Privacy policy

1. Data controller

The controller of your data is Fabián Márquez, trading as “Pata Negra Workout”. Tax ID (NIF): 48023080A. Address: Carrer del Pi, 9, 08811 Canyelles (Barcelona), España. Contact email: fabi.marquezmartinez@gmail.com.

We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

2. What data we process and where it comes from

We only process the data you give us: your email and, where applicable, your name, phone and goal when you download a free resource, join the waitlist or send an enquiry; the data you provide when booking a call; and technical browsing data generated by analytics tools only if you accept cookies.

All data comes directly from you; we don't obtain information about you from third parties or external sources. We don't ask for health data; if you share it voluntarily in an enquiry, we use it only to reply to you.

Providing your data is voluntary but necessary to deliver the service you ask for: without your email we can't send you the resource or manage your waitlist place, and without the booking details we can't confirm your call.

3. Why we process your data and on what legal basis

We process your data for the following purposes, each on its own legal basis:

(a) Sending you the free resource you request and managing the waitlist: your consent (Art. 6.1.a GDPR).

(b) Managing your diagnostic call booking: pre-contractual steps at your request (Art. 6.1.b GDPR).

(c) Answering your enquiries by email, WhatsApp or Instagram: our legitimate interest in replying to you (Art. 6.1.f GDPR).

(d) Sending you communications about services similar to those you requested: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.

(e) Web analytics (Google Analytics 4 and Metricool): your consent given in the cookie banner (Art. 6.1.a GDPR).

We do not carry out automated decision-making or profiling that produces legal effects on you.

4. How long we keep your data

We keep the email from resource downloads and the waitlist until you withdraw consent or unsubscribe and, at most, 2 years from the last contact. Booking data, during the management of the appointment and up to 1 year afterwards. Enquiries, while we handle your request and up to 1 year after it is resolved.

After those periods, we block the data during the applicable legal limitation periods (for example, tax or liability obligations) and then erase it.

5. Who can access your data and international transfers

We don't sell or share your data for commercial purposes. To run the service we rely on providers acting as processors strictly on our instructions: Resend (email delivery), Cal.com (bookings), Vercel (website hosting), Google LLC (Google Analytics 4 and Google Sheets, where download emails are logged) and Metricool (web analytics).

Some of these providers may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework; additionally, transfers are covered by the EU Standard Contractual Clauses. You can request more information about these safeguards by emailing fabi.marquezmartinez@gmail.com.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, portability, to withdraw your consent at any time (without affecting the lawfulness of prior processing) and not to be subject to automated individual decisions, by emailing fabi.marquezmartinez@gmail.com and stating the right you wish to exercise. We will reply within one month at most.

If you believe we haven't handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or via its electronic office at www.aepd.es.

7. Images and testimonials

We only publish before/after photos or client testimonials from people who have given us prior express image-use authorisation, specifying the medium (website and social media), the purpose (promotion of the services) and the duration.

You can revoke your authorisation at any time by emailing fabi.marquezmartinez@gmail.com; we will remove the image within 30 days at most.

8. Security and minors

We apply reasonable technical and organisational measures to protect your data. This service isn't aimed at children under 14; if you're a minor, please don't give us your data without your parents' or guardians' consent.

9. Cookies

We use technical cookies and, only with your consent, analytics cookies (Google Analytics 4 and Metricool). You'll find the detail, the full cookie list and the controls in our Cookie policy.