Privacy Policy

1. Introduction

The https://endogusto.com/ website (the “Website”) is provided by Science Training Limited Liability Company, based in Athens, Greece, Lykourgou 1 Str. (“EndoGusto”). EndoGusto offers a complete online, cloud-based, personalized coaching management platform (the “Services”). The Services help coaches design training programs, monitor training programs and progress made by each athlete, and analyze data for each athlete (the “EndoGusto Software”). 

EndoGusto is committed to respect your privacy and applicable data protection laws and regulations. This Privacy Policy (the “Policy”) intends to inform you about the way we use your personal data (i.e. any data related to an identifiable natural person, either directly or indirectly), either when we collect them, when you visit our Website or when ordering and using our Services through the EndoGusto Software. 

By accessing and using this Website, you confirm that you have read and fully understood this Policy, that you agree to the collection and the usage of your own and others’ personal data in accordance with the Policy and that you have the authority to provide EndoGusto with all information submitted by you via the Website and EndoGusto Software including, but not limited to, the personal data of third parties.

2. General Principles of the Processing of Personal Data

EndoGusto (referred to as “we”, “us”, “our”, or “EndoGusto” in this Policy) collects and processes personal data in a transparent manner, to the extent necessary for specific, explicit, and legitimate purposes, and does not process it further in a manner incompatible with those purposes. 

3. Usage of data we collect

3.1 When visiting our Website

A visitor of our Website is the person simply visiting our Website, as well as the person interacting with our Website by filling in and sending the contact form, or ordering our Newsletter (referred to as “you”, “your” or “Visitor” in this Policy). 

3.1.1 Cookies

A cookie is a small data file stored by your browser on your device’s hard disk for record-keeping purposes. Namely it records information about the use and activity on the Website. This information may include, but is not limited to, your Internet Protocol (IP) address, browser type, but also the user’s web browsing history before visiting the Website, and the pages visited within our Website.

Some cookies are “first party cookies”, which means that they are set by us. Cookies set by parties other than us are called “third party cookies.” Cookies are used for different reasons. There are the necessary or essential  cookies, which are required for technical reasons in order for a website to operate. 

Some cookies are used to enhance the performance and functionality of a website, but are non-essential to their use. However, if you decide not to accept such cookies, certain functionalities may become unavailable. Such cookies are called preference cookies. 

Some cookies collect information that is used in aggregate form to help a website owner understand how its website is being used. Such cookies are called statistics cookies and they are either first party or third-party cookies. A third party, for example Google, stores a Google Analytics cookie in order to be able to differentiate between users and be able to show to the website owner how many times people visit a website on average (not individually) and information on what pages they’ve seen, how long the duration was, and so on. 

Some cookies are used for marketing purposes. These are marketing cookies, and they may be third-party cookies. Third-party cookies are placed by providers (e.g., Google, Facebook), who a website owner may have engaged to provide advertising services on its behalf. If, from the analysis of information collected by third-party cookies, visitors of a webpage are interested in one of the services, then advertising material would be projected on third party websites. To see how data is collected and analyzed by third party cookies, you can also visit the websites of the third parties and read their policies related to the use of such cookies.. 

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout .

When you visit our Website, you are asked to consent to the use of cookies, and our Cookies Notice informs you exactly about the type of cookies we use, their provider, the type of data they collect, their purpose (e.g. session, personalization, marketing, etc.) and their expiry. You may choose to consent to none, one or more of the above cookies (with the exception of the “necessary cookies”).  You may withdraw your consent to the use of cookies any time during your visit to our Website freely and easily by clicking the “Manage Cookies Settings” button next to our “Privacy Policy” button. 

Additionally, you can instruct your browser, by changing the settings, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. 

