Skip to content

CoreWork Privacy Policy

Last updated: 22-05-2025

CoreWork® Fitness Pilates, headquartered at Via Abbondio Sangiorgio 20, 20145 Milan, Italy, email: info@corework.net, phone/WhatsApp: +39 392 0449 185, website: https://corework.net, VAT No. 09909870967, as the Data Controller pursuant to Regulation (EU) 2016/679 ("GDPR"), provides the following privacy notice.

1. Types of Data Collected

We collect the following data:

  • Identifying data (name, surname, email, phone number);
  • Browsing data (IP address, user agent, browser type);
  • Location data and user preferences;
  • Device-related and service interaction data (cookies, advertising IDs);
  • Data for marketing purposes (with explicit consent);
  • Data to access restricted areas of the website (username, password);
  • Data collected via social networks and third-party platforms.

2. Purposes of Processing

  • Management of the website and related services;
  • User management and restricted area access;
  • Sending promotional communications via newsletter (Brevo, Klaviyo);
  • Handling requests via contact form;
  • Traffic and performance analysis (Google Analytics 4, MixPanel);
  • Website protection (Google reCAPTCHA);
  • Interaction with social media (Instagram, TikTok, YouTube);
  • Content display (YouTube embed, Google Fonts, Google Hosted Libraries);
  • Statistics and profiling, with user consent;
  • Legal compliance and contractual obligations.

Third-party plugins and services:

3. Legal Basis for Processing

PurposeLegal Basis
Responding to inquiries submitted via contact formPerformance of pre-contractual measures (Art. 6.1.b)
Sending newsletters and promotional communicationsExplicit consent (Art. 6.1.a)
Managing email marketing automation (Klaviyo)Explicit consent (Art. 6.1.a)
Statistical analysis and service improvementLegitimate interest (Art. 6.1.f)
Remarketing, personalized advertising (Facebook, TikTok)Consent via cookie banner (Art. 6.1.a)

4. Processing Methods

Data is processed using both electronic and manual means, with appropriate technical and organizational measures to ensure data security, confidentiality, and integrity. Hosting is managed on secure servers via a self-hosted WordPress platform, using services compliant with EU regulations.

5. Data Sharing and Transfers

Data may be shared with:

  • Technical and IT service providers (e.g., developers, consultants);
  • Email marketing and automation platforms (Brevo, Klaviyo);
  • Analytics tools (Google Analytics 4, MixPanel);
  • Judicial authorities upon request;
  • Third parties for commercial or legal reasons (e.g., franchisees, legal advisors);
  • Social media and embedded content services (YouTube, TikTok, Instagram);
  • Online payment processors, including Visa, MasterCard, and American Express.

Data is not transferred outside the European Economic Area unless appropriate safeguards are in place.

6. Data Retention

Data is retained for:

  • The duration of the contractual relationship and up to 5 years after last contact;
  • Until consent is withdrawn for promotional purposes;
  • As long as required by tax, accounting, and legal obligations.

If processing is based on consent, data is retained until consent is revoked. After that, data will be deleted or anonymized. Data processed for contractual or legal obligations will follow statutory retention periods.

Data is processed using secure systems and by personnel bound to confidentiality obligations. Data will not be disclosed to unauthorized third parties unless required by law.

Processing takes place at the operational offices of the Data Controller and on servers of providers operating in compliance with European data protection laws. Any transfers to third countries will be regulated by appropriate safeguards as required by Articles 44 et seq. of the GDPR.

For further details regarding processing locations or safeguards in case of non-EU data transfers, users may contact the Data Controller using the contact information below.

7. Data Subject Rights

Pursuant to Articles 15–22 of the GDPR, users have the right to:

  • Access their data;
  • Request rectification or deletion;
  • Restrict or object to processing;
  • Data portability;
  • Withdraw consent;
  • Lodge a complaint with the Data Protection Authority (https://www.garanteprivacy.it/).

8. Minors

We do not knowingly collect data from individuals under the age of 14. Any data processing involving minors is only lawful with the consent of their parents or legal guardians.

9. Cookies and Similar Technologies

For details on cookie management, please refer to our Cookie Policy.

We use:

  • Functional and technical cookies;
  • Analytics cookies (Google Analytics 4);
  • Profiling cookies (with consent);
  • Third-party cookies (YouTube, Instagram, TikTok, Google);

Third-party plugin policies:

10. Contact

To exercise your rights or for further information: info@corework.net

Data Controller
CoreWork® Fitness Pilates
Via Abbondio Sangiorgio 20 - 20145 Milan, Italy
Email: info@corework.net
Phone / WhatsApp: +39 392 0449 185

Note: This privacy notice is subject to periodic revision. Updates will be published on this page.