Last updated: November 18, 2025.

Who is responsible for processing your data

The website trainingmonkeys.pro and the Training Monkeys application are operated by Andreas Wendl ("Training Monkeys"), an independent professional based for notification purposes in Santa Cruz de Tenerife, Canary Islands, Spain. You can contact us at contact@trainingmonkeys.pro.

Until the commercial company is incorporated, the services are provided as an individual under Spanish law and Regulation (EU) 2016/679 (GDPR).

What personal data we process

We collect only the information needed to provide the service and meet our legal obligations. The main categories are:

• Identification and contact data: name, surname, email address, preferred language, and any information you provide when creating your account or contacting us.
• Platform usage data: training sessions, created plans, in-app interactions, and support records needed to provide the service.
• Billing data: billing address, tax ID where applicable, and subscription plan details. Full card details are processed only by secure payment providers.
• Technical data: IP address, device type, necessary cookies, aggregate performance metrics, and access logs used to diagnose issues.

Purposes and legal basis

• Service delivery: managing your registration, allowing you to create and share workouts, and providing support (Art. 6.1.b GDPR).
• Billing and tax compliance: issuing invoices, processing payments, and meeting tax obligations (Art. 6.1.c GDPR).
• Commercial communications: sending product news or promotions when you have given explicit consent, with the option to unsubscribe at any time (Art. 6.1.a GDPR).
• Security and abuse prevention: monitoring usage to prevent unlawful access, fraud, or activity that breaches the Terms (legitimate interest, Art. 6.1.f GDPR).
• Analytics and product improvement: creating aggregate anonymous statistics to improve the platform, only when you have accepted the corresponding analytics cookies.

Retention periods

We keep your data while there is a contractual relationship or while it is needed for the stated purpose. After account cancellation:

• Billing-related data is kept for the periods required by Spanish tax law, currently 6 years.
• Technical logs and backups are deleted or anonymized within a maximum of 12 months.
• Consent records for commercial communications are kept until you withdraw them.

Recipients and processors

We do not sell your data. We only share it with providers that help us deliver the service and act as processors under contracts compliant with Art. 28 GDPR:

• Microsoft Azure: platform and database hosting in European Union data centers.
• Secure payment services: gateways that process subscription payments and tokenize payment methods.
• Support and analytics tools: email, monitoring, and Google Tag Manager (GTM-TLTFQH8L), which activates Google Analytics only if you accept analytics cookies.

Where an international transfer exists, for example providers located outside the EEA, we apply European Commission standard contractual clauses or equivalent safeguards.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, and portability at any time by emailing contact@trainingmonkeys.pro. You can also:

• Withdraw consent for specific purposes, such as marketing or cookies, without affecting previous lawful processing.
• Request account deletion from the app or by email so we can delete or anonymize your data.
• Lodge a complaint with the Spanish Data Protection Agency if you believe we have not handled your rights correctly.

Payments and security

When you subscribe to a paid plan, we ask for the information required to issue invoices and validate payment. Full card or payment method details are not stored on our servers; we only receive a secure identifier from the certified payment gateway (PCI DSS). Communications use TLS encryption and we apply internal access controls to minimize who can access your information.

Minors

Our services are intended for people over 16 years old. If we detect that a minor has provided data without authorization, we will delete the account after verification.

Cookies and preferences

We use first-party and third-party cookies so the website works, sessions remain secure, and we can understand how the application is used. Each installation is recorded to evidence the consent obtained.

We group cookies into three categories so you can decide what to enable:

• Necessary, always active: enable basic navigation and login. Examples: tm_session keeps your session open for 24 hours and cookie_preferences stores your choices for 6 months.
• Analytics: measure performance and detect errors. They are activated through Google Tag Manager only when you accept them, and IP addresses are anonymized before being sent to Google Analytics.
• Marketing: used to show discounts or communications according to your interests. They only exist if you consent, and you can withdraw consent at any time.

How to manage your preferences

• Click the "Cookie preferences" button visible on every page or the link in the initial banner.
• Enable or disable analytics and marketing checkboxes according to your needs.
• Select "Save preferences"; the change is applied immediately and cookies you have disallowed are removed.

You can also delete or block cookies from your browser settings. If you do, we will ask for your choice again the next time you visit the website.

Third-party cookies

The analytics cookies described belong to Google Ireland Ltd. and may involve transfers outside the EEA. We apply IP anonymization and standard contractual clauses to provide an adequate level of protection. You can read more in Google's privacy policy and revoke collection by installing the Analytics opt-out add-on.

Changes to this policy

We may update this Privacy Policy to reflect changes in the law or in our services. We will publish the current version here and indicate the last updated date. If changes are relevant, we will notify you by email or through an in-app notice.