3.1.2 Newsletter

If you wish to receive our Newsletter, for example announcements about new offers and actions of EndoGusto, you may enter your email address on the Website. If you sign-up for our Services, you are automatically enrolled to receive our Newsletter.  Your email address is solely used for the purpose of sending our Newsletter and you are removed from the Newsletter recipient list once you choose to unsubscribe. You may be removed from this list, easily and without cost, by selecting the “unsubscribe” link within the email content. You can also send an email to info@endogusto.com.

The legal basis of this processing activity is your consent, and you may withdraw your consent freely at any time, as set out above. If you withdraw your consent, your email will be deleted from the mailing list; however, we retain a record of those that have unsubscribed from our mailing list, as this is required by applicable law provisions.

To send the Newsletter, we use Mailchimp, a US-based company as a services provider of electronic communications. For the privacy policy of Mailchimp you can visit: https://mailchimp.com/legal/privacy/. 

3.1.3 Contact Form

If you wish to communicate with us by using the contact form, you may enter your name, e-mail address, the subject matter you would like to discuss with us and your message in the specified fields. Such personal data is used solely for the purpose of responding to you, and we keep your data only as long as it is necessary to respond to your request. 

3.1.4 Email notifications and messages related to our software

We will occasionally send out email messages or notifications about a change in our Services or EndoGusto Software, or to help you get a better user experience out of it. Your email address is used for the purpose of sending these messages or notifications. To send these emails, we will either use our business email accounts or Mailchimp, a US-based company as a services provider of electronic communications (for the privacy policy of Mailchimp you can visit: https://mailchimp.com/legal/privacy/).

4. Data Collected through the User’s Sign-up for the Services.

A User is a Visitor of our Website that has either signed up for the 14-day free trial or has purchased a subscription and is using the Services offered through EndoGusto Software (referred to as “Services” in this Privacy Policy). A User may be a Business Owner, obtaining a “Business Owner Account”, a Coach, obtaining a “Coach Account” or an Athlete, obtaining an “Athlete Account”. For the types of Accounts offered through the Services, see our Terms of Use.  

For the Business Owner Account, we request and process the following types of personal data: ​​Email and Password, Phone Number, Full Name, Business Name, ​and Last IP Address of the User.

For the Coach Account, we request and process the following types of personal data: ​​Email and Password, Full Name, and ​Last IP Address of the User.

For the Athlete Account, we request and process the following types of personal data: ​​Email and Password, First/Given Name and LastName/Surname (“Full Name”), and ​Last IP Address of the User.

User emails and passwords are maintained in order for Users to log in to their respective accounts that they have signed up for. ​​

4.1 Contact and Billing Purposes

Business Owner emails are used to send billing-related emails when an Account is on a paid subscription, and only to the Business Owners. 

​​The legal basis of these processing activities is the provision of the Services. Therefore, we retain relevant personal data for the duration of the Agreement. After termination or expiry of the Agreement we retain billing data as long as it is required by law for accounting and tax purposes, and in case of a judicial challenge to defend our claims.   

4.2 Processing of Business Name, First/Given Name and LastName/Surname

Business Name, First/Given Name and Last Name/Surname are used for better communication and account management. ​We use the Business Name, First/Given Name and Last Name/Surname in some automated system notifications and emails.

5. Personal Data Processed while using the Services. 

The following types of personal data are collected and maintained, when using the Services, and for the purpose of providing the Services: 

Full Name, email address and telephone number (“Contact Information”), as well as username and password of registered Business Owner Accounts. Email address, password and full name for Coach and Athlete Accounts (“Identification data”). Browser type, operating system, IP address and device information, and time of connection (“Analytical Information”) are collected and maintained for all types of accounts.

Personal Data that is imported into the Services from third parties, namely from platforms (integrations) offering physiological performance analysis software, are also collected and maintained. Personal data integrated in the Services from such platforms are various types of data including, but not limited to heart rate, geolocation data, speed/power, direction, gradient, date, time, and duration of training.

