Privacy Policy

1. Who is responsible for your data

The data controller is MGYM, Lda, tax number (NIF) 518196453, registered office at Rua Manuel Marques 12, 9.º E, 1750-171 Lisboa, Portugal. For any privacy matter, contact us at info@mgym.pt.

2. What data we collect

• Quote requests: name, email, phone, company name, VAT number, delivery address, club or organisation, your message, the products requested and, for repair requests, any photos of the equipment you send us.
• Direct contact: the data you send us by email, phone or WhatsApp.
• Website usage: technical and statistical data collected through cookies, only with your consent (see section 7).

3. Why we use it and on what legal basis

• To answer quote requests and prepare proposals: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• To supply, deliver and invoice equipment: performance of a contract and compliance with legal tax obligations (Art. 6(1)(b) and (c) GDPR).
• To send news and commercial information (newsletter): only with your explicit consent, which you may withdraw at any time (Art. 6(1)(a) GDPR).
• To measure and improve the website: your consent, given in the cookie banner (Art. 6(1)(a) GDPR).

4. Who we share it with

We do not sell your data. We only share it with entities that help us provide the service, under contract and for that purpose only:

• Carriers: name, delivery address and phone, to deliver the equipment.
• Technology providers: website hosting (Hetzner, Germany), image storage (Amazon Web Services), email (Google Workspace), statistics (Google Analytics, Microsoft Clarity), WhatsApp (Meta, only if you choose to contact us that way) and, in the future, newsletter delivery (Brevo).
• Public authorities: when required by law, for example the Tax Authority.

Some of these providers may process data outside the European Economic Area. In those cases the transfer is protected by the safeguards provided for in the GDPR, namely European Commission adequacy decisions or standard contractual clauses.

5. How long we keep it

• Quote requests that do not result in a sale: 3 years after the last contact.
• Customer data and invoicing documents: 10 years, as required by Portuguese tax law.
• Newsletter: until you withdraw your consent.
• Statistical data (cookies): up to 14 months.

After these periods, data is deleted or anonymised.

6. Your rights

You may at any time request access to, rectification or erasure of your data, restriction of or objection to its processing, and data portability, as well as withdraw any consent given, without affecting processing carried out before withdrawal. To do so, write to info@mgym.pt. We will reply within one month.

Erasure may be limited when we are legally required to keep certain data, for example invoices. In that case the data is kept only for that purpose and for the period required.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).

7. Cookies

We use essential cookies so the website works (session, quote cart, form security and storing your cookie choice). Statistics cookies (Google Analytics and Microsoft Clarity) are only activated if you accept them in the cookie banner. The WhatsApp button is a simple link and sets no cookies on this website. You can change your choice at any time:

Manage cookies

8. Security

We apply technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access to systems.

9. Changes to this policy

We may update this policy. The date of the latest version is always shown at the top of this page.