Privacy Policy

1. Introduction

This privacy policy describes how FDW Management SRL, with its registered office at Rue Bon Air 7, 1470 Genappe, registered with the Crossroads Bank for Enterprises under number 1010.461.371 (hereinafter "the Company," "we"), collects, uses, and protects the personal data of users of its website https://www.thehomegym1410.com/ and its customers (hereinafter "you").

We place great importance on protecting your privacy and process your data in accordance with Regulation (EU) 2016/679 on the protection of personal data (the "GDPR") as well as applicable Belgian legislation.

This policy supplements our General Terms and Conditions of Sale and our General Terms and Conditions of Use.

2. Data Controller

The data controller responsible for your data is:

FDW Management SRL (TheHomeGym1410)
Rue Bon Air 7, 1470 Genappe, Belgium
Company Number: 1010.461.371
Email: francois@thehomegym1410.com
Phone: +32 490 11 69 41

If you have any questions regarding this policy or wish to exercise your rights, please contact us at the address above.

3. Data we collect

Depending on how you interact with us, we may collect the following categories of data:

Identification and contact data: last name, first name, postal address, email address, phone number.

Billing data: billing information, name or company name, and VAT number if applicable.

Subscription data: chosen plan, frequency, commitment type, and history of bookings and session attendance.

Health-related data: as part of your fitness coaching, you may provide us with information regarding your health status (pain, injuries, medical history, specific medical issues). This data, considered "sensitive" under the GDPR, is processed solely for the purpose of safely adapting your coaching, based on your explicit consent, and is subject to enhanced confidentiality.

Browsing data: when you visit the site, certain technical data may be collected (IP address, browser type, pages viewed) via cookies or similar technologies — see the Cookies section.

4. Purposes and legal bases for processing

We process your data for the following purposes:

Management of the contractual relationship and provision of services (account creation, subscription management, bookings, coaching) — legal basis: performance of the contract.

Billing and accounting obligations — legal basis: compliance with a legal obligation.

Adapting your fitness coaching to your health status — legal basis: your explicit consent.

Communication with you (responding to your requests, practical information regarding your subscription) — legal basis: performance of the contract or our legitimate interest.

Marketing communication and social media posts (photographs, stories, posts) — legal basis: your consent, obtained in accordance with our Terms and Conditions of Sale.

Website improvement and security — legal basis: our legitimate interest.

5. Data recipients

Your data is processed by the Company and is only shared with individuals and service providers who need it for the purposes described, including:

• the coaches and team members providing your support;
• our technical service providers (website hosting, online booking platform, billing tool, email service) — acting as data processors and bound by confidentiality;
• public authorities, when required by law.

We never sell your data to third parties.

Service providers and tools used:

• ResaSport — session booking platform;
• Wix — current website hosting (subject to change to another host in the future);
• Odoo — management and billing;
• Google (Gmail) — receiving and processing inquiries and registrations;
• TrueCoach — workout programming and tracking platform;
• WhatsApp (Meta) — communication with members;
• Hygie & co — internal (proprietary) coaching tracking solution.

Each of these providers acts as a data processor and is bound by confidentiality. We ensure that a GDPR-compliant Data Processing Agreement (DPA) governs our relationship with each third-party provider.

6. Data transfer outside the European Union

Some of our service providers, notably Google (Gmail), TrueCoach, and WhatsApp (Meta), may process data outside the European Union, particularly in the United States. Where applicable, we ensure that appropriate safeguards are in place in accordance with the GDPR (European Commission standard contractual clauses, adherence to the EU–U.S. Data Privacy Framework, or an equivalent mechanism).

7. Retention period

We only keep your data for as long as necessary for the purposes for which it was collected:

• Contractual and account data: for the entire duration of the contractual relationship, then archived for the time necessary to manage any potential disputes.
• Billing and accounting data: retained in accordance with Belgian legal obligations (generally 7 years).
• Health data: for the duration of your coaching, after which it is deleted or anonymized.
• Prospecting / marketing data: until you withdraw your consent.
• Cookies: for the durations specified in the Cookies section.

8. Your rights

In accordance with the GDPR, you have the following rights regarding your data:

• Right of access: obtain confirmation that your data is being processed and receive a copy of it.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten"): to request the deletion of your data, within legal limits.
• Right to restriction of processing.
• Right to object to processing based on our legitimate interest or for marketing purposes.
• Right to data portability: to receive your data in a structured and readable format.
• Right to withdraw your consent at any time, when processing is based on it, without affecting the lawfulness of processing carried out before such withdrawal.

To exercise these rights, contact us at the address indicated in section 2. We may ask you to verify your identity. We will respond within one month.

9. Right to file a complaint

If you believe that the processing of your data does not comply with regulations, you have the right to file a complaint with the Data Protection Authority (APD):

Data Protection Authority
Rue de la Presse 35, 1000 Brussels
contact@apd-gba.be — www.autoriteprotectiondonnees.be

10. Security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, or alteration. Health data is subject to enhanced protection and access is restricted to only those involved in your care.

11. Cookies

The site may use cookies to ensure its proper functioning, measure its audience, and improve your experience. These include:

• strictly necessary cookies, essential for the site to function, which do not require your consent;
• non-essential cookies (audience measurement, social media, etc.), placed only with your consent, collected via a consent banner during your visit.
• cookies de mesure d'audience (Google Analytics 4), qui nous aident à comprendre la fréquentation du site — déposés uniquement avec votre consentement ;
• cookies marketing et publicitaires (pixel Meta — Facebook/Instagram), utilisés pour mesurer nos campagnes publicitaires et le reciblage — déposés uniquement avec votre consentement.

A detailed list of the cookies used will be provided on this page once the site is finalized. A consent banner will be implemented if non-essential cookies are used.

You can configure your browser at any time to refuse cookies or to be notified when they are being placed.

12. Changes to this policy

We reserve the right to modify this privacy policy at any time. The version applicable is the one published on the site at the time of your visit. We will notify you of any significant changes through appropriate means.