Protecting your personal data is important to me. Any processing of data takes place in accordance with applicable data protection regulations, in particular the GDPR and the Austrian Data Protection Act (DSG).
The controller responsible for data processing in connection with this website and the intake form is:
Nura Siddgi
Währinger Gürtel 118/5, 1090 Vienna, Austria
nura@thegoodsweat.com
This website is hosted via GitHub Pages, a service provided by GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit the website, technically necessary access data may be processed by the hosting provider to the extent required for the provision, security and stability of the website. This may include in particular: IP address, date and time of access, as well as information about the browser and device used (so-called server log data).
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a technically functional website). As GitHub is based in the United States, data may be transferred to the US. Such transfers take place under the EU-US Data Privacy Framework, to which GitHub is certified. For more information, please see GitHub's privacy statement at docs.github.com.
This website does not use any analytics, tracking or web statistics tools. No cookies are set for analytical or marketing purposes.
In preparation for individual training, I provide interested persons with an intake form as a fillable PDF document. Through this form, personal data and in particular health data within the meaning of Art. 9(1) GDPR is collected (e.g. complaints, diagnoses, medication, injuries, physical limitations, training experience).
The legal basis for this processing is your explicit consent pursuant to Art. 9(2)(a) GDPR in conjunction with Art. 6(1)(a) GDPR, which you give by ticking the corresponding checkboxes in the PDF before sending it.
The purpose of processing is solely the individual planning, execution and adaptation of your personal training, and the safe design of sessions based on your state of health.
The data will not be shared with third parties (e.g. physicians, insurers, advertising partners). Disclosure will only take place if you expressly request it or if there is a statutory obligation.
You send the completed PDF by email to nura@thegoodsweat.com. Transmission takes place via your email provider; no external form processor is involved. I recommend using a reasonably secure transport (e.g. an email account with TLS encryption, which is standard with most common providers).
My email inbox is hosted with Microsoft 365 (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Incoming emails and attachments are processed and stored on servers within the European Union. In individual cases, Microsoft may transfer personal data to third countries for administrative and support purposes; Microsoft has put in place appropriate safeguards in accordance with Chapter V of the GDPR (in particular EU Standard Contractual Clauses and the EU-US Data Privacy Framework). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is in place with Microsoft as part of the Microsoft Product Terms (Online Services Data Protection Addendum).
After receiving your intake information, the data is transferred to my internal, non-public training documentation system and stored with appropriate protection.
The data will be retained for the duration of our working relationship and for a reasonable period afterwards (a maximum of 3 years), to allow for meaningful continuation or resumption of training. It will then be deleted, unless statutory retention obligations (e.g. tax law) require otherwise. Upon your express request, I will delete personal data before the end of this period, provided that no statutory retention obligations or legitimate reasons for further storage, in particular for the establishment, exercise or defence of legal claims, prevent deletion.
You may withdraw your consent to the processing of your health data at any time, with effect for the future. An informal notice by email to nura@thegoodsweat.com is sufficient. Withdrawal does not affect the lawfulness of processing carried out up to that point.
After receiving your withdrawal, your data will be deleted without undue delay, unless statutory retention obligations apply.
If you contact me by email, the data you provide — typically your name, email address and the content of your message — will be used solely to process your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual processing) or Art. 6(1)(f) GDPR (legitimate interest in handling your request).
Your data will not be passed on to third parties unless required by law. It will be deleted once the purpose for which it was collected no longer applies and no statutory retention obligations exist.
Under applicable data protection law, you have the following rights:
For any questions regarding data protection, to exercise your rights, or to withdraw a consent, please contact me at any time by email:
Last updated: April 2026