You can accept all cookies by clicking the "ACTIVATE ALL" button.
If you do not wish to accept all cookies, you can indicate below your preferences about which cookies you accept or not by checking the options you choose.
Privacy Overview
We make this Privacy Policy available to you in order to inform you in detail about how we treat your personal data and protect your privacy and the information you provide to us.
If, in the future, we make changes to this Privacy Policy, we will notify you through this website or by other means, so that you can be aware of the new privacy conditions that are adopted.
We inform you below, in the form of questions and answers, of the conditions under which our entity processes your personal data:
– COMPANY: THE HUB STUDIO
– ADDRESS: C/ Nuredduna, 9, Llevant, 07006 Palma, Illes Balears
– PHONE: 871 62 04 35
– EMAIL: [email protected]
The DPD is a figure, legally provided, whose main functions are to inform and advise our entity on the obligations that affect it in terms of personal data protection and supervise compliance.
Furthermore, the DPD acts as a point of contact for any issue relating to the processing of personal data, so if you have any queries, doubts or suggestions regarding how we use your personal data, you can contact them:
– Identity of the Data Protection Officer: Picon y Asociados Derecho y Nuevas Tecnologías, S.L.
– DPD Contact email: [email protected]
We process the personal data you provide us with for the following purposes:
a) The management of the relationship with the customer-subscriber and the billing and collection of services. The provision of data for this purpose by our clients is obligatory, otherwise the fulfillment of the contract is prevented.
In this regard, we also inform you that, in the appropriate context of the conclusion or execution of a contract between you and the data controller, processing of your data may be carried out that will give rise to subscriber training profiles. The consequences and importance of said treatment for the interested party will be the profiling and development of personalized training plans, always under review and approval of the assigned monitor and derived from their individualized characteristics and purposes expressed by the subscriber. In no way will legal effects be derived from said profiles on you or that they will significantly affect you in a similar way, limiting themselves exclusively to the scope of personalized training mentioned.
The biometric data referring to the subscriber’s fingerprint will be processed to control access to the facilities (one-to-one biometric verification/authentication).
Finally, in the event that you wish to prove this and if applicable, your disability data will be processed for the sole purpose of obtaining the corresponding discount in the payment of your subscriber fee.
b) The management of relationships with our suppliers, as well as the billing and payment of services. For this purpose, it is mandatory that the supplier provides us with their data, since, otherwise, the contract could not be executed.
c) Channel requests for information, suggestions and complaints that you may send us, contact the sender of the information, respond to your request or query and follow up later. Providing data for this purpose is voluntary, although, if you do not do so, the request, query or claim cannot be responded to. Therefore, the communication of your personal data for these purposes is a necessary requirement so that we can respond to these requests.
d) Sending commercial communications about our products or services. If you are our client, we will send you these communications, unless you express your will to the contrary by checking the corresponding box at the time of providing your data or, subsequently, by communicating it to us through any means.
On the contrary, if you do not contract our products or services, we will not send you commercial information, unless you expressly authorize us to do so. The authorization is voluntary and your refusal would only have the consequence that you would not receive commercial offers for our products or services.
In relation to the sending of the aforementioned communications, based on the information provided, we can develop commercial profiles to offer you the products and services that best suit your interests.
e) If you send us your CV, we will process it to have information on those people who wish to do internships and/or work with us in order to be able to carry out the corresponding personnel selection processes.
f) If you become a friend or follower of ours on social networks, we will process your data to keep you informed of our activities and promotions through these channels. Providing data for this purpose is voluntary, although, if you do not do so, you will not be able to be our friend or follower on the corresponding social network. The categories of data processed for this purpose are identifying data.
g) Guarantee the safety of people and facilities.
h) Finally, in case you have checked the corresponding express acceptance box in the first layer of information, to the taking of photographs or videos of training sessions or routines carried out in sports facilities, for the purpose of public communication actions, both of your person and the person in your charge, if applicable, as well as the fixation, reproduction and distribution of your image and personal voice or of the person in your charge, through the company’s website, its social networks and other media that may be of interest, such as magazines, newsletters, exhibition venues, etc. In any case, the transfer of image rights is carried out without any consideration.
In any case, the subscriber expressly gives up the right to fix, reproduce, distribute, publicly communicate and obtain copies of the mechanisms in which the image and voice have been recorded, of his or her person and of the person in his or her charge, if applicable. , without any limitation of number, time and geographical scope, without therefore having the right to receive any remuneration. This transfer has as the only exception and limitation those uses or applications that could violate the right to honor in the terms provided for in Organic Law 1/82, of May 5, on Civil Protection of the Right to Honor, Personal and Family Intimacy and the Image itself.
