1. Available rights
Depending on the circumstances, you can request access and processing information; correction; erasure; restriction; portability; objection; consent withdrawal; and human safeguards around a significant automated decision. Consent withdrawal does not affect earlier lawful processing.
Erasure does not always mean immediate deletion: some orders, payments, tax duties, acceptances, complaints or legal evidence must be restricted for a statutory period. Momentum explains any concrete limitation.
2. Making a request
Email reception@momentumgym.org with the subject “Data rights” and state your name, account email, right, scope, preferred response and information helping locate the data. The account route or published address can also be used when enabled.
No form is compulsory. Do not send passwords, full card details or an identity-document copy unless specifically justified through a secure route. Representation is verified proportionately.
3. Verification, time and cost
Momentum first uses the authenticated session, verified email or data already held. Extra evidence is requested only for reasonable doubt and the reason is explained. Requests are normally free.
A response is given without undue delay and normally within one month. Complexity or volume can extend this by up to two months, with reasons given in the first month. A refusal or fee for a manifestly unfounded or excessive request must be reasoned and include complaint routes.
4. Supervisory complaint
If you believe the response does not respect your rights, you may complain to the Spanish Data Protection Agency. Keep your request and response. Momentum cooperates with the authority and does not condition another right on giving up that route.