The data collected through cookies will be stored based on its type: session cookies expire when the user closes the browser, while persistent cookies have typical expiry dates, generally not exceeding 20 days unless specific exceptions apply. This data will be processed exclusively within the scope outlined above and may be transmitted to subsidiaries, parent companies, affiliates, or entities otherwise connected to Vivafitness S.p.A.

In compliance with minimum security requirements, data derived from the use of cookies may also be disclosed to public safety authorities and other public or private individuals to fulfill legal requirements, including those of a tax, administrative, financial, or similar nature. Under no circumstances will the data be publicly circulated. Adhering to the principles of proportionality and necessity, the data will not be retained for periods longer than necessary to achieve the purposes outlined above, aligning with the service being provided or specific legal provisions.

Users have the right, at any time, to exercise their access rights in accordance with Article 15 of Regulation (EU) 2016/679. Additionally, they possess the right to update, rectify, supplement, or delete their data, or restrict its processing. They also have the right to object, in whole or in part, for legitimate reasons, to the processing of their personal data, even if related to the purpose of its collection, as well as the receipt of marketing or direct sales material, or participation in market research or commercial communications. Users can exercise these rights by contacting the Data Controller, from whom they may also request a complete and updated list of Data Processors. They are further entitled to submit complaints to the relevant data protection authority. The Data Controller is Vivafitness S.p.A., located in Cesena (FC), via Calcinaro, 2861, and can be reached via email at dpo@vivafitness.com.