1. Data controller
The data controller is Cosmétrica PSF, S.L., operator of the After Gym Club brand.
Tax identification number: B22743694.
Address: Carrer dels Morabos, 18, 08004 Barcelona, Spain.
Contact: aftergymclub@aftergymclub.com.
2. Personal data processed
Depending on the service, we may process names, email addresses, telephone numbers, preferred language, associated venue, booked service, date and time, amount, payment status and booking-related communications.
We may also process technical data necessary for website operation and security.
We do not request medical information or clinical histories through the general booking form. If a service requires specific information to assess suitability, the relevant processing and safeguards will be explained beforehand.
3. Purposes and legal bases
We manage enquiries, bookings, changes and service-related communications on the basis of contract performance or pre-contractual measures.
We process information necessary for invoicing, taxation and other statutory requirements on the basis of legal obligations.
We may process essential technical information to protect the platform and prevent misuse on the basis of legitimate interests, subject to appropriate balancing where required.
Marketing communications and non-essential analytics technologies will be managed under the applicable legal basis and consent requirements.
4. Bookings and wellness services
After Gym Club provides wellness and body recovery services that do not replace medical care.
Booking information may be used to coordinate services with the partner venue and assigned professional, sharing only the data required.
5. Payments
Electronic payments are handled by specialist providers such as Stripe when this payment option is enabled.
After Gym Club may receive transaction amounts, identifiers and payment status without directly storing full payment-card details.
6. Providers and recipients
To operate the platform, we may use infrastructure, database, payment, transactional email and analytics providers, including Supabase, Stripe, Resend and Metricool according to the functions actually enabled.
Limited information may also be shared with hotels, partner venues, therapists and professional advisers where necessary.
We do not sell personal data.
7. International transfers
Some technology providers may process information outside the European Economic Area. Any international transfer must rely on a valid mechanism under applicable law, such as an adequacy decision or appropriate safeguards.
8. Retention
We retain personal data for as long as necessary to manage services and comply with legal obligations or address potential claims.
Data subject to tax and accounting obligations is retained for legally required periods. Specific periods for other categories will be determined according to their purposes and necessity.
9. Individual rights
You may request access, rectification, erasure, objection, restriction of processing and portability where applicable. You may also withdraw consent without affecting earlier lawful processing.
To exercise your rights, contact aftergymclub@aftergymclub.com. Additional information may be requested only where necessary to verify your identity.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.
10. Cookies and analytics
The website may use technologies necessary for its operation and, when enabled, measurement tools such as Metricool.
Cookies or other non-essential technologies requiring consent will be used only after the necessary consent has been obtained. Further information is available in the Cookie Policy.
11. Security and updates
We apply technical and organisational measures appropriate to the risks of processing personal data.
This policy may be updated to reflect legal, technical or operational changes. The published version must accurately reflect After Gym Club's actual practices.