We only keep your data for the period of time necessary to fulfill the purpose for which it was collected, comply with the legal obligations imposed on us and address any possible responsibilities that may arise from compliance with the purpose for which the data was collected. collected.
The data for the management of the relationship with clients and suppliers and the billing and collection of services will be kept for this purpose throughout the time that the contract is in force. Once said relationship has ended, where applicable, the data may be kept for the time required by applicable legislation and until any responsibilities arising from the contract expire.
The data for sending commercial communications about our products or services will be kept indefinitely, until, where appropriate, you express your desire to delete them or your desire to stop receiving such communications.
The data of potential clients who do not contract our products or services and who do not wish to receive commercial information will be deleted when it is confirmed that the contract will not take place. In the event that the previous relationship between the parties, not yet consummated, could give rise to possible liabilities, the data will be kept until they expire.
The data processed to respond to requests, petitions, queries or claims will be kept for the time necessary to respond to them and consider them definitively closed. Subsequently, they will be kept as a communication history for a period of one year, unless you request their deletion sooner.
The data that you provide us or that we obtain to take part in a specific open personnel selection process will be kept until said process is concluded and canceled thereafter, unless the candidate is selected, in which case they will be incorporated into your employee file. If candidates who are not selected wish us to keep their CVs for future selection processes, they must expressly request it via email. In the latter case, as well as when you spontaneously provide us with your CV, simply so that we take it into account in future selection processes, the data will be kept for a maximum of one year from the last update. You must keep the personal data you provide us updated; especially, those related to training and professional experience.
Sometimes, during the selection processes, job portals can be used to search for candidates who fit the professional profiles that are of interest to us, subject to the Privacy Policies of said platforms. The categories of personal data processed in these cases are the following: identification data, personal characteristics data, employment details data, academic and professional data and any other information that the candidate has published on the job portal or included in their CV .
The data provided through social networks will be kept as long as you remain a friend or follower of ours on the corresponding platform.
The image and voice data processed for the purposes of public communication actions will be kept indefinitely, unless you withdraw your consent.
The legal basis for the processing of your data is the execution of the subscriber contract according to the terms and conditions that appear in the copy of this that has been sent to you by email. In the specific case of, if applicable, the processing of your data related to disability for the purposes related to the discount in the payment of your fee, the legal basis used will be your explicit consent, which is revocable at any time, without This may have more consequences than ceasing to enjoy the discount indicated in your subscriber fee and without affecting the data processing carried out previously.
The prospective offer of products and services to our clients is based on the satisfaction of the legitimate business interest consisting of being able to offer them the contracting of other products or services and thus achieve their loyalty. Said legitimate interest is recognized by the applicable legal regulations (General Data Protection Regulation), which expressly allows the processing of personal data on that legal basis for direct marketing purposes. However, we remind you that you have the right to oppose this processing of your data, and you may do so by any of the means provided for in this clause.
The prospective offer of products and services to those who, having shown interest in them, are not or have not become our clients, is based on the consent of the interested party. Said consent is revocable at any time, without any consequences other than ceasing to receive advertising and without affecting the data processing carried out previously.
The processing of personal data to respond to your requests for information, requests, queries and complaints is based on the consent of the interested party. Said consent can be withdrawn at any time, although this will not affect the legality of the treatments carried out previously.
The legitimizing basis for the processing of CVs that you send us or that we obtain from employment platforms for a specific open personnel selection process is the existence of a pre-contractual relationship. Additionally, more data may be collected during interviews or selection processes, whose treatment has the same basis.
The legal basis for the processing of the data contained in your CV, when you have asked us to keep it after a selection process or when you have sent it to us spontaneously, is your consent, which may be revoked at any time. However, data processing carried out previously will not lose its legality due to the fact that consent has been revoked.
The data provided through social networks will be processed on the legal basis of your consent, and you may revoke it at any time, although this will not affect the legality of the treatments carried out previously.
Finally, the basis for the processing of image and voice, in order to carry out public communication actions for training sessions or routines, is the consent of the interested party. The subscriber is not obliged to provide their personal data so that they can be processed for the indicated purpose, although this would make it impossible to process their image and voice, or those of the person in their charge, if applicable, in accordance with the indicated. The interested party may withdraw his or her consent at any time, however, this will not affect the legality of the data previously processed.
The data will be communicated to the following entities:
a) The competent Public Administrations, including judges and courts, in the cases provided for in the Law and for the purposes defined therein.
b) The financial entities through which the management of collections and payments is articulated.
c) The remaining companies of our Group, whose identity can be consulted at www.thehubstudio.es. The purpose of this transfer is the centralized management of our activities and the fulfillment of internal administrative purposes, including the processing of personal data of clients or employees.
