GDPR

Changes introduced by the GDPR

The new General Data Protection Regulation takes effect on 25 May 2018, replacing previous guidelines with a general regulation. It applies to companies and individuals in the EU collecting, processing or storing sensitive or personal data, including fitness, training and therapy. Businesses must follow new procedures for consent to data storage, information provision and transfer at a client’s request. The GDPR provides substantial penalties for non-compliance, potentially up to 4% of annual revenue.

As a software developer, we are subject to these rules too and have prepared for compliance. As your partner, we also want to help your business prepare appropriately by 25 May.

Data-processing agreement

A data-processing agreement is now available to download in the Control Center. You act as controller and appoint us as the software company to process your clients’ data on your behalf. The prepared agreement requires your company details and signature; please email a signed copy back to us.

The agreement covers our GDPR responsibilities, including identifying data groups and categories, legal aspects of processing, technical and organisational measures, and staff training and confidentiality commitments.

Our internal processing records and checklists support our preparation, reflected in the prepared data-processing agreement provided to you.

Declaration of consent

We have also prepared a consent declaration for storing member or patient data. Use it for your records or adapt excerpts to your design and have it signed. This is an essential step from 25 May 2018.

Our next update will show in the trainer software and Control Center which clients have not yet provided consent. Optionally, entering sensitive data can be blocked until consent has been signed.