Legal
Last updated: 2026-10-30
Johan Jönsson, Online PT & nutrition advisor, is the data controller for the processing of personal data in connection with the website, the sale of products and the provision of nutrition and training coaching.
The data processed depends on how you use the website and which services you buy.
Payments are handled through the sales platform Payhip and its payment providers (for example Stripe and PayPal). Payment details such as card numbers are handled by them and are not stored by me.
If you buy personal coaching, I may, when relevant to the service, process information such as:
I aim not to collect more personal data than is needed to provide the service.
Personal data is processed for the following purposes:
Personal data is processed on the following legal bases under the GDPR:
Contract: Data needed to handle purchases, deliver products and provide the coaching ordered is processed to fulfil the contract with the client.
Legal obligation: Some data is processed to meet obligations under, for example, bookkeeping legislation.
Legitimate interest: Some data may be processed to handle client communication, prevent misuse and maintain the security of the website, where this interest outweighs the interests and rights of the data subject.
Consent: Where processing requires consent, it is obtained separately. Health data is a special category of personal data under the GDPR. If such data needs to be processed as part of the coaching, explicit and separate consent will be obtained before processing begins, where consent is used as the legal basis.
Consent you have given can be withdrawn at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Personal data is not kept longer than necessary for the purposes for which it was collected.
Personal data is not sold to third parties.
To run the business, data may need to be processed by external providers, for example:
These providers may only process data to the extent needed for their respective services and in accordance with applicable agreements and rules.
Payhip, Stripe and PayPal may have their own obligations and process some data as independent data controllers, for example for payment security and regulatory compliance. Their respective privacy policies apply to the processing they are responsible for.
Personal data may also be disclosed to authorities when required by law.
If personal data is transferred to countries outside the EU/EEA, the transfer will take place in accordance with the GDPR. This may mean, for example, that the European Commission has decided that the country offers an adequate level of protection, or that appropriate safeguards such as standard contractual clauses are used.
The website does not use its own analytics or marketing tools to track visitor behaviour.
However, the website may use strictly necessary cookies or similar technologies so that its features work. The payment solution may also use technologies needed to complete payments and prevent fraud.
If the website uses cookies or similar technologies that require consent, that consent will be obtained before the technology is used. Visitors will also be able to withdraw their consent.
Under the GDPR, you have the right, under certain conditions, to:
Some data may need to be kept even after a request for erasure, for example when the law requires continued storage.
To exercise your rights, contact me at [email protected]
If you believe your personal data is being processed in breach of the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
Website: https://www.imy.se/en/
This privacy policy may be updated if the business, the website's features or applicable legislation change. The latest version is always available on the website.