The Data Controller for personal data collected through the website fresnoathletictraining.com is a natural person residing in Poland, reachable at the e-mail address indicated on the Contact page of the website.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable provisions of Directive 2002/58/EC (ePrivacy Directive). Where EU data protection law applies to visitors from the European Economic Area, the Controller complies with all relevant obligations thereunder.
The Controller has not appointed a Data Protection Officer (DPO) under Art. 37 GDPR, as the conditions set out in paragraph 1, points (b) and (c) of that article are not met.
The website may collect the following categories of personal data:
The website does not knowingly collect special categories of data under Art. 9 GDPR (health data, ethnic origin, sexual orientation, etc.).
Where processing is based on legitimate interests (Art. 6(1)(f) GDPR), the Controller has carried out the balancing assessment under Art. 6(4) GDPR. The interests pursued — proper functioning of the website and aggregated traffic analysis — do not override the fundamental rights and freedoms of data subjects, given the limited nature of the data processed, the absence of special categories, and the reasonable expectations of users visiting an informational website.
Technical cookies: essential to the operation of the website (e.g. session management, language preferences). These do not require user consent.
Non-technical cookies (third-party analytics, advertising, profiling): these are not activated before the user has given their consent via the dedicated banner, in compliance with the ePrivacy Directive and applicable guidance.
Users may manage or withdraw their consent to cookies at any time via the banner settings or their browser options. Disabling technical cookies may impair certain website functions.
Where the website provides contact forms or newsletter sign-up features, data submitted will be processed for two distinct purposes:
Consent to Purpose 2 is optional and may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
The Controller engages third-party service providers acting as processors (Art. 28 GDPR) or as independent controllers. These include:
Data is not sold to third parties. Any transfers outside the EEA are made on the basis of appropriate safeguards (standard contractual clauses under Art. 46 GDPR or adequacy decisions of the European Commission).
Under Arts. 15–22 GDPR, users have the right to:
Requests should be sent to the Controller’s e-mail address on the Contact page. The Controller will respond within 30 days; in complex or multiple cases, this period may be extended by a further 60 days (Art. 12(3) GDPR), with a reasoned notification provided within the first month.
The Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or accidental disclosure, in accordance with Art. 32 GDPR. These include: encrypted connections (HTTPS/TLS), restricted backend access, and regular security updates.
The website is not directed at children under the age of 13. The Controller does not knowingly collect personal data from children below this age. If such data is identified as having been collected without parental or guardian consent, it will be deleted immediately.
The Controller reserves the right to modify this policy at any time, including in response to changes in applicable law. Updates will be published on this page with a revised date. In the event of material changes, the Controller may notify users via a prominent notice on the website. Users are encouraged to review this page periodically.
Users who are residents of the European Economic Area have the right to lodge a complaint with a competent supervisory authority under Art. 77 GDPR:
Users may also contact the supervisory authority of their country of habitual residence within the EEA.
This website is primarily directed at users in the United States. Some third-party service providers may transfer data outside the European Economic Area (EEA). In such cases, the Controller verifies that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR) or adequacy decisions. Further information is available on request at the Controller’s e-mail address.
The website does not carry out processing based on solely automated decisions, nor individual profiling that produces legal effects or similarly significant effects on data subjects, within the meaning of Art. 22 GDPR.
Under Art. 8 GDPR, the minimum age for valid consent to the processing of personal data in information society services varies by EU Member State. The table below is for reference for any EEA-based users:
| Member State | Minimum age |
|---|---|
| Germany | 16 years |
| Netherlands | 16 years |
| Austria | 14 years |
| Bulgaria | 14 years |
| Denmark | 13 years |
| Estonia | 13 years |
| Finland | 13 years |
| France | 15 years |
| Ireland | 16 years |
| Italy | 14 years |
| Latvia | 13 years |
| Lithuania | 14 years |
| Poland | 16 years |
| Portugal | 13 years |
| Romania | 16 years |
| Slovakia | 16 years |
| Slovenia | 15 years |
| Spain | 14 years |
| Sweden | 13 years |
| Hungary | 16 years |
The website is intended for an adult audience. Where a minor below the applicable age threshold wishes to use the website’s services, parental or guardian consent is required.