Privacy Policy and Data Protection

GRIT+GRACE, as Data Controller, processes Members’ personal data in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and applicable Italian data protection legislation.

GRIT+GRACE has adopted a comprehensive Privacy Policy that describes in detail:

  • the categories of personal data collected;

  • the purposes and legal bases of processing;

  • the methods of processing and data retention periods;

  • the categories of recipients of the data;

  • any transfers outside the European Economic Area, where applicable;

  • the rights of data subjects under Articles 15–22 GDPR (including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent);

  • the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

The Privacy Policy is made easily accessible at all times on the Site, within the App, and at the studio reception desk. Members are required to read it carefully. The Privacy Policy forms an integral and essential part of these Terms and Conditions.

Use of Images (Photos/Videos):

The studio may occasionally produce photographic or video material within its premises for its institutional and promotional purposes (e.g., website, social media). The use of any image or video in which a Member is clearly recognizable is subject to the Member’s prior, free, and specific consent, which will be requested separately and is not a condition for membership or access to services. A Member may grant, deny, or withdraw their consent at any time by providing written notice to the studio, without any negative consequences.

Governing Law and Jurisdiction:

These Terms and the rights and obligations of the Parties hereunder shall be governed by, and construed and interpreted in accordance with, the laws of the Republic of Italy. 

With reference to any controversy arising out in connection to this Agreement, the following shall apply:

(i) the parties will make reasonable efforts, for at least 30 (thirty) days, to settle in an amicable way any dispute that might arise between them in connection with this Agreement, including any dispute concerning its interpretation, validity, effectiveness, enforceability, performance, termination or rescission;

(ii) should any party consider not possible to reach an amicable settlement after expiration of the above 30 (thirty) days period, then the dispute shall be submitted to the exclusive jurisdiction of the Courts of Milan (Italy), without prejudice to mandatory consumer protections.

Amendments to the Terms and Conditions:

GRIT+GRACE reserves the right to amend, update, or supplement these Terms and Conditions at any time for legal, regulatory, organizational, operational, or business reasons. Members will be notified of any material changes by email and/or through notice on the Site or App at least 30 (thirty) days prior to the effective date of such changes. Changes that are merely formal, clarificatory, required by law, related to studio organization, scheduling, instructors, digital tools, or that do not materially affect Members’ contractual rights or obligations shall not entitle the Member to withdraw from the agreement.

Only in the event that the amendments materially and adversely affect the essential rights or obligations of the Member, the Member shall have the right to withdraw from any ongoing membership agreement by providing written notice within 15 (fifteen) days from receipt of the notification.

Withdrawl shall take effect from the date specified in the notice and shall not entitle the Member to any refund for services already rendered or already used. Any unused prepaid services shall be handled strictly in accordance with mandatory provisions of applicable law.

  • Continued use of the Services after the effective date of the amendments shall constitute full acceptance of the updated Terms.

PRIVACY POLICY:

1. Data Controller

The Data Controller responsible for the processing of personal data is:

GRIT AND GRACE SSD

Address: Via Cola di Rienzo 190, Rome, Italy

Email: hello@gritandgraceclub.com

Phone: 3349001366

Personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation, including Italian Legislative Decree 196/2003, as amended.

2. Categories of Personal Data Collected

The studio collects and processes personal data necessary to manage memberships, provide training services, ensure the safety of participants, and comply with legal and regulatory obligations.

Identification and Contact Data

During registration, the following personal data may be collected:

  • Name and surname

  • Date of birth

  • City or place of birth

  • Residential address

  • Email address

  • Telephone number

  • Italian Tax Identification Number (Codice Fiscale)

These data are required for client identification, administrative management, and compliance with applicable legal obligations.

Membership and Service Data

In order to manage participation in studio activities, the following information may be processed:

  • Membership registration information

  • Class bookings and attendance records

  • Payment and billing information

  • Communication between the client and the studio

  • Training-related information relevant to delivering the service

Health Data (Special Categories of Personal Data)

Under Italian regulations governing non-competitive sports activities, participants must provide a valid medical certificate confirming fitness for physical activity (certificato medico per attività sportiva non agonistica).

The studio may therefore process:
  • Medical certificates confirming fitness for sports participation

  • Health information voluntarily communicated by clients that may be relevant to safe participation in training activities (for example injuries, physical limitations, pregnancy, or other medical considerations)

Such information constitutes special categories of personal data under the GDPR and is processed with appropriate safeguards.

Health-related information is accessed only when necessary to ensure the safety of the participant during training sessions.

3. Purpose and Legal Basis for Processing
Personal data are processed for the following purposes:

 Provision of Training Services

 To:

  • Register clients and manage memberships

  • Allow clients to book and attend classes

  • Provide Lagree training sessions

  • Communicate information regarding schedules, services, or operational matters

  • Legal basis: performance of a contract.

Compliance with Legal Obligations

To:

  • Verify possession of the mandatory medical certificate required for sports participation

  • Fulfill administrative, accounting, and tax obligations under Italian law

  • Legal basis: legal obligation.

