✅ Privacy Policy of Coazilla.com

1. Data Controller

The data controller is:

Contact email: admin@coazilla.com

2. What data do we collect?

We only collect data necessary for providing and improving our services:

When creating your account:

• Last name, first name
• Email address
• Age or date of birth (if required to adapt programs)
• Password (encrypted)

When using the platform:

• Navigation data: pages visited, clicks, connection time
• Training data: goals, programs followed, activity history
• Technical data: IP address, browser type, operating system

Personal data added by the user:

• Self-assessment data: mood, stress level, sleep quality, fatigue, weight, waist circumference, pain, energy level, etc.
• This data is voluntarily provided by the user to improve personalized tracking and adapt sports recommendations.

Sensitive data:

• Health or related data: injuries, physical limitations, specific wellness-related goals.
• They are only collected with your explicit consent and are never mandatory.

3. Why do we collect this data?

Data is collected for the following purposes:

• Creation and management of your user account
• Access to offered services (programs, tracking, coaching)
• Adaptation of content to your profile and level
• Statistical analysis and continuous improvement of the platform
• Communication about Coazilla news, content and offers (with your consent)
• Compliance with our legal and security obligations

4. Legal basis for processing

The processing carried out is based on:

• Your consent (account creation, newsletters, self-assessment data and sensitive data)
• Contract execution (access to your user space, coaching services)
• Legitimate interest (site security, continuous improvement)
• Legal obligations (archiving, billing)

5. Recipients of your data

Data may be accessible only to:

• Coazilla's internal team (support, coaching, development)
• Our technical service providers (hosting, emails, traffic analysis)
• Administrative authorities in case of legal obligation

All service providers are subject to a confidentiality obligation and GDPR compliance.

6. Retention period

• Active account: data is retained as long as the account is used
• Inactive account: automatic deletion after 3 years of inactivity
• Test data: retained for 12 months after end of trial period
• Health and self-assessment data: retained for 12 months, deleted upon simple request
• Technical logs: 12 months

7. Data security

We implement strict technical and organizational measures to protect your data:

• Secure hosting in Europe (LWS - Europe)
• Password encryption
• Data access control
• Access monitoring, backups, security updates

8. Your rights (GDPR)

In accordance with GDPR, you have the following rights:

In case of disagreement, you can file a complaint with the CNPD (Luxembourg) or the CNIL (France).

9. Cookies and trackers

We use cookies to:

• Remember your preferences
• Establish traffic statistics
• Improve user experience
• Offer personalized content

You can accept or refuse cookies via our management banner on your first visit, or modify your choices at any time.

10. Policy modification

This policy may be modified at any time. You will be notified in case of substantial modification (email or in-app notification).

11. Contact