Although this is not a transfer of data, it may be that third parties, which act as our suppliers, access your information to carry out the service. These managers access your data following our instructions and without being able to use it for a different purpose and maintaining the strictest confidentiality and based on a contract in which they undertake to comply with the requirements of current regulations regarding the protection of personal data. .
Anyone has the right to obtain confirmation as to whether we are processing personal data that concerns them or not. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was provided. collected.
Under the conditions provided for in the General Data Protection Regulation, interested parties may request the limitation of the processing of their data or its portability, in which case we will only keep it for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the legality of the processing based on consent prior to its withdrawal. In these cases we will stop processing the data or, where appropriate, we will stop doing so for that specific purpose, except for compelling legitimate reasons, or the exercise or defense of possible claims.
In addition, data protection regulations allow you to object to being subject to decisions based solely on the automated processing of your data, where applicable.
The aforementioned rights are characterized by the following:
– Its exercise is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case a fee may be charged proportional to the administrative costs borne or refusal to act.
– You can exercise your rights directly or through your legal or voluntary representative.
– Your request must be responded to within one month, although, taking into account the complexity and number of requests, the deadline may be extended by another two months.
– We have the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of choosing another means. If the request is submitted by electronic means, the information will be provided by these means when possible, unless you request us to do otherwise.
– If, for any reason, the request is not processed, we will inform you, no later than one month, of the reasons for this and the possibility of complaining to a Control Authority.
In order to facilitate the exercise of the aforementioned rights, we provide below the links to the application form for each of them:
– Form exercising the right of access
– Form for exercising the right of rectification
– Form for exercising the right of opposition
– Form for exercising the right to erasure (right “to be forgotten”)
– Form for exercising the right to limit processing
– Right to portability exercise form
All the mentioned rights can be exercised through the contact methods listed at the beginning of this clause.
In all cases, you must prove your identity by accompanying a photocopy or scanned copy of your DNI or equivalent document, or a document accrediting representation, if the right is exercised through a representative.
All the mentioned rights can be exercised through the means of contact with the entity listed at the beginning of this clause.
In the event of any violation of your rights, especially when you have not obtained satisfaction in their exercise, you can file a claim with the Spanish Data Protection Agency (contact details accessible at www.aepd.es), or another competent control authority. . You can also obtain more information about your rights by contacting these organizations.
We are firmly committed to protecting the personal data we process. We use reasonably reliable and effective measures, controls and procedures of a physical, organizational and technological nature, aimed at preserving the integrity and security of your data and guaranteeing your privacy.
Furthermore, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.
In the case of the contracts we sign with our suppliers, we include clauses in which they are required to maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the order made, as well as to implement security measures. technical and organizational measures necessary to guarantee the permanent confidentiality, integrity, availability and resilience of personal data processing systems and services.
All these security measures are reviewed periodically to guarantee their adequacy and effectiveness.
However, absolute security cannot be guaranteed and there is no security system that is impenetrable, so, in the case of any information being processed and under our control that is compromised as a result of a security breach, we will take the necessary measures. appropriate measures to investigate the incident, notify the Control Authority and, where appropriate, those users who may have been affected so that they can take appropriate measures.
By providing us with your personal data, the person who does so guarantees that he or she is over 14 years of age and that the data provided is true, accurate, complete and up-to-date.
If you provide personal data of minors under 14 years of age, you may only do so in your capacity as holder of parental authority or guardian of the minor, also guaranteeing that the data provided is true, accurate, complete and up-to-date.
For these purposes, the interested party is responsible for the veracity of the data and must keep it conveniently updated so that it responds to their real situation, being responsible for any false and inaccurate data that they may provide, as well as for damages, direct or indirect, that could arise.
If you provide data from third parties, you assume the responsibility of informing them in advance of everything provided for in article 14 of the General Data Protection Regulation under the conditions established in said provision.
In those cases in which user registration is carried out through social networks, the personal data that we will process will come from the social network in question, to which, previously, the interested party will have provided said data for the purposes provided for in its corresponding policies. Of privacy. The categories of data that we will collect from the social network in question are those that appear in our registration form and that you have provided to said social network. If, to proceed with registration on our website, more data than those provided by the social network are essential, you must additionally complete them in our registration form, subject to the privacy conditions provided for in this Policy.
Likewise, the personal data we process may come from information provided by Public Administrations (especially City Councils), in order to manage your subscription to the sports center.
The categories of data processed are identification data, identification codes or keys, postal or electronic addresses and commercial information.
No specially protected data is processed.
