Privacy Policy

This Privacy Policy regulates the processing of personal data that you share with us as a client, user, candidate or potential client through our Website, Mobile Application and our social profiles and centres.

1. DATA CONTROLLERS.

The entity that acts as the controller (hereinafter referred to as DUIN) of your personal data when you interact with us is:

DUET SPA & SPORTS, S.L.U.
Postal address: C/Entença, nº 95, 4º 1ª, 08015 Barcelona
Email: gdpr@duinclub.com

We inform you that each of our centres has access to the personal data of its customers in order to offer our products and services as provided for in this privacy policy.

The entities responsible for each of the DUIN centres and other entities linked to DUIN may act as data processors.

We take appropriate technical and organisational measures to protect personal data from accidental or unlawful destruction, loss or alteration, from any unauthorised use, communication and access and all other unlawful forms of processing and misuse.

2. PURPOSES OF PROCESSING.

Your personal data will be processed for the following purposes:

Customer relationship. To manage your relationship as a customer online and in our centres to ensure the correct management of our commercial relationship with you (attending to your queries and requests regarding the products and services we offer) and to ensure correct accounting, tax and administrative management derived from the contractual relationship between both parties. Within the framework of the customer relationship, we may process the data to inform the centres if there is any amount pending payment in order to adopt the appropriate measures and, where appropriate, apply the reservation of the right of admission.

The personal data of minors that are collected for the contracting of products and services intended for minors will be processed, in accordance with the provisions of this privacy policy, always with the prior authorization and consent of the parent, guardian or legal representative of the minor.

Online store purchases. To manage the purchase orders you place through the DUIN online store and to contact you in relation to your purchase.
Internal analysis and studies. To use your personal data to improve the products and services we offer by carrying out internal analyses and studies, reports and statistics that allow the DUIN business and commercial information to be adapted.
Sending satisfaction surveys. We will send you quality surveys about the products and services we offer.
Sending commercial communications. Send you commercial communications by electronic means based on your activity and habits. In each of the commercial communications you will find a mechanism to show your opposition to receiving them.
Access to facilities and reservations. To be able to manage access to our facilities, as well as the reservation of rooms and other services. In this case, we have a system of access to the facilities through the use of fingerprints. We inform you that the system used does not collect any biometric data.
Customer service or contact with DUIN. When you contact us (even if you are not a DUIN customer) through our Customer Service or through the means of contact enabled for this purpose and provide us with your data, we process them to manage a request, return or claim, as well as to answer any queries you may wish to make to us. Please note that we may record calls to the customer service hotline for quality and security reasons.
Social networks. We may process your data when you interact with and use our social profiles in accordance with this privacy policy.
Contest, raffle and/or activity, physical or virtual event organized by DUIN. In this case, we may process your data to confirm your attendance, send you a reminder of the day and time, contact you in the event that you are the winner of a contest or raffle.
Recording and image capture. Record and capture your image, name and/or voice and use the images in which you appear recorded or photographed, on the occasion of conferences, meetings and other activities that are carried out, as well as for their assembly and editing in order to be published and exhibited through the internal and external communication channels owned by DUIN. In this case, DUIN will provide you with the corresponding authorisation to use the image rights (name, voice and image).
Fitness Facts: In order to assess your physical condition (injuries, deficiencies, allergies) and, where appropriate, adapt our products and services to your needs, we will ask you a series of questions about it. Likewise, for participation in our campuses we will request the participant’s health card and vaccination card, so that, in the event of injury or accident, we can request appropriate medical attention until the arrival of the parents or guardians. In this case, DUIN will provide you with the corresponding form to request your prior and express consent
Video surveillance systems. To guarantee the safety of people and facilities, we have security cameras.
Selection processes: work with us. To manage the different selection processes opened and/or future by the companies related to DUIN.

3. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA.

The legal bases on which we process your data for the purposes indicated are the following:

PURPOSES / LEGAL BASIS

Customer relationship

The legal basis for the processing is the performance of the contract that binds us.
The health data that we may collect or that you voluntarily provide us with in order to offer you our products and services are processed on the basis of the express consent you grant.

Online store purchases

The legal basis for the processing is the performance of the contract that binds us at the time you purchase a product or service through the online store. In the event that you ask us for a quote or we need certain information prior to the purchase or contracting, we will process your data on the basis of a previous pre-contractual relationship.

Internal analysis and studies

We process your data based on our legitimate interest.

Sending satisfaction surveys

We process your data based on our legitimate interest

Sending commercial communications

The legal basis for the processing of your data is the express consent you give us and our legitimate interest in those cases in which there is a relationship with DUIN and in which the information we send you is related to the products and services you have purchased or contracted.

