Privacy Policy
Last updated: 5 September 2026
This Policy explains which personal data Svarnas Coaching processes, for what purposes and on what legal basis, which providers it may be transferred to, and your rights.
1. Data controller
The data controller is Georgios Svarnas, trading as Svarnas Coaching, based in Athens, Greece.
For any personal data matter, you can contact:
Training Plans at plans.svarnascoaching.com uses the same GA4 property, with a separate consent choice and cookie settings within the application. Your choice on the main site does not automatically enable analytics in Training Plans. Rejecting or withdrawing consent within the application stops its subsequent analytics requests. With consent, limited public navigation, tool and guide interactions are measured, as well as confirmed plan acquisition events. Emails, sign-in links or tokens, personal measurements and workout values are not sent to GA4.
2. What data we process
Depending on how you use the site or services, we may process:
- Contact details, such as name and email.
- Choices you enter before booking a call, such as sport, goal and an optional message.
- Appointment details, such as date, time and time zone.
- The content of messages you send us by email.
- Your email, sign-up source and related preferences when you subscribe to the newsletter or an updates list.
- Service, communication, invoicing and payment details when you become a client.
- Training data, such as workouts, races, goals, performance, history and comments.
- Health or injury data only when necessary to provide coaching safely and after separate, explicit consent has been given.
- Technical data, such as IP address, device and browser type, access date and time, and basic request security information.
- Site usage data only when analytics or advertising tools have been enabled and the required consent has been obtained beforehand.
We do not request medical information or injury details in the form before booking a call.
3. Purposes and legal bases
Data is used:
- To respond to an enquiry, arrange a call and take steps before a potential engagement, under Article 6(1)(b) GDPR.
- To provide coaching and perform the relevant contract, under Article 6(1)(b) GDPR.
- For invoicing, accounting and tax obligations, under Article 6(1)(c) GDPR.
- For newsletters and availability updates, based on consent, Article 6(1)(a) GDPR and Article 11 of Greek Law 3471/2006.
- For health or injury data, based on separate explicit consent, Article 9(2)(a) GDPR.
- For security, abuse prevention, technical operation and protection of legal claims, based on legitimate interests, Article 6(1)(f) GDPR.
- For analytics, advertising measurement, remarketing or ad personalisation, only after consent.
Providing newsletter details is optional. Certain details are necessary to make a booking, enter into a coaching relationship or make a payment; without them, the corresponding service may not be possible.
4. Call booking and Calendly
The pre-call process may collect your sport, goal and an optional message. When you choose to continue, these are transferred to Calendly — either in a booking pop-up within the site or in a new tab if the embed does not load — where you enter your details and appointment time.
Do not enter medical information or injury details in this form.
Calendly may process data as a service provider and, for certain functions of its own, as an independent data controller. Read more in the Calendly Privacy Policy .
5. Newsletter and EmailOctopus
We use EmailOctopus for newsletters and updates.
Your subscription is completed immediately after you submit the form and consent to marketing emails; after a successful subscription, you are redirected to a confirmation page on our site.
Newsletter consent is separate from any other service. You can withdraw it at any time through the unsubscribe link in each email or by writing to info@svarnascoaching.com.
EmailOctopus stores its application and list data on infrastructure within the EU and may use subprocessors to send emails. Read more in the EmailOctopus Privacy Policy .
The sign-up form is protected by Google reCAPTCHA to prevent automated and abusive submissions. During its operation, Google may process technical data such as your IP address, browser and device information, and interaction data. reCAPTCHA loads only on pages where a sign-up form appears. The applicable policies are the Privacy Policy and the Terms of Service of Google.
6. Coaching and TrainingPeaks
During the coaching relationship, TrainingPeaks may be used for the programme, workouts, comments, metrics and communication related to the training process.
TrainingPeaks operates under its own terms and may act as an independent data controller for account and user data.
Read more in the TrainingPeaks Privacy Policy .
7. Health and injury data
Health or injury information is requested only when necessary for safe and appropriate training design.
Before it is collected, separate information is provided and explicit consent is requested. Consent may be withdrawn at any time, without affecting the lawfulness of prior processing.
Coaching is not a medical service and does not replace medical diagnosis or treatment.
8. Payments via Stripe
When sales of Training Plans or other services are enabled, payments may be processed through Stripe.
Stripe may collect payment, billing, device and transaction details, as well as data for fraud prevention. Svarnas Coaching does not store full card details.
Processing is necessary for payment, contract performance, fraud prevention and statutory financial obligations. Stripe may act as a processor or independent controller, depending on the function.
Read more in the Stripe Privacy Center.
9. Analytics and advertising tools
The site uses Google Analytics 4 (GA4) for anonymous traffic statistics, only after explicit analytics consent through the banner or Cookie settings. Until then, Google Analytics does not load and no analytics data is sent.
