Privacy Policy -

Privacy Policy

ahmed mahdy

3 elmagd street

4470351 CAIRO

VAT: 759129533

At Ahmed Mahdyj, we respect your right to privacy.

This Privacy Policy describes our use of your personal information that we collect about you and your rights in relation to the information. “Personal Information” means information that identifies you as an individual or is able to identify you as an individual.

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the data controller is “Ahmed Mahdyj” with email address ahmedmahdyj@icloud.com.

Please note that we use the Beefit Tracker app to provide our digital services throughout. When we refer to “our app” in this document, we are talking about the Beefit Tracker app, which is developed and owned by Benefit Technologies ApS.

INFORMATION COVERED BY THIS PRIVACY POLICY
1. This Privacy Policy covers all personal information collected and used by us.
2. This includes your name, age, postal address, email address, telephone number, credit card number, details of the preferences you express to us, your comments and questions, as well as technical information from the devices you use to access our website. It may also include information about your body and well-being, including height, weight, body stats, exercise, mood, meals, nutrition and general health and wellbeing, which you provide on this website or when using our app, as well as images uploaded by you.
INFORMATION COLLECTED BY US
1. We (and our service providers) collect this personal information from you when you:
  - Purchase products or services from us, including a coaching subscription.
  - Submit information through this site.
  - Create an account with us or otherwise sign up for our Services.
  - Choose to receive or otherwise receive marketing from us or our representatives.
  - Choose to participate in customer satisfaction surveys.
  - Communicate with us through third party social media websites.
  - Contact us, correspond with us or otherwise provide us with information.
2. We also work closely with third parties (such as business partners and analytics providers) and may receive other personal information about you from those third parties, which we may combine with the information you have provided to us. We process all data we obtain from such third parties in accordance with this Privacy Policy.
3. When you visit our website, we (and our service providers) may use cookies and other technologies to automatically collect the following information about you:
  - Technical information, including your IP address, your login information, browser type and version, device identifier, location and time zone setting, browser plugin types and versions, operating system and platform, page response times and download errors.
  - Information about your visit, including the websites you visit before and after our website and products you have viewed or searched for.
  - Length of visit to specific pages, page interaction information (such as scrolling, clicks, and mouse ratios), and methods used to leave the page.
HOW WE USE THE INFORMATION COLLECTED
1. We use the personal information we collect from and about you for the following purposes:
  - To create and manage your online account.
  - To provide you with our Services, which may include:
    - delivery of tailored meals and training plans.
    - monitoring changes or adaptations in your body to improve your coaching process, as well as to combine information we receive and collect (e.g. from updates you provide about your body transformation) to give you a more personalized experience, as well as to make informed decisions about future coaching to facilitate your course in the best possible way. This additionally gives us important statistics that we use to better understand the effect of different approaches to dieting and training.
  - To provide you with information about our products and services (provided that you have either consented to this or that we are otherwise permitted to contact you for marketing purposes).
  - To process your payments.
  - To notify you of changes to our Services that may affect you.
  - To comply with our legal obligations for bookkeeping.
2. The lawful means of processing that we use to collect, use, transfer or disclose your ordinary personal information include:
  - Performance of our contractual obligations to you (pursuant to Art. 6 (1) (b) GDPR).
  - Our legitimate interests (pursuant to Art. 6 (1) (f) GDPR), which include: improving our offers and services as a company; personalising our services and interactions with you to better meet your needs as a customer; and fraud detection and prevention.
  - Compliance with our legal obligations (pursuant to Art. 6 (1) (c) GDPR).
  - To the extent we send you information about our products and services for marketing purposes, we will either ask for your consent (in accordance with Art. 6 (1) (a) GDPR before we process your data in this way, or process the data based on a balancing of interests (in accordance with Art. 6 (1) (f) above).
3. Images that you choose to share with us are processed by us solely to follow your progress and will only be shared on our website and social media if you wish and expressly consent to this.
USE OF CONSENT FOR THE PROCESSING OF HEALTH DATA
1. In order to be able to provide tailored diet and exercise plans to you, we may process certain health data provided by you, including information about allergens, information that may reveal obesity or specific injuries, or other relevant information related to your physical or mental health. The legal basis for our processing of your health data is Article 9(2)(a). Cf. Article 6(1)(b) GDPR, which means that we will ask you for your explicit consent to allow us to process your health data before you become a client of ours.
2. You can withdraw your consent to us processing your health data at any time. However, you should be aware that if we are prevented from processing relevant personal data, including information about allergens, information that may reveal obesity or specific injuries, or other relevant information related to your physical or mental health status, we will not be able to provide our services (customized meal and exercise plans based on your unique needs).
PROCESSING OF DATA BY THIRD PARTIES, INCLUDING BEEFIT APS
1. The security of your data is extremely important to us. We do not sell your personal information to third parties, and we will never do that.
2. Access to your personal information is only granted to carefully selected third parties, including:
  - Our service providers who help us provide our services to you, such as our infrastructure and IT service providers. These include Beefit and Stripe, which support our business by providing technical infrastructure services, analyzing product performance, providing technical assistance, and facilitating payments. We should therefore note that Beefit ApS may process your personal data as a data processor on our behalf. However, Beefit ApS also acts as an independent data controller. This means that the data you collect will be available in the Beefit Tracker app, even after your course has ended. Your data is only available to you when your course is over, and you can, at any time, delete all data from the app. You can read more about Beefit’s processing of your personal data (including cookies) https://www.beefit.io/privacy-policy.You can read more about Stripe’s processing of your personal data as a data processor here: https://stripe.com/en-dk/privacy.
  - Our regulators or other organizations to which we are required to disclose your personal information by legal requirements.
  - Third parties in connection with corporate transfers, such as in connection with a reorganization, restructuring, merger, acquisition or transfer of assets, provided that the receiving party agrees to process your personal information in a manner consistent with this Privacy Policy.
3. Our website may from time to time contain links to and from our business partners or affiliated websites. If you follow a link to one of these sites, please note that these sites have their own privacy notices and that we have no control over how they may use your personal information. You should check the privacy policies of third-party websites before submitting any personal information to them.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

