Privacy policy
This is a translation for your convenience. In case of any discrepancy, the Italian version prevails. Italian version
Last updated: 20 October 2026
This policy is provided under Article 13 of Regulation (EU) 2016/679 ("GDPR") to visitors of the Body Zone website at https://www.bodyzonefinale.it (the "Site"). Body Zone A.s.d. is an amateur sports association (associazione sportiva dilettantistica) offering Pilates, training and postural exercise, based at Via Generale Arnaldi 1, 17024 Finale Ligure (SV), Italy. It was born within the Belli dalla Testa ai Piedi centre but is a separate entity: Body Zone A.s.d. is the controller of the data collected through this Site and by Body Zone.
1. Who the data controller is
Body Zone A.s.d.
Via Generale Arnaldi 1, 17024 Finale Ligure (SV), Italy
Tax code/VAT no.: 90076950097
Email: [email protected]
Phone: +39 019 689 8563
2. What data we process and why
2.1 Browsing data
Like any website, when you visit it the servers that run it automatically collect some technical data: IP address, browser type, operating system, pages visited, date and time of the visit.
This data is processed by the hosting and CDN provider, Cloudflare Inc. (USA), to run the Site and protect it from attacks and abuse. We do not use it to identify you. Legal basis: the Controller's legitimate interest in the security and proper functioning of the Site (Art. 6(1)(f) GDPR).
2.2 Data you give us
The Site has no contact forms. If you contact us through the channels listed on the Contact page (phone, WhatsApp, email), you voluntarily give us your data, for example your name, phone number and the content of your message.
We use it only to reply to your request and, if you wish, to arrange your first session and classes. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
We ask you not to send us information about your health through the Site, WhatsApp or email.
2.3 Visitor statistics
To understand which pages are most useful, we use Cloudflare Web Analytics, a statistics service by Cloudflare Inc. that does not use cookies and stores nothing on your device. It collects technical data about the visit (for example the page viewed, the referring site, browser and device type, country) and shows it to us only in aggregate form: we cannot see who you are, and we do not use it to identify you or for advertising. Legal basis: the Controller's legitimate interest in improving the Site (Art. 6(1)(f) GDPR). This service does not require your consent and there is no cookie banner.
2.4 No profiling
The Site does not use profiling tools or targeted advertising.
3. Third-party services
| Service | Provider | Purpose | Legal basis | Transfer outside the EU |
|---|---|---|---|---|
| Hosting and CDN | Cloudflare Inc. (USA) | Publishing the Site, security, performance | Legitimate interest, Art. 6(1)(f) | Yes, with Standard Contractual Clauses and/or the EU-US Data Privacy Framework |
| Statistics (Cloudflare Web Analytics) | Cloudflare Inc. (USA) | Aggregate visitor statistics, without cookies | Legitimate interest, Art. 6(1)(f) | Yes, with Standard Contractual Clauses and/or the EU-US Data Privacy Framework |
| Google Maps | Google Ireland Ltd / Google LLC (USA) | Interactive map, only if you activate it | Consent, Art. 6(1)(a) | Yes, with Standard Contractual Clauses and/or the EU-US Data Privacy Framework |
| WhatsApp Ireland Ltd / Meta Platforms Inc. (USA) | Contact channel you choose to use (external link) | Pre-contractual steps, Art. 6(1)(b) | Yes, under WhatsApp's terms |
Google Maps. On the Contact page the map does not load by itself: it only appears after you click "Show the map (Google Maps)". Before that click, no data is sent to Google. Alternatively, you can open the address directly in Google Maps using the dedicated link.
WhatsApp. The WhatsApp button opens the WhatsApp app or website with a pre-written message, which you can edit before sending. The Site sends no data to WhatsApp until you decide to send the message. From that moment, WhatsApp's privacy policy also applies.
Cloudflare. Cloudflare acts as a data processor (Art. 28 GDPR) under a data processing agreement, both for hosting and for Cloudflare Web Analytics.
Fonts. The Site's fonts are hosted directly on our server: displaying them involves no communication with external services such as Google Fonts.
4. Cookies
The Site sets no cookies, and visitor statistics (Cloudflare Web Analytics) work without cookies. For Google Maps cookies, which are set only if you activate the map, please read the Cookie policy.
5. How long we keep data
- Browsing data: for as long as strictly necessary for the security of the Site, that is, for the periods set out by Cloudflare in its own privacy policy (opens in a new tab).
- Messages and contact requests: for as long as needed to reply and to manage any relationship that follows, unless the law requires otherwise.
- Visitor statistics: Cloudflare Web Analytics only shows aggregate data, kept for the periods set out by Cloudflare in its own privacy policy (opens in a new tab).
6. Your rights
Under Articles 15-22 GDPR you can:
- access your personal data (Art. 15);
- ask for it to be corrected (Art. 16) or erased (Art. 17);
- ask for processing to be restricted (Art. 18) or object to it (Art. 21);
- ask for data portability (Art. 20);
- withdraw any consent you have given at any time, without affecting processing carried out before the withdrawal (Art. 7(3));
- lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it (opens in a new tab)).
To exercise your rights, write to [email protected] or call +39 019 689 8563.
7. Changes to this policy
The Controller may update this policy at any time by publishing the new version on this page. We invite you to check it from time to time, looking at the "last updated" date shown at the top.