Meta Pixel, advertising cookies, remarketing and Stripe tracking/payment processing are not currently used on the site. If checkout or advertising tools are enabled in the future, they will be activated only with separate prior consent.
If you consent to analytics, the following may be collected:
- Pages and basic site actions (e.g. page views, selected events).
- Time and manner of interaction.
- Browser type, device and operating system.
- Approximate geographical region.
- Online identifiers and GA4 cookies, such as
_gaand_ga_*.
The legal basis for analytics is your consent (Article 6(1)(a) GDPR). You can reject or withdraw it at any time through Cookie settings in the footer.
Health data, training note content, full payment details and other sensitive data are not sent to Google.
Cookie and GA4 loading details: Cookie Policy.
More information:
10. Cookies and similar technologies
The site uses necessary technologies for consent preferences, basic functionality and temporary navigation state (session storage in some THE LAB lists). Analytics cookies (GA4) load only after opt-in. Advertising cookies and Meta Pixel are not used.
The newsletter, reCAPTCHA, Calendly, embedded YouTube video on podcast episode pages, and external Spotify links may set their own cookies or process technical data when they load or when you choose to open them.
The full description, how long your choice is stored and how to withdraw it can be found in the Cookie Policy.
11. Video, podcast and external content
On podcast episode pages, we embed a YouTube player in privacy-enhanced mode (youtube-nocookie.com). The player loads with the page, without autoplay and independently of your choice for the site's analytics. When the player loads or is used, Google/YouTube may receive technical details, such as IP address, device information, referrer and interaction data, and use cookies or similar technologies under its policies. Privacy-enhanced mode limits the use of the view for personalisation, but does not mean there are no requests to or processing by Google/YouTube. Other YouTube videos on the site, such as on About, may load differently. Spotify links open on the Spotify platform; we do not embed a Spotify player.
When the player loads, the relevant providers may receive IP addresses, device details and interaction data, and use cookies under their policies.
12. Maps and race data
Race calendar maps may use CARTO mapping services and OpenStreetMap geographical data.
When maps load, the tile service provider may receive technical data such as IP address, browser, referring page and request time.
Links to organisers, registration forms, results or external maps lead to independent websites with their own policies.
13. Hosting, security and email
The site is hosted on Hetzner infrastructure and managed through Coolify. Coolify is infrastructure management software and is not a separate recipient when self-hosted.
Cloudflare may be used for DNS, protection, TLS, caching and content delivery. During operation, it may process IP addresses and technical request data.
Business email may operate through Google/Gmail services, in which case Google processes the details and content of the relevant correspondence.
14. International transfers
Some providers may process data outside the European Economic Area.
Where required, transfers rely on an adequacy decision, the EU–US Data Privacy Framework, approved Standard Contractual Clauses or another lawful mechanism.
The exact location and safeguards may depend on the provider and the specific service.
15. Retention periods
We apply the following main retention periods:
- Enquiries and bookings that do not lead to a coaching relationship: up to 12 months after the last contact.
- Newsletter: until you unsubscribe or withdraw consent. A minimal suppression record may be retained to honour your unsubscribe choice.
- Training data and notes: during the coaching relationship and for up to 24 months afterwards, unless earlier deletion is requested or different retention is required.
- Health data: only for the necessary period of the coaching relationship, with deletion or anonymisation within six months of its end, unless needed to establish or defend a legal claim.
- Accounting, contractual and transaction records: for as long as required by tax and commercial law.
- Technical logs: up to 30 days, unless longer retention is needed to investigate a security incident.
- Google Analytics user-level and event-level data: up to 14 months, when the service is enabled.
- Meta event data and audiences: not currently used on the site.
Where data is held by an independent provider, its retention policy also applies.
16. Security
We use appropriate technical and organisational measures, such as HTTPS, restricted access, system updates, backups where needed, and providers offering appropriate safeguards.
No system can guarantee absolute security. In the event of an incident, the statutory assessment, recording and notification procedures apply.
17. Automated decisions
No decisions producing legal or similarly significant effects are made solely by automated means.
Analytics and advertising tools may create audience categories or estimates of interests only after consent.
18. Minors
If coaching is provided to a minor, contractual communication and health data processing must involve a parent or legal guardian and, where required, their consent.
19. Your rights
Where applicable, you have the right to:
- Access your data.
- Correct inaccurate data.
- Erasure.
- Restriction of processing.
- Object.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with the competent supervisory authority.
To exercise a right, send a message to info@svarnascoaching.com . Requests are answered within the period specified by the GDPR.
You can also contact the: Hellenic Data Protection Authority
20. Changes to this Policy
This Policy may be updated when services, providers, processing purposes or legal obligations change.
The new version will be published on this page with an updated date. If a change materially affects how data is used, additional information will be provided or new consent requested where required.