Privacy Policy

Detailed information on Data Protection

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), R&E GYM CB (hereinafter “the COMPANY”) informs data subjects about the way in which their personal data will be processed when accessing, browsing and using the COMPANY’s products and services. This privacy policy shall apply to the following websites owned by the COMPANY and used to market our products and services:

• - Website: we operate a website under the main domain https://www.rutvela.com
• - Social networks: we have profiles on the social networks X (formerly Twitter), Instagram, LinkedIn and Facebook. In this case, this privacy policy shall apply only insofar as the COMPANY obtains USERS’ data through them.

By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your free, specific, informed and unequivocal consent to the processing of your personal data in accordance with the purposes and terms set out herein.

The COMPANY may modify this Privacy Policy in order to adapt it to legislative, case-law or interpretation developments of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookies Policy and the General Terms and Conditions which, where applicable, may be established for certain products or services, if such access entails any specific provisions regarding the protection of personal data.

Data Controller

• Company name: R&E GYM CB
• Trade name: Rut Vela Fitness Gym
• Tax ID: E55277792
• Registered office: Av. de St. Narcís, 122, 17005 Girona
• Phone: +34972092483
• Email: info@rutvela.com

Purpose and legal basis of processing

The COMPANY will use the data you provide for the following purposes:

• - Requesting information and/or contracting any product or service offered by the COMPANY.
• - Commercial actions, using the information provided by the data subject to offer products and services in a personalized or general manner.
• - Sending personal and individual messages through the internal channel
• - Sending personal and individual messages through the channels of different social networks.

The legal basis for processing your data is the express consent granted through a positive and affirmative action. By completing the forms, checking the box “I accept the Privacy Policy” and clicking to submit the data, or by sending emails to the COMPANY through the accounts enabled for this purpose, you declare that you have read and expressly accepted this privacy policy. Likewise, you grant your unequivocal and express consent to the processing of your personal data in accordance with the stated purposes. If the data provided are inaccurate or incomplete, it will not be possible to use the products and services.

Minors over the age of 14 may give consent for the processing of their data. If the person is under 14 years of age, they may not provide consent for the processing of their data, which shall fall under the responsibility of parents, guardians or legal representatives.

The COMPANY processes the following categories of data:

• a) Identification data: first name, last name(s), address, email address and phone number.
• b) IP address

Data recipients

No data transfers are foreseen, except those authorized by tax, commercial and telecommunications legislation, as well as in cases where a judicial authority requires it.

International data transfers

No international data transfers are carried out

Data retention period

We will retain your personal data from the moment you give your consent until you revoke it or request the restriction of processing. In such cases, we will keep your data blocked for the legally required periods.

Data subject rights

The User may exercise the following rights in relation to their data:

• a) Access: the right to obtain confirmation as to whether or not we are processing personal data concerning you, and access to such data.
• b) Rectification: the right to obtain rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed.
• c) Erasure: the right to obtain the erasure of personal data when they are no longer necessary for the purposes for which they were collected or where they are not required for compliance with a legal obligation.
• d) Objection: the right to object to the processing of data where one of the grounds set out in Article 21 of the GDPR applies.
• e) Restriction: the right to obtain restriction of processing when the conditions set out in Article 18 of the GDPR are met.
• f) Portability: the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit them to another controller when the requirements of Article 20 of the GDPR are met.

In the context of social networks, only the rights relating to information under the control of the COMPANY may be exercised.

The COMPANY informs you that these rights have the following characteristics:

• a) The exercise of these rights is free of charge, unless the requests are manifestly unfounded or excessive (e.g. repetitive), in which case the COMPANY may charge a reasonable fee based on administrative costs or refuse to act.
• b) You may exercise your rights directly or through your legal or voluntary representative.
• c) The COMPANY must respond to the request within one month, unless the request is complex or a large number of requests are received. In such cases, the period may be extended by a further two months.
• d) If the COMPANY does not act on the request, it will inform you, at the latest within one month, of the reasons for its inaction and of the possibility of lodging a complaint with a Supervisory Authority.

To exercise your rights, as well as not to be subject to decisions based solely on automated processing of your data, where applicable, you may request the corresponding form by postal mail addressed to R&E GYM CB at the address indicated in section A), or by sending an email to info@rutvela.com with the subject line “Exercise of Data Protection Rights”. In both cases, remember to attach a copy of a document that allows us to identify you.

Finally, you have the right to lodge a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

Automated decisions

No automated decisions are carried out

Security measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to guarantee the security of personal data and to prevent its alteration, loss, unauthorized processing or access, taking into account the state of the art, the nature of the stored data and the risks to which they are exposed, in accordance with Article 32 of GDPR EU 679/2016. These security measures are periodically reviewed to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is completely impenetrable. Therefore, in the event that any information under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, the affected users so that they can take suitable measures.

Social networks

In compliance with the principles of transparency, we provide the links to the privacy policies of the different social networks where we have profiles:

• a) X (formerly Twitter): https://twitter.com/privacy
• b) Instagram: https://help.instagram.com/155833707900388
• c) LinkedIn: https://es.linkedin.com/legal/privacy-policy

Drafting language: Castellano

Available language: Castellano

Last updated: 25/11/2025