Privacy Policy

Privacy Policy

Effective Date: June 1, 2025

This Privacy Policy (hereinafter: “Policy”) contains the rules for processing personal data collected during the use of the sportsmanualtherapist.com website (hereinafter: “Website”).

1. Name and Contact Details of the Data Controller:

  • Name: Richard Kiss, sole proprietor
  • Registered Office/Address: C. Isla Tabarca, 10, Local 9, 03189 La Regia, Alicante, Spain
  • Tax Number: 031117370634
  • Phone Number: +34 643 48 76 08
  • Email Address: info@sportsmanualtherapist.com

(hereinafter: “Data Controller”)

2. Scope of Personal Data Processed and Purpose of Data Processing:

During visits to the Website, the Data Controller may process the following personal data:

a) Automatically collected data (Cookies):

The Website uses cookies to improve the user experience, analyze the operation of the website, and display relevant advertisements. Cookies are small text files stored by your browser on your device.

  • Technically Essential (Functional) Cookies: These cookies are necessary for the basic functioning of the Website, such as facilitating navigation. Without these cookies, the website cannot function properly.
  • Statistical and Analytical Cookies (Google Analytics): These cookies help us collect information about how visitors use the Website. We measure data such as visitor numbers, the most popular pages, time spent on the website, and the source from which visitors arrived (e.g., search engine, another website). We also use Google Search Console for similar analytical purposes to measure the website’s performance in Google search results. The data is collected anonymously and used exclusively for Website development, improving the user experience, and creating statistics.
  • Marketing and Advertising Cookies (Google Ads): These cookies enable us to display more relevant advertisements to visitors on the Google network and its partners, and to measure the effectiveness of our advertising campaigns. Based on a user’s previous visits, these cookies can be used to show targeted ads.

Managing Cookies: On the Website, we manage cookie consents using the “Cookie Notice & Compliance for GDPR / CCPA” plugin. You have the option to accept or reject non-essential cookies via the cookie banner displayed upon your first visit. You can change your settings at any time or delete already stored cookies in your browser’s settings. Please note that disabling certain cookies may affect the functionality of the Website.

b) Data provided during contact and appointment booking:

If you contact us via email, phone, or the WhatsApp links on the Website, or through any available contact form, or if you book an appointment for our services, we process the personal data you voluntarily provide (e.g., name, email address, phone number, WhatsApp identifier, the content of the message/booking, and, if you share such information, health-related data relevant to the service).

  • Purpose of data processing: To maintain contact, answer questions, provide information, arrange and manage appointments, provide services, and handle related administration. We use the WhatsApp platform exclusively for fast and effective communication, contact, and appointment scheduling.

3. Legal Basis for Data Processing:

  • For cookies: Your consent (Article 6(1)(a) of the General Data Protection Regulation (EU) 2016/679 (GDPR)), which you can provide via the cookie banner.
  • For data provided during contact and appointment booking:
    • Your consent (Article 6(1)(a) of the GDPR), if you initiate contact/appointment booking and provide your data. In the case of special categories of personal data (e.g., health data), processing is based on your explicit consent (Article 9(2)(a) of the GDPR).
    • Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR), if the contact/appointment booking is for the purpose of using a service.
    • The legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR) to maintain effective communication and customer relations.

4. Duration of Data Processing:

  • For cookies: Varies depending on the type of cookie. There are session cookies that are deleted when the browser is closed, and persistent cookies that are stored on your device for a longer period (typically from a few days up to 2 years, but no longer than the period prescribed by law or until you withdraw your consent). Information on the storage period of cookies used by Google can be found in Google’s Privacy Policy.
  • For data provided during contact and appointment booking: We process the data as long as the purpose of data processing exists (e.g., until the question is answered, the customer relationship exists, the service is provided, and subsequent legal obligations are fulfilled), or until you withdraw your consent (if data processing is based on consent), or for the period prescribed by legal obligations (e.g., retention of accounting documents).

5. Use of Data Processors:

The Data Controller may use data processors for the operation of the Website and the provision of services. The Data Controller ensures that the data processors it uses process personal data in accordance with applicable data protection laws.

  • Hosting Provider:
    • Name: Sybell Informatika Kft. (sybell.hu)
    • Registered Office: 1158 Budapest, Késmárk u. 7/B 2. em. 206., Hungary
    • Tax Number: 25061406-2-42
    • Purpose: Storage of the Website and data collected through it, ensuring the availability of the Website.
  • Google LLC (Google Analytics, Google Ads):
    • We use Google Analytics to measure website traffic and other web analytics data, and Google Ads to manage our advertising campaigns and display personalized ads. Information about the data collected by Google and its use can be found in Google’s Privacy Policy (available on Google’s website). Google may transfer data to the United States. Google complies with the principles of the EU-U.S. Data Privacy Framework, thereby providing adequate data protection guarantees.
  • Meta Platforms Ireland Ltd. (WhatsApp):
    • If you contact us or book an appointment via the WhatsApp links on the Website, your personal data (e.g., phone number, name, message content) will be transmitted through the WhatsApp system. Information on WhatsApp’s data processing practices can be found in Meta’s Privacy Policy (available on the WhatsApp/Meta website). Please note that by using WhatsApp, you also accept Meta’s data processing terms.

6. Data Security:

The Data Controller takes appropriate technical and organizational measures to ensure the security of personal data, to protect against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction and damage, and against becoming inaccessible due to changes in the technology used.

7. Rights of Data Subjects:

You can request the following at any time via the Data Controller’s contact details provided above:

  • Access to your personal data: You can receive information about what personal data we process, for what purpose, on what legal basis, for how long, and to whom we transfer it.
  • Rectification of your personal data: You can request the correction of inaccurate personal data or the completion of incomplete data.
  • Erasure of your personal data (“right to be forgotten”): In certain cases, you can request the deletion of your personal data.
  • Restriction of processing: In certain cases, you can request the restriction of the processing of your personal data.
  • Right to data portability: You have the right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller.
  • Right to object: You can object to the processing of your personal data if the processing is based on the legitimate interests of the Data Controller or a third party, or for direct marketing purposes.
  • Right to withdraw consent: If data processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The Data Controller will assess your request as soon as possible, but no later than one month from the receipt of the request, and inform you of the measures taken. If necessary, this period may be extended by a further two months, taking into account the complexity of the request and the number of requests. The Data Controller will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.

8. Legal Remedies:

If you believe that the Data Controller has violated applicable data protection laws during the processing of your personal data, you can seek legal remedies:

  • With the Data Controller: Via the contact details provided above.
  • With the competent supervisory authority: Given that the Data Controller’s registered office is in Spain, the primary competent supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
    • Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
    • Website: https://www.aepd.es/es

Under the GDPR, you also have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, web: naih.hu).

  • Right to go to court: You have the right to go to court if you believe that the Data Controller, or a data processor acting on its behalf, is processing your personal data in breach of the provisions on the processing of personal data laid down in law or in a binding legal act of the European Union. You can bring the action before the competent court of the Data Controller’s registered office or, at your choice, before the competent court of your habitual residence.

9. Amendment of the Policy:

The Data Controller reserves the right to unilaterally amend this Policy. The amended Policy shall enter into force upon its publication on the Website. Please check the current version of the Policy regularly.

Please read this Privacy Policy carefully. By using the Website, you acknowledge and accept the provisions of this Policy.

If you have any questions or comments regarding data processing, please contact us at one of the contact details provided above.