Privacy Policy

The Data Controller is Phil Lab, with its registered office at Via Pessano 5, 20148 Milan (MI), Italy, VAT No. 14464150961.
Email: info@phil-lab.com · Tel: +39 351 324 15 54

We collect the following personal data:

• Identification data (first name, last name)
• Contact details (email address, phone number)
• Content of messages sent via the contact form
• Automatically collected browsing data (IP address, browser, pages visited) — see our Cookie Policy
• Any health-related data voluntarily provided during a consultation (processed in accordance with Art. 9 GDPR)

• Responding to contact requests and managing initial consultations (Art. 6.1.b GDPR — pre-contractual measures)
• Providing personal training, Pilates, and clinical impact exercise programmes (Art. 6.1.b GDPR — performance of a contract)
• Complying with tax and accounting obligations (Art. 6.1.c GDPR — legal obligation)
• Processing health-related data, where provided, based on your explicit consent (Art. 9.2.a GDPR)

Data is processed using IT and electronic tools, with appropriate security measures to ensure its confidentiality, integrity, and availability. Data is not disseminated or subject to automated decision-making processes.

Contact data is retained for the time necessary to respond to your enquiry and for up to 24 months after the last contact. Data related to contractual relationships is retained for 10 years as required by tax law. Health-related data is retained for the duration of your programme and deleted upon your request.

Your data may be shared with: appointed professionals (e.g., our accountant) and IT service providers (hosting, email, booking platform) who act as Data Processors under Art. 28 GDPR. Your data is not transferred outside the EU, except to providers who guarantee adequate protection measures.

You may, at any time, exercise your rights under Articles 15-22 of the GDPR. These include the right to access, rectify, or erase your data, restrict its processing, request data portability, object to processing, and withdraw consent. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

To exercise these rights, please write to: info@phil-lab.com

This policy may be updated from time to time. Any substantial changes will be communicated on our website.