Privacy Policy

The controller of personal data of: 1) persons visiting and using the website available at https://www.greenfiton.com/ (the "Website"); 2) persons using the web version of the application available at https://app.greenfiton.com/ or the GreenFitOn mobile application available on Google Play and the App Store (the "Application"); 3) persons who contact GreenFitOn via email, the contact form, the Application, or other available communication channels; 4) persons who follow GreenFitOn's profiles on social media platforms such as Facebook, Instagram, TikTok, or YouTube and interact with them; 5) persons who subscribe to our newsletter is: Sylwia Subik, conducting business under the name Polska Akademia Trenerów i Instruktorów Sportu GREEN WAY SYLWIA SUBIK, with a registered business address and correspondence address at: al. Niepodległości 40, lok. 15, 23-204 Kraśnik, Poland, Tax ID (NIP): 7151587113, REGON: 060508080, email: kontakt@greenfiton.com (hereinafter "GreenFitOn", "we", "our", "us" or the "Controller"). Any questions, requests, and complaints regarding the processing of personal data should be directed to: kontakt@greenfiton.com, or in writing to: Sylwia Subik, conducting business under the name Polska Akademia Trenerów i Instruktorów Sportu GREEN WAY SYLWIA SUBIK, al. Niepodległości 40, lok. 15, 23-204 Kraśnik, Poland, marked "GDPR".

We obtain your personal data directly from you when you: • visit or use the Website; • use the Application, including creating an Account, filling out the Survey, purchasing a Subscription, reporting Illegal Content, or exercising other rights available to you under applicable law; • contact us via email, the contact form, the Application, or other available communication channels; • follow and interact with our social media channels; • subscribe to our newsletter.

We process your personal data for the following purposes: 1) persons visiting and using the Website: • ensuring the proper technical functioning of our Website (Art. 6(1)(f) GDPR); • maintaining statistics and analyzing how the Website is used in order to maintain and improve it (Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR). Providing personal data is necessary to use the Website to the extent such data is required for it to function properly. Providing data used for analytical purposes is voluntary and depends on giving consent where such consent is required. 2) persons using the Application: • entering into and performing a contract for the provision of services rendered electronically via the Application, Services, or Subscription Services (Art. 6(1)(b) GDPR); • matching a training path based on the answers you provide in the Survey (Art. 6(1)(a) and Art. 9(2)(a) GDPR); • ensuring the proper functioning of our Application (Art. 6(1)(f) GDPR); • analyzing how the Application is used to better understand your needs and improve the Application's functioning (Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR); • handling reports, questions, and communication with the User (Art. 6(1)(f) GDPR); • establishing, pursuing, or defending claims related to use of the Application (Art. 6(1)(f) GDPR). Providing your personal data is necessary to use the Application. Providing answers in the Survey is voluntary, but failure to provide them may prevent or limit our ability to select an appropriate Training Path for you. 3) persons who contact GreenFitOn via email, the contact form, the Application, or other available communication channels: • responding to inquiries received (Art. 6(1)(f) GDPR). Providing your personal data is necessary to respond to your inquiries. 4) persons who follow GreenFitOn's profiles on social media platforms such as Facebook, Instagram, TikTok, or YouTube and interact with them: • informing you about the services we provide and building a positive image of GreenFitOn (Art. 6(1)(f) GDPR); • responding to inquiries and comments received via social media (Art. 6(1)(f) GDPR). Providing your personal data is necessary to follow our social media profiles and to receive responses to your inquiries and comments via those media. 5) newsletter subscribers: • informing you about the services we provide and building a positive image of GreenFitOn (Art. 6(1)(a) GDPR or Art. 6(1)(f) GDPR); • direct marketing of GreenFitOn's services (Art. 6(1)(a) GDPR or Art. 6(1)(f) GDPR). Providing your personal data is necessary to subscribe to our newsletter.

For: 1) persons visiting and using the Website • we process: IP address, data stored in cookie files; 2) persons using the Application • we process: first and last name, email address, Account data, data you provide in the Survey (including age, weight, height, sex, training goal, fitness level, training location, training days, information about diet, illnesses, and injuries, if you provide them to us), and other information you voluntarily provide to us; 3) persons who contact GreenFitOn via email, the contact form, the Application, or other available communication channels • we process: first and last name, email address, phone number, or other information you voluntarily provide to us; 4) persons who follow GreenFitOn's profiles on social media platforms such as Facebook, Instagram, TikTok, or YouTube and interact with them: • we process: first and last name or nickname, other information that is publicly available on your profile or that you voluntarily provide to us; 5) newsletter subscribers • we process: first and last name, email address.

