Privacy Policy
Last Updated: July 2026
1. Who We Are (Data Controller)
The data controller responsible for your personal information is the legally registered entity operating this website:
ampowerfit – De Jesus Marques Andreia Sofia
Siège social (Headquarters): 2, rue du X Septembre, L-4320 Esch-sur-Alzette, Luxembourg
Studio (Training Location): 18 Rue de l'École, L-4103 Esch-sur-Alzette, Luxembourg
R.C.S Luxembourg n°: A44526
Autorisation d’établissement n°: 10155824 / 0
TVA n°: LU35139018
Telephone: +352 691 655 016
In this document, "we", "us", or "our" refers to ampowerfit – De Jesus Marques Andreia Sofia.
2. What Personal Data We Collect (Data Map)
We only collect the minimum data required to provide our services. The table below maps exactly what we keep, why, where it is stored, and for how long:
| Data | Why we use it | Where it is stored | How long we keep it |
|---|---|---|---|
| Name | Identify you on a booking, testimonial or discount request. | Our database (bookings, testimonials). | Until you request erasure. |
| Email address | Confirm and manage your booking, send your discount code, verify it is really you. | Our database (bookings; testimonials; and a short “verified emails” list so returning clients skip re-verifying), plus the emails we send you. | Until you request erasure. |
| Phone number (booking, optional) | So the coach can reach you about your session. | Our database (bookings). | Until you request erasure. |
| Booking message (optional) | Any note you choose to add to a booking. | Our database (bookings). | Until you request erasure. |
| Testimonial & rating | Shown publicly on the site next to your name. | Our database (testimonials). | Until you request removal. |
| Technical metadata (IP address, browser / User-Agent) | Security and fraud prevention. Not linked to your identity. | Server log files only. | Automatically rotated and overwritten; never archived. |
Discount requests and contact-form messages are sent to us by email only — they are not saved in our booking database.
Cookies and similar technologies
Essential cookies run without consent — a security token (anti-fraud / CSRF), your language choice, the coach login session, and a small cookie that records your cookie preferences. They do not track you across other websites.
Analytics & advertising cookies load only if you accept them in our cookie banner: Google Analytics (to see how the site is used), and Google Ads and the Meta (Facebook) Pixel (to measure and improve our advertising). These set cookies in your browser and share data with Google and Meta — see section 5. Nothing in this category runs until you opt in.
You can change or withdraw your choice at any time via “Cookie settings” in the page footer. Until you accept, these trackers stay switched off.
3. Why We Collect It and Our Legal Basis
Under the General Data Protection Regulation (GDPR), we must have a lawful basis for processing your data. We rely exclusively on your explicit consent (Article 6(1)(a) GDPR) for the following purposes:
- Bookings: To manage your booking, confirm your place, and send you the related confirmation, reminder and cancellation emails.
- Discount Offers: To send the requested discount code directly to your email.
- Testimonials: To display your feedback and name on our website.
You provide this consent by actively checking the consent box before submitting the relevant form.
4. Where and How Your Data is Stored
The personal data you give us — your bookings, testimonials and verified-email list — is stored on our own infrastructure in Luxembourg, not in a third-party cloud database. A few external providers process specific data only to run the service (email delivery, and — with your consent — analytics and advertising); these are listed in sections 2 and 5.
- Secure Infrastructure: All data is securely stored within a protected, locally managed database rather than on public cloud servers.
- Location: The servers hosting your data are physically located entirely within Luxembourg.
- Security Measures: We employ strict security protocols to prevent unauthorized access. All communication between your browser and our website is encrypted using standard secure protocols (HTTPS), and our database infrastructure is shielded from public access.
5. Data Sharing & Third-Party Processors
We never sell or rent your personal data. We share it only with a small number of trusted providers ("processors"), strictly to run this service and only the data each one needs:
- Email delivery — Google (Google Workspace / Gmail). We send booking, verification, reminder, testimonial and discount emails from a Google Workspace mailbox, so your name and email address pass through Google to deliver them.
- Website analytics — Google (Google Analytics). Only if you accept analytics cookies: how the site is used (pages viewed, approximate location, device) to help us improve it.
- Advertising — Google (Google Ads) and Meta Platforms (the Facebook / Instagram Pixel). Only if you accept marketing cookies: to measure and target our advertising.
Analytics and advertising load only after you consent, and you can switch them off any time via “Cookie settings” in the footer.
International transfers: Google and Meta may process this data outside the EU, including in the United States, under the European Commission's Standard Contractual Clauses and adequacy decisions. See Google's Privacy Policy and Meta's Privacy Policy.
6. Data Retention
Exact periods are shown in the data map (section 2). In short:
- Bookings: Your name, email, phone and message are kept to manage your sessions, until you ask us to delete them.
- Testimonials: Your name and feedback remain on the website as long as the testimonial is active, or until you request its removal.
- Verified emails: Your email sits in a short list (so you skip re-verifying) until you request erasure.
- Discounts & contact messages: Sent by email only; not stored in our database.
- Technical logs: Automatically rotated and overwritten; never archived long-term.
7. Your GDPR Rights
You have complete control over your data. Under the GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure (Right to be Forgotten): Ask us to delete everything we hold about you — all of your bookings, testimonials and your entry in the verified-emails list — from our database and the website.
- Withdraw Consent: Withdraw your consent at any time (e.g., asking us to take down a previously approved testimonial).
How to request full deletion of your data
Contact us by WhatsApp or phone at +352 691 655 016, or by email at andreia@ampowerfit.lu.
Because you may have used more than one email or phone number, please give us the name(s), email(s) and phone number(s) you used, so we can find and delete every matching record. We will process your request within one month.
8. Right to Lodge a Complaint
If you feel your data has been mishandled, you have the right to lodge a complaint with the Luxembourg data protection authority:
Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Esch-sur-Alzette, Luxembourg
Website: www.cnpd.lu