Our commitment to data protection and your privacy rights under GDPR.
Effective Date: May 25, 2018
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens the protection of personal data for individuals within the European Union (EU) and provides them with greater control over their data. Gympify is committed to GDPR compliance (alongside our Privacy Policy) and supporting our customers in their compliance journey.
When you use Gympify to manage your gym members' data, you are the Data Controller, and Gympify acts as the Data Processor. We process personal data on your behalf and in accordance with your instructions (see our Terms of Service). We have updated our Data Processing Agreement (DPA) to reflect GDPR requirements.
As Gympify (Coderstm) is based in India, personal data may be processed outside the European Economic Area (EEA). To ensure lawful transfer of personal data to a third country, we rely on the European Commission's Standard Contractual Clauses (SCCs), which form part of our Data Processing Agreement. These clauses act as a safeguard to ensure your data protection rights are respected.
We have implemented features to help you fulfil requests from your members (Data Subjects) regarding their rights under GDPR, including:
We employ robust technical and organisational measures to ensure the security of personal data (detailed in our Security Policy), including:
We use trusted third-party service providers (sub-processors) to deliver our services (e.g., cloud hosting, payment processing). We maintain a list of these sub-processors and ensure they meet GDPR standards.
If you have any questions about our GDPR compliance or need assistance with a data subject request, please contact our Data Protection Officer at: [email protected].
CoderstmJoin thousands of gym owners growing their business with Gympify.