Privacy policy

Controller: DM Fight. Address: Avda. José Roca Coll 25, Bajo Izq., Valencia, Valencia (Valencia), Spain. Email: info@dm-fight.es. Telephone: +34 613 268 619.

DM Fight has not appointed a Data Protection Officer, as this is not mandatory under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). For any matter relating to the processing of your data, you may contact us at the email address indicated.

We process your personal data for the following purposes:

• Handling enquiries, requests for information or trial class bookings received by email, telephone, WhatsApp or other enabled contact channels.
• Managing the contractual and pre-contractual relationship with students and family members, including the provision of sports services, attendance monitoring, and invoicing and payment where applicable.
• Complying with legal obligations in tax, accounting, health or sports matters applicable to the centre’s activity.
• Sending commercial communications about activities, timetables, events or club news, where there is a lawful basis to do so and, where required, you have given your consent.
• Managing Website security and preventing fraudulent or unlawful use.

The processing of your data is based on one or more of the following lawful bases, as applicable:

• The data subject’s consent, when you contact us voluntarily or subscribe to commercial communications.
• Performance of a contract or application of pre-contractual measures, when you request information to enrol or contract the club’s services.
• Compliance with legal obligations applicable to the Owner.
• The Owner’s legitimate interest in responding to information requests, maintaining the security of its systems and promoting its services to existing customers, provided your rights and freedoms do not override those interests.

Depending on the purpose and contact channel, we may process the following categories of data:

• Identification data: first name and surname.
• Contact data: email address, telephone number.
• Communications data: content of messages sent by email, WhatsApp or other means.
• Data relating to minors: where an enquiry or enrolment concerns a minor, we may process data of the legal guardian and of the minor strictly necessary for the requested management.
• Technical browsing data: IP address, browser type, pages visited, when you access the Website (see cookie policy).

We do not process special categories of data (health, ethnic origin, etc.) through the Website. At the gym premises, processing of data relating to health or physical fitness, if applicable, would be governed by specific information provided at enrolment.

Your data will not be disclosed to third parties except where required by law or necessary to provide the service requested.

We may use processors who provide ancillary services (for example, Website hosting, email services or messaging platforms), with whom we have entered or will enter data processing agreements in accordance with Article 28 of the GDPR.

Competent public authorities may access your data where there is a legal obligation to do so.

In general, your data is processed within the European Economic Area. However, some online service providers (for example, video platforms or social networks linked from the Website) may involve international data transfers. In such cases, the provider must ensure an adequate level of protection under the GDPR (standard contractual clauses, adequacy decisions or other valid mechanisms).

We will retain your personal data for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by applicable law or until possible liabilities become time-barred.

• Enquiries not converted into a contract: up to 12 months from the last communication, unless you request erasure earlier.
• Student and contract data: for the duration of the contractual relationship and, thereafter, for the statutory retention periods (typically between 4 and 6 years for contractual and tax matters).
• Data processed on the basis of consent: until you withdraw your consent or request erasure.
• Browsing data: as indicated in the cookie policy.

You have the right to obtain confirmation as to whether we are processing personal data concerning you and, where that is the case, to exercise the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure where, among other grounds, the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing in the cases provided for by law.
• Right to object to processing based on legitimate interests or to processing for direct marketing purposes.
• Right to data portability where processing is based on consent or a contract and is carried out by automated means.

To exercise these rights, send a request to info@dm-fight.es stating which right you wish to exercise, together with a copy of a document proving your identity. We will respond within one month at the latest, extendable by a further two months in complex cases, in accordance with the GDPR.

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you consider that the processing of your personal data infringes the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es, without prejudice to any other administrative or judicial remedy.

The Website is not directed at children under fourteen. If you are a minor, you must not provide us with personal data without the consent of your parent or legal guardian. DM Fight offers activities for minors at its premises; enrolment and management of minors’ data is always carried out through the legal guardian in accordance with specific information provided at the centre.

DM Fight has adopted the technical and organisational measures necessary to ensure a level of security appropriate to the risk of processing, in order to prevent alteration, loss, processing or unauthorised access to personal data.

We reserve the right to amend this privacy policy to reflect legislative or case-law developments, as well as sector practice. Any change will be published on this page with the date of the last update.