D-Fetch

LEGAL | PRIVACY NOTICE

Privacy notice GymPerformance users

(Invited Users of the GymPerformance Platform)

Last updated 24.02.2026

1. Who Controls Your Data?

GymPerformance is provided by D-Fetch AS. If you are a registered user, you were invited by a gym operator (your employer or affiliated organisation). The gym operator is the data controller of your personal data. D-Fetch acts as a data processor, meaning:

  • We process your data only on behalf of the gym operator.
  • We do not determine the purposes of processing.
  • We do not use your account data for our own marketing.

If you have privacy requests, you should contact your gym operator first.

2. How You Become a User

GymPerformance access is invitation-only. A gym operator administrator registers:

  • Your name
  • Your work email address
  • Your user role

You receive an invitation email to activate your account.

3. Personal Data Processed

On behalf of the gym operator, we process:

  • Name
  • Work email
  • Profile photo (optional)
  • User role and permissions
  • Support tickets
  • Platform activity logs
  • Security logs

We do not process:

  • Health data
  • Biometric data
  • Personal fitness tracking data

4. Purpose of Processing

Your data is used to:

  • Provide access to GymPerformance
  • Enable operational workflows
  • Manage equipment and ticketing systems
  • Maintain system security

Legal basis is determined by the gym operator and may include:

  • Contract performance
  • Legitimate interest
  • Compliance with legal obligations

5. International Operations

Because gym operators and D-Fetch operate internationally:

  • Data may be accessed from different jurisdictions.
  • Infrastructure is hosted within the EEA.
  • Where international transfers occur, appropriate safeguards are implemented.

6. Retention

Your data is retained:

  • While your account is active
  • Until your gym operator deletes your account
  • According to contractual retention rules between D-Fetch and the gym operator
  • Upon contract termination, data is deleted or returned per the Data Processing Agreement.

7. Security

We implement safeguards including:

  • Encrypted connections
  • Role-based access control
  • Restricted internal access
  • Monitoring and logging
  • Secure EEA-based infrastructure

8. Your Rights

Depending on your jurisdiction (EU, UK, Brazil, certain U.S. states), you may have rights to:

  • Access
  • Correction
  • Deletion
  • Restriction
  • Portability
  • Objection

Please contact your gym operator to exercise your rights. You may also lodge a complaint with your local data protection authority.