1. Your personal data will only be retained for as long as necessary for the purposes for which it was collected and only to the extent permitted by applicable law. When we no longer need your information, we remove it from our systems and records and/or take steps to immediately anonymize it so that you can no longer be identified from it (unless we need to retain your information to comply with legal or regulatory obligations to which we are subject).
2. We comply with the retention periods set out in the table below. As a general rule, deletes or we anonymise your personal data in accordance with the deadlines set out below, unless it is necessary that we continue to store it, e.g. for exceptional cases or the like. However, keep in mind that your data will continue to be available in the Beefit Tracker app unless it deletes it here.

Processing purposes	Retention period
Managing your account	12 months after your last activity
Providing coaching services	12 months after your last activity
Marketing purposes	12 months after your last activity
Payments	60 months after your last activity
Emails to/from you	6 months after your last activity
Mandatory record keeping	60 months after your last activity

SUMMARY OVERVIEW

1. Please see the summary table below with the purposes, legal basis and applicable retention periods for the various processing activities as described in the sections above.

Processing purposes	Legal basis	Retention period
Managing your account	GDPR Article 6(1)(b)	12 months after your last activity
Providing coaching services	GDPR Article 6(1)(b) and for health data the legal basis is Article 9(2)(a) GDPR cf. Article 6(1)(b) GDPR	12 months after your last activity
Marketing purposes	GDPR Article 6(1)(a)	12 months after your last activity
Payments	GDPR Article 6(1)(b)	60 months after your last activity
Emails to/from you	GDPR Article 6(1)(b)	6 months after your last activity
Mandatory record keeping	GDPR Article 6(1)(c), as we are obliged to store e.g. bookkeeping material (which may contain personal data)	60 months after your last activity

DATA TRANSFERS TO THIRD COUNTRIES
1. The personal information we collect from you may be transferred to and stored at a destination outside the European Economic Area (“EEA”). It may also be processed by staff working outside the EEA who work for us or for one of our service providers.
2. We will take all steps reasonably necessary to ensure that your personal information is processed securely and in accordance with this Privacy Policy and applicable data protection laws, including, where applicable, entering into EU Standard Contractual Clauses (or equivalent measures) with the party outside the EEA receiving the personal information.
PROTECTION OF YOUR INFORMATION
1. We have implemented technical and organisational security measures in an effort to protect personal data that we hold and to ensure the necessary control thereof. Such implemented measures include restricting access to personal information so that it can only be accessed by employees and authorized service providers who need to know such information for the purposes described in this Privacy Policy, as well as other technical, administrative and physical security measures.
2. While we strive to always protect our systems, websites, activities and information from unauthorised access, use, modification and disclosure due to the internet’s status as an open global means of communication, as well as other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be completely safe from attacks by outsiders; such as hackers.
3. In order to provide you with increased security, certain personal information stored in your online account is only accessible through your username and password. You are responsible for maintaining the appropriate confidentiality of your online account information and we strongly recommend that you do not disclose your username or password to anyone. We will never unsolicited request your password from you.
  
  . Please notify us immediately regarding unauthorized use of your online account information or suspected breach of security (see “Contact Us” section below).
YOUR RIGHTS
1. You have various rights in connection with our processing of your personal data:
  
  a) Access: You have the right to request a copy of the personal data we process about you, which we will provide you with back in electronic form.
  
  b) Rectification: You have the right to have incomplete or inaccurate personal information that we process about you corrected.
  
  c) Erasure: You have the right to request that we delete personal information that we process about you, unless we are not required to do so, if we need to retain such data to comply with a legal obligation or establish, exercise or defend legal claims.
  
  d) Restriction: You have the right to request that we restrict our processing of your personal information if you believe that such data is inaccurate, our processing is unlawful, or that we no longer need to process such data for a specific purpose. If we are unable to delete the data due to a legal or other obligation, or because you do not want us to delete it, we will mark stored personal information for the purpose of restricting certain processing to certain purposes in accordance with your request, or otherwise restricting processing.
  
  e) Objection: Where the legal ground for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will comply with your request unless we have compelling legitimate grounds for the processing that override your interests and rights or if we need to continue processing the data for the establishment, exercise or defence of a legal claim.
  
  f) Withdrawal of consent: Where we process certain personal information based on your consent, you have the right to withdraw your consent, including with respect to direct marketing. In relation to the consequences of your withdrawal of consent for us to process your
  
  g) Health data (health data): See above under “Use of consent to process your health data”.
2. If you wish to exercise one or more of the above rights, please contact us with your request by ahmedmahdyj@icloud.com and include your name, email and postal address as well as your specific request and other information we may need to deliver or otherwise process your request.
3. In certain situations, we may refuse to act on your requests or we may impose restrictions on your rights as permitted by law. Before we can provide you with information or correct inaccuracies, we may ask you to verify your identity and/or provide other details to help us handle your request. To exercise your rights, please contact us using the contact details below in section 11 “CONTACT US”.
4. In all cases, you have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. If you are a resident of Denmark, the Danish Data Protection Agency can be contacted through their website on https://www.datatilsynet.dk/.
CONTACT US
1. If you have any questions regarding this privacy policy and/or regarding the privacy policy of our service providers, please contact us by: ahmedmahdyj@icloud.com.