For all types of accounts (Athlete Accounts, Coach Accounts, and Business Owner Accounts) we collect and retain the following data as submitted by each user: full name, age/birth date, selected sport participation, available training days, gender, weight, country, time zone, phone number, units of measurement preference, device connections, threshold heart rate, maximum heart rate, resting heart rate, heart rate zones, threshold power, power zones, threshold speed, and speed zones, an any additional performance metrics that may be tracked.

Specific to Business Owner Accounts, and in addition to the Personal Data collected and maintained as previously mentioned, the following data are requested and retained if provided: business name, business website URL, business logo, job title, and a profile picture.

Specific to Coach Accounts, and in addition to the Personal Data collected and maintained as previously mentioned, the following data are requested and retained if provided: job title and a profile picture.

We process the Last IP Address of each User to acquire geolocation data, namely the city from which the Account was accessed. This information is used to prefill the country and timezone for the Account. This processing activity is necessary for the functionality of the Services. We also process the last IP Address to monitor compliance with our Terms of Use. 

We may also collect, extract, compile, synthesize, and analyze non-personally identifiable data or information (data or information that does not identify an entity or natural person as the source thereof) resulting from your access to the Website and your use and operation of the Services for the purpose of improving the Services. Such analytical data and information is used only in an aggregated form, without directly identifying you, any User, or any other entity or natural person as the source thereof.

Personal data is retained for the duration that any type of account is active. If an Athlete, invited by his/her Coach to the Services, ceases to be connected to the Coach, then the Coach will no longer have access to the Athlete Account. Any User with an Athlete Account, who is not linked to a Coach Account or Business Account will cease to have any access to the platform.

Data is uploaded to the Services by the Business Owner, Coach and the Athlete. Data is also transmitted to the Services by third parties, offering physiological performance analysis software, based on the consent of the data subject for this transmission of data to EndoGusto. Data is being retained for the duration of the Account, in Amazon Data Center in the US (S3 -storage, EC2-cloud server).

6. YOUR RIGHTS

Under the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or other applicable data privacy law, you have certain rights with respect to your personal data: 

6.1 Consent 

Business Owners, Coaches and Athletes provide their consent for the transmission of their data from third-party software, offering physiological performance analysis software. Such consent is collected by the third parties, before activating the transmission. When creating any type of Account (Business Owner, Coach, Athlete), all Users are required to accept the Terms & Conditions providing their consent for personal data to be made available to Business Owners and Coaches for the sole purpose of providing coaching and training services. Business Owners and Coaches also accept the Terms & Conditions that personal data provided by Athletes is to be used for the sole purpose of providing coaching and training services. 

6.2 Right to Withdraw a Consent

Athletes have the right to withdraw their consent, when the legal basis of the processing is consent. Athletes may choose to use the “disconnect” button in the Services, so as to stop integration of personal data from third party platforms. Athletes may also choose to delete their Coach at any time to stop sharing any and all of their personal data, health metrics, and workout history.

Business Owners and Coaches may also withdraw their consent to the integration of personal data from third party platforms with the “disconnect” button assigned to each integration.

Business Owners and Coaches consent to the sharing of the Workouts and Training Plan Libraries created within the business, either by the Business Owner or by the Coaches. Upon termination of a Business Owner-Coach relationship, the shared workouts will remain as part of the intellectual property of the Business and the disconnected Coach Account will no longer have access to the Training Library of the associated Business.. 

6.3 Transparency and Information Right 

Business Owners, Coaches, and Athletes have a right to be informed about the personal data EndoGusto collects about them, for what purposes, and in what way EndoGusto uses them. Our Privacy Policy is accessible via the Website, and should be carefully read before registering for the Services. Business Owners, Coaches, and Athletes are required to accept the Privacy Policy in order to have access to and use of the Services.

6.4 Right of Access

Business Owners, Coaches, and Athletes have a right to access personal data held by EndoGusto about them, as well as information about how EndoGusto uses their data. Business Owners, Coaches, and Athletes have access to their Personal Data, when accessing their own Account.