We retain the personal data we obtain for the following periods: 1) persons visiting and using the Website • information about IP addresses is retained for as long as it remains in the server logs where the Website is hosted, i.e., for 30 days from the date of the visit to the Website; • information contained in cookie files is retained in accordance with the retention periods specified for individual cookies in the table found in the cookie banner; • personal data needed to defend against or pursue claims is retained for as long as required by the statutory limitation periods for claims; 2) persons using the Application • Account-related data is retained for the duration you hold an Account, and for 7 days after Account deletion, unless further retention is necessary under applicable law (including tax and accounting law) or to establish, pursue, or defend claims; • Survey data is retained for the duration you hold an Account, and for 7 days after Account deletion, unless further retention is necessary under applicable law or to establish, pursue, or defend claims; • technical and analytical data is retained for as long as necessary to ensure the security and proper functioning of the Application and for analytical purposes, for a maximum of 24 months; • data processed on the basis of consent is retained until the consent is withdrawn, unless further retention is necessary to demonstrate compliance of the processing with the law; • additionally, personal data needed to defend against or pursue claims is retained for as long as required by the statutory limitation periods for claims; 3) persons who contact GreenFitOn via email, the contact form, the Application, or other available communication channels • data necessary to respond to your inquiries is retained for as long as necessary to resolve your matter, or for as long as required by the statutory limitation periods for claims; • additionally, personal data needed to defend against or pursue claims is retained for as long as required by the statutory limitation periods for claims; 4) persons who follow GreenFitOn's profiles on social media platforms such as Facebook, Instagram, TikTok, or YouTube and interact with them • data necessary to follow our social media profiles and to respond to your inquiries via those media is retained for as long as you remain a follower of our profiles or interact with them, whereby your interactions such as comments or likes will remain visible even after you stop following our profiles, for as long as you do not withdraw or delete them; • additionally, personal data needed to defend against or pursue claims is retained for as long as required by the statutory limitation periods for claims; 5) newsletter subscribers • data necessary to send commercial information contained in our newsletter is processed until you withdraw your consent to receive it or object to such processing.

Below is a list of entities to which we may disclose your personal data: 1) persons visiting and using the Website • providers of IT services, systems, and support that we use to run the Website and analyze statistics; • legal advisors and consultants working with GreenFitOn, to the extent disclosure of data is necessary to use their services. 2) persons using the Application • the Payment Operator, through which you make payments for your Subscription; • Google Play and App Store operators, if the Subscription was purchased through them; • entities providing accounting and bookkeeping services to GreenFitOn; • providers of IT services, systems, and support that we use to run and develop the Application and analyze statistics; • legal advisors and consultants working with GreenFitOn, to the extent disclosure of data is necessary to use their services. 3) persons who contact GreenFitOn via email, the contact form, the Application, or other available communication channels • email service operators; • postal operators and couriers; • providers of IT services and systems that we use for email, our Application, or Website; • legal advisors and consultants working with GreenFitOn, to the extent disclosure of data is necessary to use their services. 4) persons who follow GreenFitOn's profiles on social media platforms such as Facebook, Instagram, TikTok, or YouTube and interact with them • social media platform operators; • entities we engage to run our social media profiles; • providers of IT services and systems that we use to run our profiles on Facebook, Instagram, TikTok, and YouTube; • legal, tax, accounting advisors, and consultants, to the extent disclosure of data is necessary to use their services. 5) newsletter subscribers • providers of IT services and systems that we use to send the newsletter. Because we use services such as Google LLC (Google Ads and Google Analytics), Meta Platforms Ireland Limited (Meta Pixel), TikTok, and Microsoft Corporation (MS Clarity), your personal data may be transferred by these entities outside the European Economic Area on the basis of the transfer mechanisms provided for in Chapter V of the GDPR, such as adequacy decisions (Art. 45 GDPR) or standard contractual clauses (Art. 46(2)(c) GDPR). Any questions regarding data transfers outside the EEA should be directed to those entities directly. Detailed rules on how these entities process your data can be found in their own privacy policies (including Google's data transfer principles, Meta's Business Tools Terms, Microsoft's privacy statement, and TikTok's Privacy Policy).

