A privacy policy without fine print.

The data we collect, plainly

When you claim a Start Pass — online or at the front desk on Bartók Béla út — we ask for your full name, email, mobile number, date of birth, and an emergency contact. That is the minimum we need to issue a member ID, schedule your free personal training session, and reach a relative if something goes wrong on the gym floor.

If you pay online, our payment processor handles your card details directly. We never see your full card number. We retain a transaction reference, the amount, and the timestamp — the receipt you would expect from any business.

Once you start training, the Sportmate app records your check-ins, the equipment you book, and the sessions your coach logs. That data sits inside your Sportmate account; we read it so your coach can prepare for your next session and so the front desk knows you are inside the building during a fire drill.

Why this data exists at all

We are a gym, not a marketing engine. The lawful basis we rely on is contractual: you signed up for a Start Pass, so we need enough information to deliver it. For the welcome emails after sign-up — the one with your coach's name, the one explaining how to book your first session — we rely on legitimate interest, and you can unsubscribe from the link at the bottom of every message.

Health-related notes (a knee injury, a medication you mentioned to your coach) are kept only when you choose to share them. They live in a restricted note field your coach can read; nobody on the marketing or sales side has access. If you ever want them deleted, ask the coach directly or email the address at the bottom of this page.

Who actually touches your record

Inside Struve Fitness Prime: your assigned coach, our two front-desk staff during their shifts, and the founder when she is reviewing membership ops. That is the entire access list on our side.

Outside Struve Fitness Prime: Sportmate (booking + check-ins, processor based in the EU), Stripe (card payments, processor based in Ireland for EU customers), and our email tool, which is hosted in the EU and used only for transactional messages and the monthly newsletter you can opt out of in one click.

We do not sell member data. We do not rent it. We do not use it to train any third-party model. If a regulator or a court ever issues a binding order, we comply, but we will tell you about it unless we are legally barred from doing so.

What you can do at any time

Ask us for a copy of your record. We respond within 30 days — usually the same week — and the export is a plain PDF or CSV, not a screenshot tour.

Ask us to correct anything that is wrong. A misspelled surname, a phone number from a since-cancelled SIM, a coach assignment you no longer want — fix it via your Sportmate profile or email us and it is done by the next business day.

Ask us to delete you. We close the account, wipe the personal record, and keep only the bookkeeping line items the Hungarian tax authority requires us to retain for eight years. Those line items have your invoice number, the amount, and the date — nothing else.

Ask us to stop emailing you. The unsubscribe link in any newsletter does this instantly; transactional messages (your booking confirmations, your Start Pass receipt) keep going because that is the contract you signed up for.

Cookies and what they actually do

On testml.org we set a session cookie when you log into the member portal — that is what keeps you signed in between page loads. We also set a small first-party analytics cookie that counts page visits without identifying you personally. There is no Facebook Pixel, no Google Ads remarketing tag, no third-party tracker that follows you around the rest of the web.

The cookie banner gives you a clear opt-out for the analytics cookie. The session cookie is essential and cannot be turned off without breaking the login flow — that is why it is exempt from consent under the Hungarian e-Privacy implementation.

How long we hang on to things

Active member: while you are training with us, plus 12 months after your last session in case you come back. Coaches like to remember where you left off; you would too if you returned in March after a December break.

Cancelled member, no comeback: we delete the contact record after the 12-month window, except the tax-required invoice line items mentioned above.

CCTV footage at the entrance: 30 days, on a closed-loop system that overwrites itself. Footage is reviewed only on incident reports and never shared without your consent unless required by police.