TheGymHackLab

Privacy Policy

This policy explains how TheGymHackLab (“we”) processes personal data on this website. We operate from Sweden and comply with the EU General Data Protection Regulation (GDPR).

Data Controller

TheGymHackLab (owner: Marc). For questions, please use the contact form.

What We Collect

  • Contact details: email, subject, and message you submit via the contact form.
  • Technical information: basic operational logs from our hosting platform (e.g., error/diagnostic logs). We currently do not set our own tracking or analytics cookies.
  • Embedded content: YouTube videos may set cookies only after you consent and start playback.

Purposes & Legal Bases

  • Responding to messages: legitimate interests (GDPR Art. 6(1)(f)) and/or consent (Art. 6(1)(a)) when you contact us.
  • Displaying video content: consent (Art. 6(1)(a)) for YouTube embeds.
  • Affiliate revenue: legitimate interests (Art. 6(1)(f)) to show product links and attribute qualifying purchases via retailers.

Third Parties We Use

FormSubmit — processes form submissions from the Contact page. Your details are emailed to us and may be logged by FormSubmit according to their policy.

YouTube (Google) — video embeds load only after your consent. YouTube may set cookies and collect usage data then.

Affiliate networks/retailers — some links include partner IDs/UTM parameters for attribution.

Cookies & Embeds

We do not set our own tracking cookies. YouTube may set cookies only after you actively consent to play a video.

Retention

Contact messages are retained as long as needed for follow-up and record-keeping, then deleted or anonymized. Third-party log retention follows each provider’s policy.

Sharing

We do not sell your data. Data may be processed by our service providers (as processors) when required for operation, troubleshooting, or delivering services (see “Third Parties” above).

Your Rights (GDPR)

  • Access and a copy of your data.
  • Rectification of inaccurate data.
  • Erasure (“right to be forgotten”) where applicable.
  • Restriction of processing and objection.
  • Data portability (for data you provided).
  • Withdraw consent where processing is based on consent.

To exercise your rights, contact us via the Contact page. You also have the right to lodge a complaint with your local data protection authority (IMY in Sweden).

Affiliate Disclosure

Some links are affiliate links. As an Amazon Associate, we earn from qualifying purchases. This does not affect the price you pay.

Changes to This Policy

We may update this policy when needed. Check the date below for the latest version.

Last updated: September 2, 2025