Privacy Policy

The data controller is Giannis Karagiannis, based in Nafpaktos, Greece, contactable at info@johnworkout.com.

This policy explains how we process your data under the General Data Protection Regulation (EU) 2016/679 and Greek law 4624/2019.

We only collect what you give us or what the site needs to function:

• Contact form details: your name, phone number, email and the content of your message.
• Order details: whatever is needed to complete your order and deliver the digital product.
• Technical data: IP address and browser type, for security and statistics.

We do not collect special categories of data and we do not ask for medical information through the site.

We process your data to answer your message (basis: your consent), to fulfil your order (basis: performance of a contract) and to keep the site running securely (basis: legitimate interest).

Contact form messages are kept for as long as needed to deal with your enquiry and for a reasonable period afterwards, at most two years.

Order data is kept for the period required by tax legislation.

Your data is never sold and is not passed to third parties for advertising. It may be accessible to providers supporting the site, such as our hosting and email providers, acting as data processors.

You have the right to:

• Access the data we hold about you.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw your consent at any time.

To exercise these rights, write to info@johnworkout.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

We take reasonable technical and organisational measures to protect your data, including an encrypted connection and restricted access. No transmission over the internet is entirely secure, but we make every reasonable effort.