GDPR

GDPR Compliance

Fitbord is committed to protecting the privacy and rights of individuals under the General Data Protection Regulation (GDPR).

Data Controller

When you use Fitbord to manage your space, you are the data controller for your members' personal data. Fitbord acts as a data processor, processing data on your behalf according to your instructions and our Data Processing Agreement.

Lawful Basis for Processing

We process personal data based on: contractual necessity (to provide the Fitbord service), legitimate interest (to improve our platform and prevent fraud), consent (for optional communications and marketing), and legal obligation (for tax and regulatory compliance).

Data Subject Rights

Individuals have the right to access, rectify, erase, restrict processing, data portability, and object to processing of their personal data. Space owners can fulfill these requests through the Fitbord dashboard or by contacting support.

Data Processing Agreement

We offer a Data Processing Agreement (DPA) to all customers that outlines our obligations as a data processor. Contact [email protected] to request a signed DPA.

International Data Transfers

When data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only as long as necessary to provide our services and fulfill our legal obligations. When you delete your account, we remove your data within 30 days, except where retention is required by law.

Data Protection Officer

For GDPR-related inquiries, contact our data protection team at [email protected].