From May 25, 2018 will apply the new General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 which establishes rules on the protection, processing and free movement of personal data of natural persons, and which applies directly to all entities handling such data in any Member State of the European Union, in particular Portugal. The purpose of this communication is to introduce you to the new rules applicable to the processing of personal data, the rights that you have, as well as inform you of how you can manage, directly and simply, the respective consents. To the extent and for the purposes of the services we provide you, Matchbox CrossFit, as long as it determines the processing means and the purposes, is the entity responsible for processing your personal data and for ensuring the protection of your privacy, acting in accordance with the law and the new Regulation. Entity responsible for processing your data:
Matchbox CrossFit
Rua Dom Luís de Noronha 25A 1050-071 Lisboa Our records includes data that was obtained during your contractual relationship established with us and following the various interactions with Matchbox CrossFit. If you want to keep your data and the information that Matchbox CrossFit has stored, you do not have to do anything. In addition to the situations in which we treat data to comply with legal requirements, we treat your data for the following purposes:
• Provision of services - Whenever necessary, and to provide you with our services, we will process your personal data. In addition to this purpose, your data will also be processed to provide third party services, considering that you have expressly consented it.
• Marketing purposes - Your personal data, activity log, profile and/or consumption details will likewise be treated for the purposes of marketing or dissemination of offers on goods or services provided by Matchbox CrossFit, if you have authorized it. These communications are intended to inform you of news, promotions, campaigns and other opportunities that you may benefit from. Matchbox CrossFit will only retain your personal data during the period necessary for the provision of services, respective billing and compliance with legal obligations. Your personal data may be communicated to Matchbox CrossFit's service providers for the purpose of providing services and to judicial, tax and regulatory authorities for the purpose of complying with legal requirements. At any time, by using the RegiBox APP, you have the right to access your personal data, as well as, within the legal terms of the contract and Regulation, to change them, oppose to their treatment, decide on the automated treatment, withdraw consent and exercise any other rights established by law (except when the data is indispensable for the provision of services by Matchbox CrossFit, therefore of mandatory provision, or for compliance with legal obligations to which Matchbox CrossFit is entitled). If you withdraw your consent, this does not compromise the lawfulness of the treatment made up to that date. You have the right to be notified, under the terms of the Regulation, if there is a violation of your personal data, and you can submit complaints to the authorities. We guarantee all the rights enshrined in the Regulation. For this purpose, from 25-05-2018 you can access your client area quickly, conveniently and securely through this application and there perform any operation you wish: add/change/delete your personal data; add/delete a photo to your public profile; export and download your personal data; export and download your data regarding the workout history and attendance; make changes to your privacy preferences; make changes to the emails you want to receive; cancel and permanently delete your account. We are committed to the protection and confidentiality of your personal data. We have taken the technical and organizational measures necessary to comply with the Regulation, ensuring that the processing of your personal data is lawful, fair, transparent and limited to the authorized purposes. We adopted the measures we consider appropriate to ensure the accuracy, integrity and confidentiality of your personal data as well as all other rights you may have.