VacationGym Privacy Policy

VacationGym operates the VacationGym platform, which helps people discover gyms and fitness facilities while travelling. Where applicable data protection law refers to a "data controller", VacationGym acts as the controller of personal information processed through this platform.

Operator details:

• Legal entity: [LEGAL ENTITY NAME]
• Registered address: [REGISTERED ADDRESS]
• Country: The Netherlands
• Chamber of Commerce (KvK) number: [CHAMBER OF COMMERCE NUMBER]
• VAT number: [VAT NUMBER]
• Privacy contact: [PRIVACY EMAIL]

Account information

When you create or use a VacationGym account, we may process:

• Name
• Email address
• Profile image
• Authentication provider (for example Google)
• Account identifier
• Preferred language
• Country, where you have voluntarily provided it

Google Sign-In

You may sign in to VacationGym using Google. When you do, we receive the basic profile information you have authorised Google to share, which typically includes your name, email address and profile image. VacationGym currently only needs this basic authentication profile data. We do not request access to Gmail, Google Drive, contacts or other Google services.

Location information

To help you find nearby gyms, you may:

• Enter a location manually
• Search for a hotel, city or destination
• Voluntarily choose to use your browser or device location

Precise device location is only accessed after you explicitly choose "Use my current location" and grant permission through your browser or device. Location data is used to perform the search and, where necessary, to remember search context. We do not use location for continuous background tracking.

Search and usage information

• Search queries and selected destinations
• Search radius and filters
• Gym pages you visit
• Gyms you save or mark as visited
• Training preferences
• General interactions with the platform

User-generated content

You may voluntarily submit:

• Reviews and ratings
• Photos
• Equipment reports and facility information
• Day pass information
• Suggested corrections or reports of incorrect listings

Technical information

• IP address
• Browser type and version
• Device and operating system information
• Log data and session data
• Security events

We use personal information to:

• Create and manage user accounts
• Authenticate users and keep sessions secure
• Provide gym search functionality
• Show gyms near a selected destination
• Personalise gym matches based on your preferences
• Let you save favourites and visited gyms
• Prevent abuse, fraud and manipulation of reviews or listings
• Improve the service, its content and its accuracy
• Moderate community contributions
• Support gym owner claim requests
• Provide customer support
• Maintain the security and integrity of the platform
• Comply with legal obligations

If you are located in the European Economic Area or the United Kingdom, our processing of personal information relies on one or more of the following legal bases:

• Performance of a contract — for example, providing the account and platform functionality you have requested.
• Legitimate interests — such as maintaining security, preventing abuse and improving the service, where those interests are not overridden by your rights and freedoms.
• Consent — for example, optional access to precise device location, optional marketing communications, and non-essential cookies where consent is legally required. You may withdraw consent at any time.
• Compliance with a legal obligation — such as tax and accounting requirements, or responding to lawful requests from public authorities.

VacationGym uses Google services, which may include:

• Google Sign-In for authentication
• Google Maps Platform for maps and geolocation features
• Google Places for gym information and reviews

Some gym information shown on VacationGym may be sourced from Google and is displayed under Google's applicable terms and attribution requirements. Google-sourced gym information is external data. Google Reviews remain Google content shown for reference; VacationGym Reviews are separate, user-generated content authored by VacationGym users. Google ratings and VacationGym ratings are shown separately and are not merged into a single combined rating.

For more information about how Google processes personal information, see the Google Privacy Policy and the Google Maps Platform Terms.

VacationGym uses cookies and similar technologies to operate the service. We group them into the following categories:

• Strictly necessary — required for authentication, session management and security. These cannot be disabled without affecting core functionality.
• Preference — remember settings such as language or interface preferences.
• Analytics — only used where a compatible analytics tool has been configured, and only with any legally required consent.
• Marketing or tracking — not currently used. If we introduce them in the future, we will update this policy and, where required, ask for consent.

Non-essential cookies will only be used where legally required consent has been obtained. Where a cookie consent tool is introduced, you will be able to manage your preferences through it.

We may share personal information with categories of service providers who help us operate the platform, such as:

• Authentication providers
• Cloud hosting and database providers
• Mapping and location service providers
• Security and fraud prevention providers
• Analytics providers, if and when implemented
• Payment providers, if and when payment features are introduced

These providers act on our instructions and are contractually required to protect personal information. VacationGym does not sell personal information.

We may also disclose personal information where required by law, to protect our rights and users, or in the context of a corporate transaction such as a merger or acquisition.

Because VacationGym is an international platform and relies on third-party providers, personal information may be processed in countries outside your country of residence, including outside the European Economic Area. Where legally required, we put in place appropriate safeguards for such transfers, for example by relying on adequacy decisions or standard contractual clauses offered by the relevant provider.

We keep personal information only for as long as we need it for the purposes described in this policy, including:

• Providing the service
• Managing your account
• Maintaining security and preventing abuse
• Complying with legal obligations
• Handling disputes and enforcing our terms

You may delete your account, after which we will delete or anonymise associated personal information where legally possible. Public contributions such as reviews may be anonymised rather than deleted where appropriate to preserve the integrity of the platform. Certain records may need to be retained for longer periods where legally required.

If you are located in the European Economic Area or the United Kingdom, you have the following rights in relation to your personal information, subject to applicable law:

• Right of access
• Right to correction
• Right to deletion
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent, without affecting prior lawful processing
• Right to lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at [PRIVACY EMAIL]. We may need to verify your identity before responding to certain requests.

You may request deletion of your VacationGym account. Account deletion functionality may be provided through your account settings or by contacting [PRIVACY EMAIL].

Upon a valid deletion request, we will delete your profile data where legally possible. Public contributions, such as reviews, may be anonymised rather than removed. We may retain certain information where necessary for security, fraud prevention, dispute resolution or compliance with legal obligations.

VacationGym is not intended for children below the minimum age legally permitted to independently use the service and provide consent for the processing of their personal information. That minimum age varies by jurisdiction. If you are below the applicable age, please do not use VacationGym without the involvement of a parent or legal guardian. If we become aware that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

We take reasonable technical and organisational measures to protect personal information, including:

• Authentication and session management
• Access controls and role-based permissions
• Row-level security policies at the database layer
• Restricted, environment-scoped API credentials
• Logging and monitoring for security events

No system is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you share information with us at your own risk.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Where changes are material, we will use reasonable means to notify you, for example through a notice in the platform or by email.

For questions about this Privacy Policy, please contact:

• [LEGAL ENTITY NAME]
• [REGISTERED ADDRESS]
• [PRIVACY EMAIL]