Privacy Policy for the Gatech Global Gym Experience Survey

Effective Date: March 11, 2026

1. Introduction

Gatech Oy ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you participate in the Gatech Global Gym Experience Survey and the associated Prize Draw.

2. Data Controller

The Data Controller responsible for your personal data is:

• Company: Gatech Oy 
• Business ID: FI33951689 
• Address: Varkkavuorenkatu 25 A 15, 20320 Turku, Finland 
• Contact Email: myynti@gatech.fi

3. What Data We Collect

When you participate in our survey and prize draw, we collect the following types of data:

• Survey Responses: Your answers regarding your gym experiences and entry behaviors. This data is collected purely for market research and is fully anonymized.
• Contact Information: Your email address, which is collected only if you choose to enter the prize draw.

4. Purpose and Legal Basis for Processing

We process your data for the following purposes:

• To conduct market research: We analyze anonymized survey responses to understand trends in gym security. The legal basis for this is our legitimate interest in conducting B2B market research.
• To administer the Prize Draw: We use your email address to select a winner, contact them, and deliver the prize. The legal basis for this is your consent provided when submitting the form, and the performance of a contract (the Official Rules of the draw).

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. Your email address will never be shared with any gym chains or external marketing agencies.

We may share your data only with strictly necessary third-party service providers (e.g., the survey hosting platform or Meta Platforms, Inc., if the survey is hosted via Meta Lead Ads) who act as data processors under legally binding agreements to keep your data secure.

6. Data Retention

• Email Addresses: We adhere to a strict data minimization policy. Your email address is stored securely and used exclusively for the administration of the prize draw. Once the winner has been successfully contacted and the prize awarded, the entire database of participant emails will be securely and permanently deleted.
• Survey Data: The answers you provide in the survey are decoupled from your email address. Aggregated, anonymized statistical data (which cannot identify you) may be kept indefinitely for ongoing research and sales presentations.

7. International Data Transfers

Our operations are based in Finland (EU). If you are participating from the United Kingdom or the United States, your data will be transferred to and processed in the EU. We ensure that such transfers comply with the GDPR and UK GDPR standards, applying appropriate technical and organizational safeguards.

8. Your Privacy Rights

Under the GDPR and other applicable privacy laws, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your email address prior to the conclusion of the prize draw (note: this will withdraw your entry from the draw).
• Right to Withdraw Consent: You can withdraw your consent for us to process your email address at any time.
• Right to Lodge a Complaint: You have the right to file a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) or your local supervisory authority if you believe your rights are being violated.

To exercise any of these rights, please contact us at myynti@gatech.fi

9. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes in legal requirements or our processing practices. The latest version will always be available via the link provided in our promotional materials.