Limited click statistics
The built-in CCMS feature can register page views and active contact or link clicks when the site uses the service on its own HTTPS address. It uses no cookies or persistent visitor identifier. Events describe the page, device category and event type; contact details and link destinations are not sent in the statistics payload.
Hosting and security
Hosting and security providers may process technical information to deliver the website, prevent abuse and troubleshoot. Cloudflare Turnstile may protect forms. It is not a separate consent feature.
When you contact mash23fitness
The website enquiry form collects your name, email, phone and a brief description of your goal. mash23fitness AB uses these details to respond and contact you personally. Information provided by email or phone is used to handle your enquiry in the same way.
An enquiry is not a purchase. Do not include medical information here. The detailed questions and agreement process are handled later directly with Mandla, with separate information before those steps.
Responsible business and your rights
The responsible business is mash23fitness AB, company registration number 559601-1774. Use the contact details below for questions about your information or requests for correction, deletion or other handling where applicable rights allow it. You may also complain to the Swedish Authority for Privacy Protection.
If the website changes
This information needs updating when new features, providers or forms of personal data processing are introduced. The business’s full privacy information for coaching is provided before relevant steps in the client journey.
Coaching privacy information – review draft
The following sections are based on Mandla’s supplied coaching document. They describe the pre-launch material and must be checked against actual systems and procedures before use. Website contact and subsequent coaching are separate steps.
1. Responsible business
mash23fitness AB, registration number 559601-1774, Tellusborgsvägen 31, 126 32 Hägersten. Email: kontakta-oss@mash23fitness.com. Phone: 0708-565645. This business is responsible for the processing described in the supplied coaching privacy information.
2. Personal information processed
Depending on the service used, information may include contact details, age and height; goals, training history, routines, daily activity and recovery; nutrition preferences, allergies, intolerances and restrictions; weight, measurements, progress photographs and training results; check-in answers and communications; individual programmes, calorie and macro targets and coach notes; and relevant information about injury, pain, limitations or health that the client provides to adapt coaching.
3. Sources of information
Information mainly comes directly from the client through the enquiry, onboarding, HubFit, weekly check-ins, progress tracking and ongoing communication. Some information is created during coaching, such as programmes, calculated calorie and macro goals and coach notes.
4. Purposes
Information is used to administer the client relationship and agreement; deliver, personalise and review coaching; prepare and adjust training and calorie/macro goals; follow progress and provide personal feedback; communicate and handle practical coaching questions; and manage payments, agreement issues and applicable legal obligations. New incompatible purposes require appropriate legal support and, where needed, new information or consent.
5. Legal basis
The supplied document describes agreement performance as the usual basis for information necessary to enter into or deliver coaching, and legal obligations for information that must be processed or retained by law. Health information requires a separate express consent for a specified coaching purpose. Consent can be withdrawn without affecting the lawfulness of prior processing. Marketing use of client images, testimonials or identifiable results is separate from the coaching agreement and requires separate voluntary permission where consent is relied on.
6. Separate consent for relevant health information
A separate active consent is described for health information supplied for coaching, including injury, pain or limitations, to adapt training and coaching. The client must understand that consent can be withdrawn. It must not be preselected and must be documented. The website enquiry only concerns first contact and does not replace this separate choice.
7. Storage
Coaching information is mainly held in HubFit, including onboarding, programmes, calorie/macro targets, check-ins, weight, measurements, progress photographs and ongoing follow-up. A limited internal Excel register may hold information needed for administration, such as name, start date, status, goals, calculated values, recent weight/waist and check-in planning. Detailed injury history, complete onboarding answers and progress photographs should not normally be copied into Excel.
8. Access
Mandla has the principal access to client information. Suppliers necessary to provide the service, including HubFit and technical providers, may process information. Involvement in the business alone does not justify access. Access is limited to people and suppliers with a clear need and legal support. Appropriate data protection terms and any required processor agreements must be in place.
9. HubFit and international processing
HubFit is the digital coaching platform. Before launch, current data protection terms, the processor agreement, subprocessors and any transfers outside the EU/EEA need verification. That review has not yet been completed. The provider’s actual processing and applicable transfer safeguards must be described in the final information.
10. Retention
The supplied material sets a planned general period of active coaching plus no more than 12 months afterwards for coaching information in HubFit and Excel, followed by deletion or anonymisation when no longer needed. Some information may require longer retention by law or another valid legal reason, such as accounting records. Material separately approved for marketing follows that permission and not automatically the coaching profile’s 12-month rule. Technical backups may retain information until normal deletion or overwrite cycles complete.
11. Security
Appropriate technical and organisational measures are needed against unauthorised access, loss, alteration or disclosure. Excel must be stored in a protected environment with restricted access. Accounts and devices used for client information require strong authentication and, where available, two-factor authentication. Only information needed for coaching and administration should be collected and retained. Practical implementation is a pre-launch dependency.
12. Rights
Depending on the circumstances, GDPR rights may include access, correction, deletion, restriction, portability or objections to certain processing. Consent-based processing permits withdrawal of consent. Deletion is not absolute where law or another valid legal reason requires retention. Contact Mandla at kontakta-oss@mash23fitness.com to make a request; identity may need to be verified before handling it.
13. Complaints
A client who believes information is processed contrary to data protection rules may contact Mandla and may complain to the Swedish Authority for Privacy Protection (IMY).
14. Updates
Privacy information may change when processing, systems or applicable rules change. Material changes affecting clients should be communicated appropriately.