ARETÉ COACHING · In force since 3 October 2026
This is a translation provided for your convenience. The Polish version is the binding one. Read the Polish version
The controller of your personal data is Alexander Panorios, operating under the ARETÉ brand. Contact: alexis.panorios@gmail.com Address: Częstochowa, Poland
We collect the following data: - Contact data: first name, last name, email address, phone number (if you provide it) - Health and training data: weight, height, age, training goals, injury history, health condition — given voluntarily in the onboarding questionnaire - Training data: workout logs, measurements, weekly reports - Data on how you found us: campaign parameters from the link (utm), referral code, the first page you visited and the address of the page that sent you to us — stored in your browser's local storage (localStorage), and also on our server once you log in or apply to the Founders programme - Technical data: IP address, browser type, cookies necessary for the platform to work
We process your data in order to: - Perform the contract for coaching services (Article 6(1)(b) GDPR) - Contact you and handle your enquiries (Article 6(1)(b) GDPR) - Meet legal obligations, such as issuing an invoice (Article 6(1)(c) GDPR) - Pursue our legitimate interest — the security of the platform (Article 6(1)(f) GDPR) - Pursue our legitimate interest — knowing where new people come from (Article 6(1)(f) GDPR) We process health data only on the basis of your explicit consent (Article 9(2)(a) GDPR).
- Data of active clients: for the whole duration of the cooperation - Data after the cooperation has ended: up to 3 years (claims) - Data from the contact form when no contract was concluded: up to 12 months - Accounting data: 5 years, in line with tax regulations You have the right to request earlier deletion of your data — contact us.
We do not sell your data. Data may be passed only to: - Supabase (database) — servers in the EU (Frankfurt) - Vercel (hosting) — EU infrastructure - Resend (email delivery) — email address and first name, to send notifications (e.g. that your plan is ready) - Web3Forms (handling of the contact form on the home page) — the data entered in the form: name, email, goal, experience, chosen package and message - Public authorities — only where there is a legal obligation
You have the right to: - Access your data - Have incorrect data corrected - Have your data deleted (the "right to be forgotten") - Restrict processing - Data portability - Object to processing - Withdraw consent at any time To exercise your rights, contact: alexis.panorios@gmail.com You also have the right to lodge a complaint with the Polish data protection authority, UODO (uodo.gov.pl).
We use only the cookies necessary to: - Keep a logged-in user's session - Ensure security (CSRF) We do not use advertising or analytics cookies. We do not use Google Analytics. We also store the data on how you found us, described in point 2, in your browser's local storage (localStorage). It is not used for advertising and is not passed to third parties.
We use the following data protection measures: - Encrypted connections (HTTPS/TLS) - A database in the EU with access control (Row Level Security) - Passwords stored in hashed form (bcrypt) - Access to client data only for the system administrator - Mobile app: login session data is stored locally in encrypted form (AES), with the encryption key kept in the device's secure system module (Keychain on iOS, Keystore on Android)
The ARETÉ mobile app uses the same database and the same data processing rules as the web platform. In addition, the following are stored locally on the mobile device and in the browser: - An encrypted login session token (until you log out or the session expires) - A draft of the current, unfinished workout — only until it is saved on the server This data is not sent to third parties and is removed from the device after you log out or the workout is saved successfully.
For privacy matters: alexis.panorios@gmail.com This policy may be updated. We will inform you of significant changes by email 14 days in advance. The current version is always available at arete-system.pl/prywatnosc.