Privacy Policy

Updated 24 September 2026

1. Controller

ExterGym Ltd
Business ID: 3623400-1
Kauppamiehenkatu 1
45100 KOUVOLA, Finland

2. Person responsible for the register and data protection

Juuso Mänttäri
Chief Executive Officer
ExterGym Ltd
+358 50 303 47 68
juuso@extergym.com

3. Name of the register

ExterGym – Outdoor Gym App register

4. Purpose of processing personal data

Personal data is processed in order to provide the ExterGym – Outdoor Gym App service, for customer service and customer communication relating to the service, and to analyse and develop the service. ExterGym Ltd also processes personal data for planning its own business, such as managing the customer relationship between the company, its partners and its customers, as well as for marketing purposes, personalising services, targeting marketing, ensuring usability and functionality, and preventing and investigating misuse.

5. Data content of the register

Account data: email address, name and sign-in method
Settings: language choice, notification settings and acceptances of terms
Training data: programmes, sets (loads and repetitions), statistics and favourite gyms
Location data: distances to the nearest gyms and coordinates of gyms added by the user
User content: submitted reports, feedback and photographs
Payment data: subscription status, purchase history and card type
B2B data: email address supplied by the employer
Technical data: device model, operating system, IP address and maintenance logs

6. Regular sources of data

The data subject themselves, through the ExterGym – Outdoor Gym App service. The service includes mobile applications for the iOS and Android mobile operating systems. Public directories may be used to update personal data.

7. Disclosure of data

ExterGym Ltd may disclose data within the limits permitted and required by applicable law. Personal data may be disclosed to selected partners of ExterGym Ltd in order to provide the services.

Data may be disclosed from the register for the direct marketing purposes of partners, provided that the data subject has given unambiguous consent to this. Partners may not pass this data on further.

Data may be disclosed in connection with a possible acquisition, merger, outsourcing or transfer of business, and in connection with a group relationship or other financial affiliation, to the parties involved. We may also disclose a user's data to other third parties if the user has consented to this, for example by connecting the service to third-party services such as social media services or otherwise.

Personal data is not processed outside the EU or the EEA.

8. Retention of data

ExterGym Ltd retains personal data only for as long as is necessary to provide the ExterGym – Outdoor Gym App service to data subjects.

ExterGym Ltd retains the personal data it has stored for as long as it wishes, or until the data subject deletes their user account from the ExterGym – Outdoor Gym App service or otherwise notifies ExterGym Ltd that they have stopped using the service.

Data is stored electronically on our service provider's servers, which are protected in accordance with general industry practice. The servers are located within the EU and are continuously monitored. We are informed of any data security breaches without delay and will notify the parties concerned immediately upon becoming aware of them.

9. Security of the register

ExterGym Ltd uses up-to-date practices to protect personal data. This means that we use physical, administrative and technical safeguards to reduce the risk of loss of personal data and to reduce misuse as well as unauthorised access, disclosure or modification. We store your personal data on protected servers, so that only authorised persons can access the data held on those servers. ExterGym Ltd may also protect a user's personal data using Secure Sockets Layer (“SSL”) or another equivalent method of encryption.

10. Cookies

The controller uses cookies in order to deliver the ExterGym – Outdoor Gym App service. A cookie is a small text file that is sent to and stored on the user's computer or other device. Cookies are used to make the application easier to use and to improve the user experience. Cookies can also be used to assess use of the application and the marketing of the services. Cookies do not harm users' computers or files.

Analytics services such as Google Analytics also use cookies to produce analyses and to manage users. Third-party services are governed by their own privacy policies and terms of use, and ExterGym Ltd is not responsible for the collection or processing of data carried out by those operators, including cookies and other tracking technologies as well as links. We recommend that you review the terms of use and privacy statements of those third-party services.

11. Your rights

Right of access

You have the right to check what data concerning you has been stored in the register. We will provide the data in the form required by law.

Right to request rectification

You have the right to request the correction or completion of incorrect, inaccurate, incomplete, outdated or unnecessary data.

Right to request erasure

You may ask us to delete your personal data from our systems. We will act on your request provided that we have no legitimate reason not to delete the data. Data may not be removed immediately from all backup or other equivalent systems.

Right to restrict processing

You may ask us to restrict the processing of certain of your personal data. A request to restrict processing may result in more limited possibilities to use our websites and our services.

Right to object to processing

You may also request restrictions on the processing of your personal data if your data is processed for purposes other than performing our service or fulfilling an obligation arising from law. Objecting to the processing of personal data may result in more limited possibilities to use our websites. You have the right to opt out of electronic direct marketing by following the instructions included in every marketing message we send.

Right to data portability

You have the right to receive your personal data from us in a structured and commonly used format so that you can transfer the data to another controller.

Right to withdraw consent

If the processing of your data is based on consent, you have the right to withdraw that consent at any time.

You also have the right to lodge a complaint with a supervisory authority and the right to prohibit the use of your data for direct marketing purposes.

12. Changes to this privacy policy

ExterGym Ltd may amend this privacy policy from time to time. We therefore encourage you to review the privacy policy regularly in order to notice any changes. Material changes will be notified to the email address received from the user, or we will ask you to accept the new terms when they are introduced.