Privacy Policy

Last updated: 16 May 2026

This Privacy Policy explains how Energy Gym ("we", "us", "our"), located in Durrës, Albania, collects, uses and protects the personal data of our members and website visitors, in accordance with applicable Albanian data protection legislation and the EU General Data Protection Regulation (GDPR).

1. Data Controller

Energy Gym, Durrës, Albania, is the controller of personal data collected through this website and during the provision of our services. For questions about your data, contact us at info@energygym.health.

2. Data We Collect

We may collect the following categories of personal data:

Identity data: first name, last name, date of birth, gender
Contact data: email address, phone number
Membership data: membership type, start and expiry dates, assigned trainer, fitness goals
Health data: fitness assessments, body measurements, health conditions disclosed voluntarily
Payment data: transaction records (we do not store full card details)
Usage data: IP address, browser type, pages visited on our website

3. How We Use Your Data

We process your personal data for the following purposes:

Managing your gym membership and access
Providing fitness assessments and group class bookings
Sending membership renewal reminders and relevant updates
Processing payments and maintaining billing records
Improving our services and facilities
Complying with legal obligations
Sending promotional offers (only with your explicit consent)

4. Legal Basis for Processing

We process your personal data based on one or more of the following grounds:

Your explicit consent
Performance of a contract (your membership agreement)
Our legitimate interests in operating the gym
Compliance with a legal obligation

5. Data Retention

We retain your personal data only for as long as necessary. In general:

Member records are kept for the duration of your membership plus 3 years
Financial records are kept for 5 years as required by Albanian tax law
Contact data is removed upon your request if you are no longer a member

6. Sharing Your Data

We do not sell your data. We may share it with:

Staff members (trainers, reception) on a need-to-know basis
IT service providers who help us run our management software
Public authorities when required by law

7. Your Rights

You have the following rights regarding your personal data:

Access: request a copy of the data we hold about you
Correction: ask us to correct inaccurate data
Deletion: request erasure of your data where appropriate
Restriction: ask us to limit how we use your data
Portability: receive your data in a portable format
Withdrawal of consent: opt out of any consent-based processing at any time

To exercise these rights, contact us at info@energygym.health.

8. Cookies

Our website uses essential cookies necessary for site operation. We do not use tracking or advertising cookies without your consent. You can manage cookie preferences in your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including restricted staff access, encrypted storage of sensitive data, and regular security reviews.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify members of material changes by posting a notice on our website or via email.

11. Contact

Energy Gym
Durrës, Albania
Email: info@energygym.health
Phone: +355 67 675 1515