Personal Data Processing Policy

1. General Provisions

This personal data processing policy (hereinafter referred to as the "Policy") defines the procedure and conditions for processing personal data undertaken by xtrium-metra.fit (hereinafter referred to as the "Operator") and establishes measures to ensure the security of this data.

1.1. The Operator considers the observance of human and civil rights and freedoms during the processing of personal data, including the protection of rights to privacy, personal and family secrets, as the most important goal and condition for its activities.

1.2. This Policy applies to all information that the Operator may obtain about visitors (hereinafter referred to as "Users") of the xtrium-metra.fit website.

2. Key Concepts Used in the Policy

  • Website — a collection of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address xtrium-metra.fit.
  • User — any visitor to the website.
  • Personal Data — any information relating directly or indirectly to a specific or identifiable User of the website.
  • Processing of personal data — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
  • Personal Data Security — protection of personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as from other illegal actions.
  • Consent — a voluntary, informed, and conscious expression of the User's will to process their personal data.

3. Data We Process

The Operator may process the following categories of data:

  • Personal data provided by the User:
    • Full Name;
    • Email address;
    • Phone numbers.
  • Data collected automatically:
    • The site also collects and processes anonymized data about visitors (including "cookies") using Internet statistics services (Google Analytics and others). This data includes IP address, browser type, access time, and addresses of requested pages.

The data listed above are hereinafter collectively referred to as Personal Data.

4. Purposes of Personal Data Processing

  • Identification of the User to provide access to website services.
  • Establishing feedback with the User, including sending notifications, requests regarding the use of the site, and processing requests and applications from the User.
  • Conclusion and execution of contracts to which the User is a party.
  • Informing the User by sending emails and other types of newsletters (with their consent). The User can always opt out of receiving information messages by sending an email to the Operator at [email protected] with the subject "Unsubscribe".
  • Improving website quality, analyzing its usage, and developing new services.

5. Legal Grounds for Personal Data Processing

The Operator processes the User's personal data only on legal grounds:

  • When there is voluntary consent from the User to process their data, expressed by filling out the relevant forms on the site or checking a box.
  • Processing of anonymized User data is carried out if permitted in the User's browser settings (cookies and JavaScript are enabled).

6. Procedure for Collection, Storage, and Data Security

  • The Operator ensures the safety of personal data and takes all possible legal, organizational, and technical measures to protect data from unauthorized access.
  • Personal data of the User will never, under any circumstances, be transferred to third parties, except in cases related to the execution of current applicable legislation or with the User's consent.
  • The User can update their personal data at any time by sending a notification to the Operator at the email address [email protected].
  • The period for processing personal data is unlimited. The User can withdraw their consent to the processing of personal data at any time by sending a notification to the Operator at the same email.

7. Final Provisions

  • The User can obtain any clarifications on issues of interest concerning the processing of their personal data by contacting the Operator via email at [email protected].
  • This document will reflect any changes to the personal data processing policy by the Operator. The Policy is valid indefinitely until replaced by a new version.
  • The current version of the Policy is freely available on the Internet at xtrium-metra.fit.