 Protection of Client Health and Safety

 To:

  • Allow trainers to adapt exercises based on the client’s physical condition

  • Prevent injuries and ensure safe training sessions

Legal basis: explicit consent and protection of the participant’s health and safety.

Marketing Communications (Optional)

With the client’s explicit consent, the studio may send communications regarding:

  • Studio updates

  • Promotions or special offers

  • Events and new services

 Clients may withdraw consent at any time.

 Legal basis: consent.

4. Membership Registration and Insurance Coverage

 The studio operates as a Società Sportiva Dilettantistica (SSD) and is affiliated with Associazioni Sportive e Sociali Italiane (ASI), a recognized Italian sports promotion organization.

To participate in sports activities organized by the studio, clients must be registered as sports members (“tesserati”) with ASI.

For this purpose, the studio may transmit the minimum necessary personal data to ASI, which may include:

  • Name and surname

  • Date and place of birth

  • Residential address

  • Italian Tax Identification Number (Codice Fiscale)

  • Contact details where required

  • This data transmission is necessary in order to:

  • Register the client as a member (tesserato) of the affiliated sports organization

  • Activate sports insurance coverage required for participation in training activities

  • Comply with obligations applicable to amateur sports organizations in Italy

  • ASI processes such personal data as an independent data controller.

Further information about how ASI processes personal data can be consulted in its privacy documentation available at:

https://www.asinazionale.it/wp-content/uploads/2022/01/Normative_Privacy_INFORMATIVA_TRATTAMENTO_DATI_PERSONALI_UE_679_2016_-_TESSERATI.pdf

5. Methods of Data Collection

 Personal data may be collected through:

•        Membership registration forms

•        Online booking or membership platforms

•        Direct communications with the studio (email, phone, or in person)

•        Medical certificates provided by the client

•        Information voluntarily communicated by clients to trainers or staff

6. Access to Personal Data

Access to personal data is limited to authorized individuals who require such information to perform their duties.This may include:

  • Administrative staff responsible for managing memberships and bookings

  • Trainers and instructors who require relevant information to ensure safe and effective training sessions

 Trainers have access only to information necessary for the safe delivery of training services.

7. Data Processors and Third Parties

 Personal data may be processed by external service providers acting on behalf of the studio, including:

  • Booking and membership management platforms

  • Payment service providers

  • Professional advisors such as accountants or legal consultants

  • Sports organizations responsible for membership registration and insurance activation

These parties process personal data only where necessary and in accordance with contractual confidentiality and data protection obligations.

8. Data Security

 The studio implements appropriate technical and organizational measures to protect personal data from:

  • Unauthorized access

  • Loss or destruction

  • Accidental disclosure

  • Unlawful processing

Such measures may include secure digital systems, restricted access to sensitive information, and confidentiality obligations for staff and instructors.

Particular care is taken in the handling of health-related information.

9. Data Retention

 Personal data are retained only for the period necessary to fulfill the purposes for which they were collected.

 Typical retention periods include:

  • Membership and client records: for the duration of the client relationship and a reasonable administrative period thereafter

  • Medical certificates: until their expiration or as required by applicable regulations

  • Accounting and billing records: up to 10 years in accordance with Italian tax legislation

  • Marketing communications: until consent is withdrawn

10. Rights of the Data Subject

 Under the GDPR, clients have the right to:

  • Access their personal data

  • Request correction of inaccurate or incomplete information

  • Request deletion of their personal data where legally applicable

  • Request restriction of processing

  • Object to certain types of processing

  • Receive their personal data in a portable format where applicable

  • Withdraw consent at any time where processing is based on consent

Requests regarding personal data may be submitted to: hello@gritandgraceclub.com 

Clients also have the right to lodge a complaint with the Italian supervisory authority:

Garante per la Protezione dei Dati Personali

11. Mandatory Nature of Data Provision

 Providing certain personal data is necessary in order to:

  • Register as a client of the studio

  • Participate in training sessions

  • Obtain membership registration with the affiliated sports organization

  • Activate sports insurance coverage

Failure to provide such information may prevent the studio from providing the requested services.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements or studio practices. The most recent version will always be made available through the studio’s official communication channels.

Booking, Cancellations and Waitlist

Account Requirement:

Members must create an Account through the App or Site, providing accurate and complete information. Members are responsible for the confidentiality of login credentials.

Booking & Cancellation Policy:
  • All classes must be prepaid and are subject to availability.

  • Cancellations must be made at least 12 hours prior to class start time.

  • Late cancellations (within 12 hours) and no-shows result in the loss of the class credit.

  • GRIT+GRACE reserves the right to modify instructors, schedules, or class formats when necessary.

Waitlist Policy
  • Waitlists are processed automatically up to 16 hours before class.

  • If a spot becomes available within 16 hours of class start, no automatic enrollment occurs; the spot is opened to all members for manual booking.

No-Show Policy

  • Failure to attend a booked class is considered a no-show.

  • No-shows result in the loss of the class credit.