Privacy Policy

Last updated: 7 October 2026

1. Who we are. The data controller is Associação Evian Boxe, tax ID (NIPC) 519156340, registered at Estrada Principal 27, Campo Raso, 2710-140 Sintra, Portugal. Contact: evianboxe25@gmail.com · +351 915 890 217.

2. What data we collect.

• Identification and contact data: name, age or date of birth, phone, email.

• Parent/guardian data (for minors): name, relationship, contact details, emergency contact and people authorised to collect the minor.

• Health data: fitness declaration and information you give us about physical problems relevant to the activity.

• Enrolment and billing data: programme, fees, payments.

• Images (photos and videos), only with consent.

• Technical website data (for example, IP address and access logs).

3. What we use the data for and on what basis.

• Booking and holding the trial class, handling enrolment and running the activity: necessary to act on your request and enrolment (Art. 6(1)(b) GDPR).

• Health data (fitness declaration and physical problems): with your explicit consent (Art. 9(2)(a) GDPR), to keep training safe.

• Billing and tax obligations: legal obligation (Art. 6(1)(c) GDPR).

• Photos and videos: with your consent, optional and revocable.

• Communications about activities and events: with your consent, if given.

4. Who receives the data. Data is accessed only by those who need it within the association (board and coaches). It may be shared, where necessary, with service providers acting on our behalf — website hosting and database (Lovable Cloud, on Supabase and Cloudflare infrastructure), payments (Stripe) and automated emails —, with the insurer and the Portuguese Boxing Federation in case of enrolment or licensing, and with authorities where the law requires. Some of these providers may process data outside the European Union, with the safeguards required by law.

5. How long we keep the data.

• Trial class booking without enrolment: up to 12 months after the class.

• Enrolled athletes: for the duration of enrolment and up to 2 years afterwards.

• Fitness and health declarations: as long as needed for training and no longer than the period above.

• Minors’ authorisations: for the same period as the athlete’s data.

• Billing records: 10 years, as required by tax law.

• Images: until you withdraw consent.

6. Your rights. You may at any time request access to, rectification, erasure, restriction of or objection to the processing of your data, request data portability, and withdraw any consent given (without affecting earlier processing). Write to evianboxe25@gmail.com. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD), at www.cnpd.pt.

7. Minors. Minors’ data is processed on the basis of the parent/guardian’s authorisation, who may exercise rights on the minor’s behalf.

8. Security. We take appropriate measures to protect data against unauthorised access, loss or alteration, and limit access to those who need it.

9. Cookies.

Our website does not use analytics or advertising cookies. Only cookies strictly necessary for the site to work may be used.

10. Changes. This policy may be updated. The current version is always available on the website.