Privacy Policy

1. Data controller

The data controller is POWER BLOCK E.E. (Greek VAT number 802688021; GEMI number 180957203000), with registered office at Gounari 132, 16561 Glyfada, Greece. The public entrance and training facility are at Agisilau 80, Glyfada.

Privacy enquiries: info@powerblockglyfada.gr · +30 210 969 0607.

2. Data we may receive

• Contact or session requests: name, email address, telephone number, preferred training path, preferred communication language and the message you choose to send.
• Newsletter subscription: email address, preferred communication language, consent record and subscription source.
• Newsletter booking request: name, email address, telephone number, preferred training path, preferred communication language and optional availability.
• Optional visit statistics, only after acceptance: public page paths, selected button clicks, browser language, screen size, general browser/device information and a broad search/social source category. Umami derives approximate location from the IP address but states that it does not store the IP address. We do not send form values, names, emails, personal newsletter links or user identifiers to analytics.
• Security and delivery data: limited technical records such as date, time, IP address, request status and browser/device signals processed by our hosting and anti-abuse providers.

3. Why we use the data

Fields marked as required are needed to process the relevant request. If they are not provided, we cannot submit it. We do not use website data for profiling or decisions made solely by automated means.

• Enquiries and session requests: to answer you and take steps requested before a possible training service, under Article 6(1)(b) GDPR.
• Newsletter and the linked welcome offer: to send the requested updates and administer the offer on the basis of your consent, under Article 6(1)(a) GDPR.
• Optional audience statistics: to understand which pages and calls to action are useful, only with your consent under Article 6(1)(a) GDPR. Declining does not affect any website service. You may withdraw using Analytics preferences at the bottom of any page.
• Website and form security: to prevent spam, fraud and malicious activity under Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the service.
• Legal records: to retain information when required by an applicable legal obligation, under Article 6(1)(c) GDPR.

4. Newsletter and withdrawal of consent

Newsletter registration is completed when you submit the form after actively selecting the marketing-consent checkbox. You may withdraw consent at any time through the unsubscribe link in every newsletter or by contacting us. Withdrawal does not affect processing that took place before it.

5. Service providers and transfers

We use OpenAI Sites for website hosting, Cloudflare Turnstile for form security and Brevo for delivery of contact/session enquiries to POWER BLOCK, automatic request acknowledgements, newsletter delivery and contact-list management. Sending a contact enquiry does not subscribe you to marketing. They act under their own terms and, where applicable, data-processing agreements. Some providers may process data outside Greece or the European Economic Area using a lawful transfer mechanism such as an adequacy decision or standard contractual clauses.

We do not sell personal data.

For optional statistics we use Umami Cloud with the EU data region. Its tracker is loaded only after acceptance; we do not enable session replay, heatmaps, advertising tracking or user identification. Consent for statistics is separate from newsletter consent.

6. Retention

• General enquiries that do not lead to a service: normally up to 6 months after the enquiry is closed.
• Uncompleted session or booking leads: normally up to 12 months, unless a longer period is required for a contract, dispute or legal obligation.
• Newsletter consent records and technical delivery or security logs are retained according to each provider's configured retention policy and applicable law.
• Newsletter data: until you unsubscribe or consent is otherwise withdrawn. A minimal suppression record may then be retained to ensure that no further marketing is sent.
• Technical security records: no longer than 90 days unless a specific incident must be investigated or a longer period is required by law. The application does not intentionally log submitted form content.
• The analytics acceptance or refusal is saved in this browser for 180 days, without a visitor identifier. Analytics event data is retained for up to 6 months under our current Umami plan. Withdrawing stops new collection; it does not reverse prior processing.

7. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection, and you may withdraw consent. Contact us using the details above. You may also lodge a complaint with the Hellenic Data Protection Authority at dpa.gr.

8. Children

The newsletter and online welcome offer are intended for adults aged 18 or over. A parent or legal guardian should contact us for youth training enquiries.

9. Updates

We may update this notice when the website or our services change. The date shown at the top identifies the current version.