Access to facilities and reservations

The legal basis for the processing is the performance of the contract that binds us. In the event that you make use of our fingerprint access system, the basis for the processing of said data is the express consent that you provide us at the time of configuring the use of said system.

DUIN Customer Service

The legal basis for the processing is the pre-contractual relationship established with DUIN, the execution of the contract that binds us in the event of being a DUIN customer and the fulfilment of legal obligations that may correspond to us depending on the query you make to us or the question you raise with us, as well as the legitimate interest to be able to provide you with the customer service you have requested, including the possibility of recording the conversation for quality and security reasons.

Social Media

The legal basis for the processing of this data is the contractual relationship or compliance with legal obligations in the event that you are already a customer of DUIN and the legitimate interest of DUIN.

Contest, raffle and/or activity, physical or virtual event organized by DUIN

We process the data you provide to us on the occasion of your participation in competitions, prize draws and/or activity or event organised by us on the basis of the contractual relationship that binds us as a DUIN customer or on the basis of the specific legal conditions that apply.

Image recording and capture

We will process your name, image and voice that we may obtain through the recording and capture of images on the basis of the express consent you provide to us.

Assess fitness

In order to assess your physical condition and, where appropriate, adapt our products and services to your needs, we will ask you a series of questions about it, always with your prior express consent.

Video surveillance systems

The images captured by our systems are processed on the basis of DUIN’s legitimate interest in safeguarding the safety of the premises and people.

Selection processes: work with us

The data is processed on the basis of the express consent you provide us to participate in a selection process.

4. CATEGORIES AND TYPES OF PERSONAL DATA.

The categories and types of data that we will need from you are classified into identification and professional contact data and billing and payment data.

Within each of these categories of data are the following types of data that we are going to request from you or that you are going to provide us at some point in our relationship:

Identification and professional contact details: First and last name, postal address, shipping address, date of birth, telephone number and email address.

Fitness data: injuries, deficiencies, allergies. In this case, DUIN will provide you with the corresponding form to request your prior and express consent.

Identification data of minors: Name and surname, date of birth, vaccination data and health card.

The personal data of minors that are collected for the contracting of products and services intended for minors will always be processed with the prior authorization and consent of the minor’s parent, guardian or legal representative.

Billing and payment data. Billing address, current account number and bank details and/or data necessary to make and complete an invoice.

Payment or card data is not stored or collected in our systems, but the data is sent directly via the payment gateway to the payment service provider.

We appreciate that the data you provide us with is up-to-date and real. In the event that the data you provide us with is false, incomplete, inaccurate or not updated, DUIN reserves the right to terminate the contracted services or any other contract that has been signed.

5. PERSONAL DATA OF THIRD PARTIES.

In the event that you provide us with data from third parties with whom you have some type of relationship, we will process the data because we understand that you have notified these third parties and have referred them to this privacy policy so that they know how we process their data. However, we will inform you of this privacy policy at the time we have the opportunity.

6. RECIPIENTS OF THE DATA.

In order to provide you with our services and offer you our products, it is necessary that we allow access to your personal data to the centre of which you are a customer, to third-party collaborators, managers or service providers of DUIN or of said centre. Our centres and these DUIN partners, managers or service providers may only process your personal data in order to provide the corresponding products and services. Therefore, they cannot use them for their own purposes or assign them to third parties. Where necessary, the following categories of third parties may know your data:

Companies that support our telephone and online customer services.
Market research companies.
Payment Providers.
Postal workers and courier or delivery companies.
Email processors.
Printing service providers.
Companies that manage DUIN’s website and social profiles.
Auditors, consultants, and other similar companies that provide consulting and auditing services.
Companies that provide marketing and advertising services.
Other companies that provide services to DUIN and that need access to the data in order to provide the particular service.

We may also be required by law to disclose your data to public entities, authorities or bodies. If that’s the case, we only disclose what is strictly necessary.

We also inform you that we may communicate your data to the entities responsible for each of the DUIN centres and to other entities linked to DUIN for the purposes set out in this privacy policy. Some of these entities may act as service providers, in which case we allow them access to data. Internally, we have signed the corresponding agreement that allows access to and processing of data by the different entities responsible for each of the DUIN centres and other entities linked to DUIN, always in accordance with the purposes provided for this purpose and adopting the appropriate legal measures. You can find information about our DUIN centers here

Likewise, your personal data may be processed and communicated to the different parties involved and their service providers, within the framework of actions and preparatory and review acts prior to commercial operations of any nature, such as, and/or substitution in the activity, including but not limited to merger, spin-off, global transfer of assets and liabilities, contribution or transfer of business, or branch of business activity, transfer of DUIN or any business and/or corporate restructuring operation of a similar nature, contemplated by commercial regulations; as well as in the framework of the aforementioned commercial operations.