6.5 Right to Rectification and Right to Erasure

Business Owners, Coaches, and Athletes have a right to require the Company to rectify any inaccurate personal data held in the Services. In particular, they have the right to rectify their personal information, as well as their records, namely their best time per distance, and speed/power corresponding to anaerobic threshold. 

Business Owners, Coaches, and Athletes have the right to request erasure of their personal data, if they are no longer necessary for the purpose collected, if they withdraw their consent to the data processing, unless retention is required by a law provision or is necessary for the establishment of or defense against legal claims. 

Also, without deleting their whole Account, Business Owners, Coaches, and Athletes may delete their planned workouts. Personal data integrated through third party platforms, have to be deleted via third party account, and in synchronization with the Services, so that they can be deleted from the Services, as well. This can be done by disconnecting the activity tracker integrations and any other connected integration.

6.6 Right to object and Right to the restriction of the processing

Business Owners, Coaches, and Athletes have the right to request restriction of processing, if the accuracy of personal data is disputed, for that period of time that allows the Company to verify the accuracy of personal data, or based on any other legitimate reason specified in applicable data protection laws. For example, a User may ask for suspension of the processing of their personal data, if they want us to establish its accuracy or the reason for processing it.

Business Owners, Coaches, and Athletes have a right to object to the processing of personal data in the Services, when such data is being processed to serve a legitimate interest of the Company, such as analytical data. In this case, EndoGusto shall no longer process the personal data, unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. 

Also, Business Owners, Coaches, and Athletes have the right to object to the use of other data processors (onward transfer). In that case, Company shall try to find an acceptable solution within a reasonable time period. If that is not possible, Customer may terminate the Services and Company shall refund Customer any prepaid fees covering the remainder of the Services. 

6.7 Children

You may not create an Account unless you are 18 years of age or older. If you are a parent or guardian of a child, then you may create an Account and allow your child to access that Account and the Services under your direct supervision. You will be solely responsible for all access to and use of the Services and that Account by your child. 

6.8 Complaint to a Supervisory Authority

You have the right to lodge a complaint with a Supervisory Authority, meaning an independent public authority which is established by an EU Member State, pursuant to the GDPR, if you consider that the processing of your personal data infringes the GDPR and other applicable European Union or member state data privacy laws. 

6.9 Right to Opt-Out and Right to Non-Discrimination

If you are a California resident, you should be specifically aware that you have the right to direct a business that sells (or may in the future sell) your Personal Information to stop selling your Personal Information and to refrain from doing so in the future. However, EndoGusto does not sell your Personal Information to any other party. 

If you are a California resident, you should be specifically aware that we will not discriminate against California residents or against any person, if they exercise any of the rights provided in the CCPA, or the GDPR, or any applicable privacy law provision. In particular, we will not deny goods or services; charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; provide a different level or quality of goods or services; or suggest that anybody (including California residents) will receive a different price or rate for goods or services or a different level or quality of goods or services. 

7. Security 

We take appropriate technical and organizational security measures to protect the integrity, accessibility and confidentiality of your data.

8. Sharing your Data – International Data Transfer

We do not share personal data with any third party, unless required to do so by law; in such a case, we shall inform you of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest, e.g. to protect confidentiality of a criminal investigation.

8.1 Sharing your Data with associates

We share personal data with our associates (sub-contractors and sub-processors), solely for the provision of the Services and the provision of this Website. We have taken measures to make sure that our processors and sub-processors provide at least the same level of data protection as we do.

8.2 Social media

You may be able to access third party social media services through our Website by using social media plugins on our Website. In that case URL data may be transferred to this third party, based on this party’s Privacy Policy. Make sure you read the Privacy Policy of said third party, before you proceed to the plugin. 

9. Changes to this Privacy Policy

Our Privacy Policy may change from time to time and any changes to this Policy will be updated so as to describe these changes. You are expected to check our website from time to time to take notice of any changes in this Policy. If you have any further questions about this Policy or how we handle your personal data, please get in touch with us by writing to info@endogusto.com