Download

Download

Privacy Policy

Last updated: September 16, 2026

This Privacy Policy explains how Chubby Studio S.L. processes personal data when you visit fitwoody.camp, read our blog, write to us or sign up to receive emails from us. It complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

The FitWoody app, including the health data it processes, is covered by a separate App Privacy Policy.

1. Who is responsible for your data

  • Controller: Chubby Studio S.L.

  • Tax ID (NIF): B44691418

  • Registered office: Calle Postas 32, 4º dcha., 01001 Vitoria-Gasteiz (Álava), Spain

  • Postal address: Apartado de Correos 134, 01080 Vitoria-Gasteiz (Álava), Spain

  • Email for privacy matters: hello@fitwoody.camp

2. What data we process and why

Browsing the website. When you visit fitwoody.camp, our hosting provider and the services the site loads receive technical data such as your IP address, browser, device, language, the page requested and the date and time. We use it to deliver the website, keep it secure and obtain aggregated, cookieless visit statistics.

Analytics, only with your consent. If you accept analytics cookies, Google Analytics collects information about how you use the website (pages viewed, scroll depth, clicks on external links, approximate location derived from your IP address, device and browser). We use it to understand which content is useful and to improve the website. Details are in our Cookie Policy.

Emails you send us. If you write to us, we process your email address, name if you give it, and the content of your message to answer you.

Email sign-ups. When we offer a form to receive our newsletter, product news, early access or the beta program, we process your email address and the preferences you choose to send you those emails. We also record the date and origin of your consent and, to improve our emails, whether they are opened and which links are clicked.

This website does not ask for health data. Please do not include health information in messages to us unless it is needed to answer your question.

3. Legal basis

  • Delivering, securing and measuring the website without cookies: our legitimate interest in offering a website that works and is protected against attacks (article 6.1.f GDPR).

  • Analytics cookies: your consent (article 6.1.a GDPR and article 22.2 LSSI), which you can withdraw at any time from Cookie Settings.

  • Answering your messages: your request and, where it relates to the app or a purchase, the contract with you (article 6.1.b GDPR), or our legitimate interest in answering enquiries (article 6.1.f GDPR).

  • Email sign-ups: your consent (article 6.1.a GDPR and article 21 LSSI), which you can withdraw at any time using the unsubscribe link in every email.

  • Keeping records to comply with the law and to defend claims: legal obligation and legitimate interest (articles 6.1.c and 6.1.f GDPR).

Providing your data is voluntary. If you do not give us your email address, we cannot answer you or send you the emails you asked for.

4. Where your data comes from

We obtain your data directly from you (through forms or emails) or from your browser when you visit the website. We do not buy data or obtain it from data brokers.

5. Who receives your data

We do not sell your personal data or share it for advertising. We only disclose it to public authorities when the law requires it, and to the following service providers, who act as data processors under a data processing agreement (article 28 GDPR) and may only use it on our instructions:

  • Framer B.V. (Netherlands): website hosting and cookieless statistics.

  • Google Ireland Limited and Google LLC: Google Analytics and Google Tag Manager (only with consent), Google Fonts, and Google Workspace for our email inbox.

  • Loops (Astrodon Corporation, United States): sending emails and managing subscriptions. Privacy policy and data processing agreement.

  • Better Stack: the service status page at status.fitwoody.camp.

  • jsDelivr: content delivery network for open-source code used by the website.

6. International data transfers

Some of these providers, or their subcontractors, may process data outside the European Economic Area, mainly in the United States. We only allow these transfers with the safeguards required by the GDPR: the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, when the recipient is certified, or the Standard Contractual Clauses approved by the European Commission (article 46.2.c GDPR). You can ask us for a copy of these safeguards at hello@fitwoody.camp.

7. How long we keep your data

  • Analytics data: Google Analytics keeps event data for the retention period configured in our account, never longer than 14 months. Cookie durations are listed in the Cookie Policy.

  • Technical browsing data: kept by our hosting and infrastructure providers for the short periods needed for security and service operation.

  • Messages: for as long as needed to handle your request and any follow-up, and then deleted, unless we must keep them to comply with a legal obligation or to defend claims.

  • Email sign-ups: until you unsubscribe. After that we keep only a record that you unsubscribed, so we do not email you again, and proof of your consent for as long as claims may be brought.

When data must be kept to meet legal obligations or to defend claims, it is blocked and only used for that purpose until the legal period ends.

8. Your rights

You can exercise the following rights free of charge:

  • Access: know whether we process your data and obtain a copy.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure: ask us to delete your data when it is no longer needed, you withdraw consent or it was processed unlawfully.

  • Restriction: ask us to limit the processing while a request is being resolved or when you need the data for a claim.

  • Objection: object to processing based on our legitimate interest, including website security and statistics.

  • Portability: receive the data you gave us, based on consent or contract, in a structured, machine-readable format.

  • Withdraw consent at any time, without affecting the lawfulness of processing carried out before.

To exercise them, write to hello@fitwoody.camp or to our postal address, indicating the right you want to exercise. We will reply within one month, which may be extended by two more months for complex requests. We will only ask for additional information to confirm your identity if we have reasonable doubts about it.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of the EU country where you live. We encourage you to contact us first so we can try to solve it.

9. Security and confidentiality

We apply appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access, taking into account the risks involved (article 32 GDPR). The website is served only over encrypted connections (HTTPS).

Everyone at Chubby Studio S.L. who accesses personal data is bound by a duty of confidentiality that continues after their relationship with us ends (article 5 LOPDGDD). If a security breach puts your rights at risk, we will notify the supervisory authority and, where required, you.

10. Minors

This website is not directed at children. Under Spanish law, people under 14 cannot consent to the processing of their data, so they must not send us personal data or sign up to our emails without the authorization of their parents or guardians. If we find out that we have collected data from a child under 14 without that authorization, we will delete it.

11. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects on you or similarly significantly affect you.

12. Links to other websites

The website contains links to other websites, such as the App Store or social networks. When you follow them, those websites process your data under their own privacy policies, which we recommend you read.

13. Cookies

Information about the cookies and similar technologies used on this website, and how to accept, reject or withdraw consent, is available in our Cookie Policy. You can change your choice at any time from the Cookie Settings link at the bottom of every page.

14. Changes to this policy

We may update this policy when our website, our providers or the law change. The date at the top shows the current version. If we make significant changes that affect people who have signed up to our emails, we will tell them by email before the changes apply.