Privacy Policy

Introduction

thrashgbtg S.A. ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website thrashgbtg.live or use our gym marketing campaign tracking services.

Data Controller Information

The data controller responsible for your personal data is:

• Company: thrashgbtg S.A.
• Address: Rua dos Fanqueiros 54, 4747-492 Braga, Portugal
• Registration Number: 362514798
• VAT Number: PT367458924
• Contact Email: privacy@thrashgbtg.live

Data Collection

We collect and process various types of personal data when you interact with our services. The data we collect includes information you provide directly to us and information automatically collected through your use of our website and services.

Information You Provide

When you contact us, request information, or use our services, we may collect:

• Contact details (name, email address, phone number)
• Company information (gym name, business details)
• Communication preferences
• Messages and enquiries you send to us
• Marketing campaign data for tracking purposes

Automatically Collected Information

We automatically collect certain technical information when you visit our website:

• IP address and location data
• Browser type and version
• Device information
• Website usage patterns and analytics data
• Referral sources and marketing attribution data

How We Use Your Information

We process your personal data for various legitimate business purposes. How we use your data depends on the services you use and your relationship with thrashgbtg.

Service Provision

We use of your data to provide our gym marketing campaign tracking services, including:

• Setting up and maintaining tracking systems
• Providing analytics and reporting services
• Offering technical support and customer service
• Processing enquiries and communications

Business Operations

We may use your information for:

• Account management and billing
• Service improvements and development
• Legal compliance and regulatory requirements
• Fraud prevention and security monitoring

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Legitimate Interest: For business operations, service improvement, and direct marketing
• Contract Performance: To provide our tracking services and fulfil contractual obligations
• Consent: For marketing communications and optional tracking technologies
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• With service providers who assist in delivering our services
• When required by law or legal process
• To protect our rights, property, or safety
• In connection with business transfers or corporate restructuring

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Other legally recognised transfer mechanisms

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us using the details provided in the contact information section below.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and processed. Our data retention periods are based on:

• The duration of our business relationship
• Legal and regulatory requirements
• Legitimate business needs
• Statutory limitation periods

Typically, we retain client data for the duration of the service relationship plus seven years for legal and tax compliance purposes. Marketing data and website analytics are retained for shorter periods based on business needs and legal requirements.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection and security

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have questions about this privacy policy, wish to exercise your data protection rights, or need to contact us about privacy matters, please reach out to us:

• Email: privacy@thrashgbtg.live
• Phone: +351 255 209 057
• Address: thrashgbtg S.A., Rua dos Fanqueiros 54, 4747-492 Braga, Portugal

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws. In Portugal, the relevant supervisory authority is:

• Comissão Nacional de Proteção de Dados (CNPD)
• Website: www.cnpd.pt