Privacy Policy

Last updated: 15th March 2026

Data Controller Information

The data controller for your personal information is:

Data Collection

The data we collect from you may include the following categories of personal information:

• Contact Information: Name, email address, phone number, and postal address
• Health and Fitness Data: Fitness goals, health conditions, medical history relevant to our services, and progress measurements
• Service Information: Appointment bookings, service preferences, and treatment history
• Website Usage Data: IP address, browser type, pages visited, and time spent on our website
• Communication Data: Records of correspondence between you and moderatium
• Payment Information: Billing details and payment history (payment card details are processed securely by third-party payment processors)

How We Use Your Information

We use of your data is based on the following legal grounds and for the following purposes:

Service Provision (Legal Basis: Contract Performance)

How we use your information to provide our wellness services:

• Scheduling and managing your appointments
• Providing personalised fitness and wellness programmes
• Monitoring your progress and adjusting treatment plans
• Processing payments for services rendered
• Communicating with you about your appointments and services

Business Operations (Legal Basis: Legitimate Interest)

• Improving our services and facilities
• Analysing website usage to enhance user experience
• Maintaining business records and accounts
• Protecting against fraud and ensuring security

Marketing Communications (Legal Basis: Consent)

• Sending newsletters and wellness tips (only with your consent)
• Informing you about new services and special offers
• Inviting you to wellness events and workshops

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with:

• Healthcare Professionals: With your consent, we may share relevant health information with medical professionals involved in your care
• Service Providers: Trusted third-party providers who assist us in delivering our services (e.g., payment processors, appointment scheduling systems)
• Legal Authorities: When required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity

Your Rights

Under the General Data Protection Regulation (GDPR) and Austrian data protection laws, your rights include:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at privacy@moderatium.pro or call +43 4636668165.

Data Retention

We retain your personal data for the following periods:

• Client Records: Maintained for 7 years after your last appointment for healthcare and legal compliance purposes
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: Anonymised data retained for 2 years for business improvement purposes
• Financial Records: Retained for 7 years as required by Austrian tax and accounting laws
• CCTV Footage: Automatically deleted after 30 days unless required for security investigations

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure storage of physical records
• Regular data backups with secure storage

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection standards
• Certification schemes and codes of conduct

Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website performance. For detailed information about our use of cookies, please refer to our Cookie Policy.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us about your personal data, please reach out using the following contact information:

Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify existing clients via email or through our website
• For material changes affecting your rights, obtain your consent where required by law

We encourage you to review this privacy policy periodically to stay informed about how we protect your personal information.

Special Categories of Personal Data

As a wellness studio, we may process special categories of personal data (sensitive data) including health information. This processing is necessary for:

• Providing healthcare and wellness services
• Ensuring your safety during fitness activities
• Customising programmes to your health needs
• Complying with health and safety regulations

We process this sensitive data based on your explicit consent and our legitimate interests in providing safe, effective wellness services. You may withdraw your consent at any time, though this may affect our ability to provide certain services.