Gym and VIOFIT Data Processing Agreement
This operational DPA describes how VIOFIT processes personal data on a gym's instructions. Commercial onboarding should attach the final signed entity details and order form.
Roles and instructions
For member and staff records entered by a gym, the gym determines the service purpose and VIOFIT processes the data to provide the contracted software, security, backup and support. VIOFIT may separately control account-security and legal-compliance records.
Confidentiality and security
VIOFIT applies tenant isolation, role checks, private storage, encrypted transport, secret protection, rate limits, logs and controlled administrative access. Personnel and processors must handle data only for authorised duties.
Sub-processors
VIOFIT maintains a current processor register and uses providers only for defined operational purposes. Material changes will be reflected in the register and applicable notices.
Requests, deletion and incidents
The gym and VIOFIT will cooperate on verified access, correction, deletion and guardian requests. VIOFIT will investigate security incidents, contain access, preserve evidence and provide legally required notices.
Return and termination
On verified closure, VIOFIT deletes or anonymises operational data subject to approved legal retention, backup expiry and documented legal holds.
Contact us
For privacy requests, grievances or concerns, contact: [email protected]