The data controller is HARA Wholistic Club APS, Via Ghibellina 74, 50122 Florence (FI), Italy — VAT/Tax code 07439310488. For any request about your personal data, write to connect@haraclub.com.
Data you provide: name, email and, if you add it, phone number through the site’s contact and sign-up form; booking and purchase data for classes, packs and memberships, handled through Momence; the data needed for APS membership (member card) and, where required, a medical fitness certificate for sport; newsletter name and email if you subscribe.
Data collected automatically: browsing data and cookies (see the Cookie Policy), such as IP address, browser and device type and pages visited, via Google Tag Manager and statistics tools — only with your consent.
To reply to requests sent through the contact form (pre-contractual measures / legitimate interest); to manage bookings and purchases of classes and memberships (performance of a contract); to manage APS membership and related obligations (contract / legal obligations); to send the newsletter and updates about the club (consent); to meet tax, accounting and insurance obligations (legal obligation); to analyse use of the site in aggregate form (consent, through cookies).
We rely on external providers that process data on our behalf or as independent controllers: Webflow (website hosting), Momence (bookings, memberships and payments), Brevo (newsletter and automated emails), Google (Tag Manager and statistics tools, only with consent) and BunnyCDN (video delivery). WhatsApp is involved only if you choose to write to us there. Payment card data is handled directly by Momence and the payment circuit; we do not store card numbers. Some providers may process data outside the European Economic Area: in that case the transfer is based on adequate safeguards under the GDPR (for example the European Commission’s Standard Contractual Clauses). We do not sell your personal data.
We keep your data only for as long as necessary for the purposes above: contact and newsletter data until you ask us to delete it or you unsubscribe; contractual and membership data for the duration of the relationship and afterwards for the period required by tax and accounting law; browsing data as described in the Cookie Policy.
At any time you can exercise the rights under Articles 15–22 GDPR: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time (without affecting processing already carried out). To exercise them, write to connect@haraclub.com. You also have the right to lodge a complaint with the supervisory authority, the Italian Garante per la protezione dei dati personali (garanteprivacy.it).
We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. The external providers we use apply recognised security standards.
Our services are intended for adults. We do not knowingly collect data from minors without appropriate consent from those with parental responsibility.
We may update this policy over time. The current version is always available on this page.
See also our Cookie Policy at /cookie-policy. Last updated: July 2026.