This page explains what personal information this website collects, why I use it, how long I keep it and what you can ask me to do with it. It covers the website. Once coaching starts, the Coaching Agreement and the health-screening form explain how your information is handled from there.
Who is responsible
I am Ruben Veres, a personal trainer working as a sole trader in Limassol, Cyprus. I am the data controller for the personal information collected through this website.
You can reach me at hello@rubenveres.com or on WhatsApp or by phone at +357 99 156955.
I have not appointed a Data Protection Officer. Privacy enquiries can be sent directly to me at hello@rubenveres.com.
What this website collects
The assessment request form asks for:
- your name
- your WhatsApp number or phone number
- your email address, which is optional
- what you would like help with, in your own words
- your preferred training area
- your preferred time of day
Please don’t put health details in the free-text box. The form doesn’t ask for them, and health screening happens separately before your first session.
Technical information
The website is hosted by Netlify. As with any web host, Netlify’s servers record technical information such as your IP address, your browser type and the pages requested. A form submission carries that technical information with it, which is what allows Netlify to filter spam and keep the form working.
What the website does not do
The site sets no cookies and uses no local storage. There is no analytics, no advertising and no tracking of any kind. Fonts and photographs are served from this website rather than from a third party, so simply reading these pages does not report your visit to anyone else. That is also why you see no cookie banner: there are no cookies to consent to.
Why I use it, and the legal basis
- Replying to your request and arranging your assessment
- GDPR Article 6(1)(b): steps taken at your request before entering into a contract.
- Running the coaching relationship if you go ahead: scheduling, communication and invoicing
- GDPR Article 6(1)(b): performance of our contract.
- Keeping the website and the form secure, and filtering spam
- GDPR Article 6(1)(f): my legitimate interest in an enquiry form that works and isn’t abused.
- Keeping accounting and tax records
- GDPR Article 6(1)(c): a legal obligation in Cyprus.
I don’t use your details for marketing and I don’t add anyone to a mailing list. If that ever changed, I would ask for your consent first, and you could withdraw it at any time.
Who else handles it
- Netlify hosts the website and receives the form submissions. A submission is stored in my Netlify account and a copy is emailed to me.
- My email provider handles that notification and any email we exchange.
- WhatsApp handles our messages if you contact me there, or if I reply there, under its own terms. The same applies to Instagram or LinkedIn if you message me on those services.
I don’t sell your information and I don’t share it with anyone else, unless I am legally required to.
Information sent outside the EEA
Netlify is a United States company, so what you send through the form may be stored or processed outside the European Economic Area. Where Netlify processes personal data outside the EEA, international transfers are handled under the safeguards provided in Netlify’s data-processing terms, including applicable adequacy frameworks and Standard Contractual Clauses.
If you message me on WhatsApp, Instagram or LinkedIn instead, those messages are handled by those companies under their own terms and their own transfer arrangements.
How long I keep it
- Enquiries that don’t lead to coaching, including ones I answer and hear nothing back on: up to 12 months after our last contact, then deleted, including the copy held in my Netlify account.
- Clients: for as long as you are a client, and after that for as long as I need it for accounting, tax and legal purposes under Cyprus law.
If you would like your enquiry deleted sooner, just ask.
Your rights
Under the GDPR you can ask me to give you a copy of the information I hold about you, correct it, delete it, restrict how I use it, or provide it in a portable format where that applies. You can object to my using it where I rely on legitimate interests. Where I rely on consent, you can withdraw it at any time.
Email hello@rubenveres.com and I will reply within one month. There is no charge for this.
If you are not happy with how I have handled your information, you can complain to the Cyprus supervisory authority: the Office of the Commissioner for Personal Data Protection in Nicosia, at www.dataprotection.gov.cy, commissioner@dataprotection.gov.cy, telephone +357 22 818 456.
Health information is kept separate
This website never asks for health information. Before your first session you complete a health-screening form and the Coaching Agreement. Health information is a special category of personal data under the GDPR, so it is collected with your explicit consent, kept apart from the website, used only to coach you safely, and not passed to anyone else without your permission.
Security
The website is served over an encrypted connection. Access to enquiries is limited to me and the service providers needed to operate the website and email, using password-protected accounts. Those providers are the ones listed under Who else handles it.
Changes to this policy
If this policy changes, the updated version appears on this page with a new date at the top. This version is dated 24 September 2026.