110394, in connection with Premium Fitness Flais Hadzhi Dimitar;
  • info@flaisfitness.bg – “Next Level Fitness” Ltd., UIC 204479347, in connection with Premium Fitness Flais Nadezhda, Premium Fitness Flais Krasna Polyana, Fitness Flais Knyazhevo, Fitness Flais Manastirski Livadi.

 

via the contact form on our website: https://www.flaisfitness.bg/

 

In order to exercise your rights relating to the protection of personal data, it is sufficient to send Us a request, which should contain at least:

  • Name, Personal Identification Number;
  • Description of the request;
  • Preferred form of receiving information;
  • Signature, date of submission of the request and address for correspondence.

 

This Personal Data Processing and Protection Policy was adopted on 26.05.2018 and last updated on 17.12.2024.