In connection with our processing of your personal data, you have the following rights: • to request access to your personal data; • to rectification, erasure, or restriction of processing of your personal data; • to the extent your personal data is processed in an automated manner to perform a contract (Art. 6(1)(b) GDPR): the right to data portability; • to the extent your personal data is processed to pursue the Controller's legitimate interests (Art. 6(1)(f) GDPR): the right to object to the processing of your personal data; • to the extent your personal data is processed on the basis of consent (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR): the right to withdraw consent at any time, which does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal; • the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office in Warsaw. If you wish to exercise your rights, contact us via email at kontakt@greenfiton.com or in writing to: Sylwia Subik, conducting business under the name Polska Akademia Trenerów i Instruktorów Sportu GREEN WAY SYLWIA SUBIK, al. Niepodległości 40, lok. 15, 23-204 Kraśnik, Poland, marked "GDPR".

We do not use any information you provide for the purposes of automated decision-making.

We use various solutions and tools for analytical and marketing purposes. Below is basic information about these tools. Detailed information can be found in the privacy policies of each tool. Facebook and Instagram Page Insights — as part of our social media accounts, we use page insights features provided by, among others, Facebook and Instagram. Page insights is a feature that allows us to review aggregated and anonymous data about the users of our fan page and understand the actions taken by visitors. We process data within this feature as a joint controller together with Meta Ireland Limited. Any questions regarding the page insights feature should be directed to Facebook. Google Ads — on our Website we use Google Ads. This is a tool that measures the effectiveness of information campaigns, allowing analysis of data such as keywords or the number of unique users. The Google Ads platform also allows us to display our messages to people who previously visited the Website. Google Analytics — on our Website we use Google Analytics. Google Analytics cookies are used by Google to analyze how the Website is used and to create statistics and reports on how the Website functions. Google does not use the data collected to identify the user, nor does it combine this information for identification purposes. MS Clarity — on our Website we use MS Clarity. This tool allows us to monitor user traffic on the website, create heatmaps based on this data, and analyze the paths users take through the site. Meta Pixel — on our Website we use Meta Pixel. Meta Pixel is a tool that allows us to measure the effectiveness of information campaigns we run on Facebook. The tool allows advanced data analytics to optimize our activities using other tools offered by Meta. TikTok Pixel — on our Website we use TikTok Pixel. TikTok Pixel is a tool that allows us to measure the effectiveness of information campaigns we run on TikTok. The tool allows advanced data analytics to optimize our activities using other tools offered by TikTok.

We process the personal data of users who follow or visit our profiles on Facebook, Instagram, YouTube, and TikTok and interact with them. Detailed information about how each platform processes data can be found in their own privacy policies (including Facebook and Instagram's Data Policy, YouTube's Privacy Policy and Terms for processing personal data by YouTube, and TikTok's Privacy Policy).

On our Website we use cookie technology ("cookies") and similar technologies (e.g., pixel tags). Cookies are small packets of information stored on end devices, usually containing the website address, placement date, expiration date, a unique number, and additional information consistent with the purpose of the given file. The cookies we use can be divided into the following categories: • necessary cookies, which are required for our website to function properly. Without these cookies, some services and features of the site may not work correctly. They enable basic operations such as navigating the site and accessing secure areas of it; • analytical cookies, which allow us to understand how users behave on our website using aggregated and anonymous statistical information; • performance cookies, which allow us to monitor and optimize our website's operation using aggregated and anonymous data about site performance, such as page load times, feature response speed, and any technical errors, thereby helping to improve the quality of the user experience; • marketing cookies, which are used to track user activity and allow ads to be tailored to individual preferences. We also use advertising tools from Google, Meta, Microsoft, and TikTok. This means that — depending on your device settings and your consent — information about your use of our Website may be combined with other information you have provided to these entities, or that has been collected as a result of using their services. These sites collect data directly from your browser and process it under their own privacy policies. You can disable the storage of cookies directly on the device you use to connect to our Website, following the instructions of your browser's manufacturer (e.g., Google Chrome, Safari, Mozilla Firefox). Information on configuring and deleting cookies in other browsers can be found on their manufacturers' websites.

The provisions of this Privacy Policy may be improved and amended, and its most current version will always be published on our Website or in the Application and will bear the date of the last update. This Policy is effective as of September 1, 2026.