Privacy Policy

1. USER INFORMATION

Fitinjects is responsible for processing users' personal data and informs that these data will be processed in accordance with the applicable personal data protection regulations, namely Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5 on the protection of personal data and guarantee of digital rights (LOPDGDD). Therefore, the following information is provided regarding data processing:

Purposes of processing:

Processing information requests or other inquiries submitted by users via the contact forms on the website.
Managing user registrations to enable the use of this information for purchasing offered products.
Subscribing to newsletters to receive updates and special product offers on our website.
Moderating, recording, and analyzing customer feedback and opinions.
Information and registration for coaching seminars and training courses.

Legal basis: The legitimacy of processing users' personal data is based on several factors:

The legal basis for processing personal data is the fulfillment of contractual and/or commercial obligations and the explicit consent of the user for additional processing, for example via contact forms on the website. Any other data processing requires the explicit consent of the data subject.

Providing the personal data required for registration on this website is necessary to manage the relationship with the user, and this relationship cannot be maintained without such data. However, the main purpose does not require consent for data that is not essential for this activity.

Data retention criteria: Data will be retained as long as there is a mutual interest in maintaining the purpose of the processing. Once no longer necessary, they will be deleted using appropriate security measures, such as pseudonymization or complete destruction.

Data transfer: In some cases, to provide the requested services, it is necessary to access information provided by third parties, such as logistics and transportation services, and companies that provide us with other services such as IT (storage and data processing, etc.).

These third parties only have access to personal data necessary to perform their services. They are obligated to treat user data confidentially and are not authorized to use it for any purpose other than as requested.

Data will not be transferred to third parties unless required by law.

User rights

The right to withdraw consent at any time, as well as the right to object and the right to data portability. The data subject has the right to receive all their personal data provided, provided the processing is based on consent or is necessary for the execution of a contract and is carried out by automated means.
The right of access: The data subject has the right, upon request, to obtain information about the processed personal data, their origin, and processing methods. If the request is made electronically and the data subject does not request otherwise, the information will be provided in a commonly used electronic format. The right to receive a copy must not infringe the rights and freedoms of others.
The right to rectification and erasure of data: The data controller will comply with the data subject's request for rectification or erasure within ten days. Unlawfully processed personal data will be corrected or deleted as necessary. The data subject has the right to correct inaccurate or incomplete personal data without undue delay and to complete incomplete data.
The right to restrict processing: The data subject has the right to restrict the processing of their data. In the event of restriction, such data may only be processed for storage with the consent of the data subject, for the establishment, exercise, or defense of legal claims, for the protection of the rights of others, or for reasons of public interest. The data subject must be informed before the restriction is lifted.
The right to object: The data subject has the right at any time to object to the processing of their personal data for reasons related to their particular situation, if the processing is based on public interest or legitimate interest, including profiling. If an objection is raised, Fitinjects will no longer process the personal data unless there are compelling legitimate grounds that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

Contact information for exercising rights:

Mailing address: 5 Woodfield Mall, Schaumburg, IL 60173(Woodfield Mall).
Email: [email protected]

Messages and communications

Our policy regarding sending information via electronic means (email, online messaging, etc.) is limited to sending only those notifications that we believe may be of interest to users in relation to the company's activities or that they have agreed to receive. If the user does not wish to receive such messages, they have the right to unsubscribe using the cancellation option, in accordance with Title III, Art. 22 of Law 34/2002 on information society services.

Forms

Contact:

Purpose of processing: Responding to various inquiries related to our services.
Legal basis: Based on consent given through the appropriate checkbox.
Data retention criteria: Data will be stored as long as there is a mutual interest in achieving the purposes of the processing. Once no longer necessary, the data will be deleted using appropriate security measures to ensure anonymity.
Recipients: Data will not be transferred to third parties.

Registration:

Purpose of processing: Collecting data for purchasing, managing business relationships, handling inquiries and/or orders and related costs, and for advertising and commercial purposes.
Data retention criteria: Data will be stored as long as the relationship with the user is maintained, both in terms of goods and services sold and until legal obligations are fulfilled.
Legal basis: Based on consent obtained via the appropriate checkbox. In the case of a purchase, the legal basis is the contract.
Recipient: Basic user data will be shared with the delivery company to fulfill the order. The company has agreed to access this data solely for the stated purpose. Data will not be transferred to other third parties unless required by law.

Newsletter:

Purpose of processing: Subscription to the newsletter about products on our portal.
Data retention criteria: Data will be stored as long as there is a mutual interest in achieving the processing purposes. Once they are no longer needed, the data will be deleted or anonymized using appropriate security measures.
Legal basis: By giving consent in the appropriate field, the user accepts the terms of data processing for this form, as described in the privacy policy.
Data transfer: Data will not be transferred to third parties unless required by law.

Work with us:

Purpose of processing: Engaging interested individuals in the selection process for open job positions.
Data retention criteria: Data will be stored as long as there is a mutual interest in achieving the purposes of the processing. When no longer needed, they will be deleted or anonymized using appropriate security measures.
Legal basis: By giving consent in the appropriate field, the user agrees to the processing of their data for this form, as described in the privacy policy.
Data transfer: Data will not be transferred to third parties unless required by law.

User rights:

The right to withdraw consent at any time. The right to object and to data portability. The right to access, rectify, and erase data, and to restrict or object to processing.
The right to file a complaint with a supervisory authority if dissatisfied with the exercise of their rights.

The user may exercise these rights by sending an email or postal letter, enclosing a copy of their ID or passport:

Data controller: Fitinjects

Postal address: 5 Woodfield Mall, Schaumburg, IL 60173(Woodfield Mall);
Email: [email protected]

2. MANDATORY AND OPTIONAL NATURE OF THE DATA PROVIDED BY THE USER

By filling out the fields in the contact or download forms, the user expressly, freely, and unequivocally agrees that their data is necessary to fulfill their request, and that providing information in the remaining fields is optional for the provider.

The user guarantees that the data provided is true, accurate, complete, and up-to-date and is responsible for any direct or indirect damages that may arise from a breach of this obligation.

If the user provides data of a third party, they guarantee that they have informed the third party of all aspects of this privacy policy and obtained their consent to transfer the data for proper processing before doing so.

If the user does not provide all the necessary data, it is not possible to guarantee that the information and services will fully meet their needs.