Legal notice, privacy and cookies

Updated: 22 October 2026.

Website owner and use

Bruno Di Fraia Garrido · Spanish tax ID (NIF): 41009907X.
Address: C/ Santiago Rusiñol, 12, 2º 4ª, 08820 El Prat de Llobregat, Barcelona.
Contact: bruno@brunodifraia.com · 641 799 610.

Physical activity and sport professional, COPLEFC registration number 69481. Degree in Physical Activity and Sport Sciences from Blanquerna–Universitat Ramon Llull (Spain). Information on professional regulations is available from COPLEFC.

This website provides information about services and prices. Services and their terms are agreed directly before starting; no payments or bookings are processed here. The information does not replace an individual assessment or medical advice. Rights relating to the content must be respected. Spanish law applies, without limiting consumers’ rights.

How your data is used

Bruno Di Fraia Garrido is the data controller under the GDPR and Spanish Organic Law 3/2018.

• Contact: name, contact details and enquiry to respond and prepare the requested service; legal basis: steps prior to entering into a contract, or consent for other enquiries.
• Training: data needed to manage the service, appointments and follow-up; legal basis: performance of a contract. Tax and payment data is processed to meet legal obligations.
• Health: only the information needed to adapt and monitor training, with your prior explicit consent. It comes from you, the sessions and, if you authorise it, your medical team. Specific information and the programme consent form are provided before it is collected.

Your information is not used for advertising or automated decision-making. Without essential data, your request cannot be handled or training provided safely. This website does not allow medical reports to be uploaded.

Storage and retention

Training documentation is stored on the professional’s computer without cloud synchronisation. If received through WhatsApp Business or Gmail, it is saved and checked before the received copies accessible to the professional are deleted. This does not delete the sender’s copies or any copies retained by providers. Documents can also be handed over in person.

Enquiries are retained for as long as needed to handle them; service documentation is retained throughout the agreed programme and follow-up. Afterwards, only data required by legal obligations or potential claims is retained: normally 4 years for tax documents and 6 years for accounting records where applicable; claim-related periods depend on the nature of the claim and the applicable legal time limit. Where required, data is blocked under Article 32 of Spanish Organic Law 3/2018 and deleted when those periods end. Defending claims may justify retaining essential data, including health data.

Cookies and external services

This website does not use cookies. It does not include advertising, visitor analytics or tracking, and fonts are served from the website itself.

Hosting is provided by Netlify, Inc. (101 2nd Street, San Francisco, CA 94105, USA), which acts as a data processor and processes technical connection data, such as IP addresses, to serve and protect the website. Further information is available in the Netlify privacy policy.

Google Maps and WhatsApp only open when you click their external links. Read the policies of Google and WhatsApp. You can also get in touch by phone.

Data is only accessed by providers as needed for their role, payment or advisory service providers involved, and authorities where appropriate. Clinical information is shared with your medical team if you authorise it, or with emergency services where permitted by law; training at Kaizen does not mean your records are shared with the centre.

Netlify, Google and WhatsApp may process data outside the European Economic Area, with the safeguards stated in their policies (adequacy decisions or standard contractual clauses, as applicable). Netlify participates in the EU–US Data Privacy Framework and applies the European Commission’s standard contractual clauses. See Google’s safeguards. You can request information about the safeguards from the data controller.

Your rights

You can request access, rectification, erasure, objection, restriction and portability where applicable, or withdraw consent, free of charge, by writing to the email or postal address provided. Withdrawal does not affect previous lawful use or legally required retention. Requests will normally be answered within one month, unless a lawful extension applies. You may lodge a complaint with the Spanish Data Protection Agency.