We do not transfer your data to third parties for commercial purposes, we will send you commercial information about our products and services and about products and services of third parties with whom we have collaboration agreements in sectors such as, for example, sports, food, sportswear, lifestyle, wellness, food. We may offer you discounts and advantages with companies with which DUIN has reached commercial agreements, but we will not transfer your data to them, we will only send you information about their products or services.

7. INTERNATIONAL DATA TRANSFERS.

Among the entities linked to DUIN, there are entities located inside and outside the European Economic Area that may act as controllers and processors of personal data. In the event that international data transfers are carried out, DUIN will adopt the relevant legal measures such as the subscription of the corresponding standard clauses.

It may happen that some of the suppliers or service providers with whom we collaborate are located outside the economic area and therefore there is an international transfer of data. In this case, DUIN will take all necessary legal measures to ensure the transfer of the data. In these cases, the measure that DUIN usually applies is the subscription of the corresponding standard clauses.

8. RETENTION PERIODS.

As a general rule, the data provided will be kept for the time necessary to carry out the purpose for which they were collected and to ensure compliance with the various legal obligations corresponding to DUIN. To determine the appropriate retention period of personal data, DUIN will apply its corresponding data retention policy and will take into account the quantity, nature and sensitivity of the data; the purposes for which the personal data are processed; and, finally, the applicable legal, regulatory or other requirements. Below, we detail the data retention periods that we apply, as a general rule, to the processing of the data of our customers, potential customers or contacts within the framework of the relationship we maintain or once it has ended.

However, it may happen that we keep them for periods of time other than those indicated to safeguard and/or defend our rights and interests or in compliance with any legal provision.

PURPOSES / STORAGE PERIODS

Customer relationship

We will retain your data for a maximum period of ten (10) years from the last interaction with us.

Online store purchases

We will retain your data for a maximum period of ten (10) years from the last interaction with us.

Internal analysis and studies

To the extent that this data is linked to your status as a customer or to the fact that you have a relationship with DUIN, we will keep your data for a maximum period of ten (10) years from the last interaction with us.

Sending satisfaction surveys

To the extent that this data is linked to your status as a customer or to the fact that you have a relationship with DUIN, we will keep your data for a maximum period of ten (10) years from the last interaction with us.

Sending commercial communications

To the extent that this data is linked to your status as a customer or to the fact that you have a relationship with DUIN, we will keep your data for a maximum period of ten (10) years from the last interaction with us.

Access to facilities and reservations

To the extent that this data is linked to your status as a customer, we will retain your data for a maximum period of ten (10) years from the last interaction with us.

DUIN Customer Service

Once any issue has been resolved through Customer Service, we will keep this information for up to five (5) years from the last interaction with us.

Social Media

We will retain your data for up to five (5) years from the last interaction with us.

Contest, raffle and/or activity, physical or virtual event organized by DUIN

We keep personal data for a maximum period of five (5) years from the celebration of the contest, raffle and/or activity, physical or virtual event organized by DUIN.

Image recording and capture

In this case, we can dispose of the images indefinitely, always within the limit legally provided for in the applicable regulations and in accordance with our image rights policy

Video surveillance systems

We will keep your data for a maximum period of one (1) month in compliance with the provisions of the applicable regulations. Unless there are good reasons to store them for longer (e.g. if they are part of a police investigation).

Selection processes: work with us

We will keep your data for a maximum period of three (3) years from the time you provide it to us.

9. RIGHTS

You may, under the terms established in the data protection regulations in force at any time, and in accordance with the regulations, revoke at any time the authorisation granted for the processing and transfer of personal data, as well as exercise the rights of access, rectification, deletion, opposition, right to request the limitation of the processing of your personal data, the right to portability and the right to file a complaint with the Spanish Data Protection Agency. To do this, you can contact DUIN with proof of your identity by email addressed to gdpr@duinclub.com

10. MODIFICATION OF THE PRIVACY POLICY

DUIN is committed to complying with the fundamental principles of privacy and data protection. Therefore, we regularly review our privacy policy so that it is up-to-date and complies with the data protection principles at all times. This privacy policy may be modified when necessary to comply with the latest developments and to comply at all times with current legislation. Any future changes to our privacy policy will be made available to you, posted on this page, and, where appropriate, notified to you by email.

Last updated: August 2024