Privacy Statement
This privacy statement was last updated on June 17, 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
In this privacy statement, we explain what we do with the data we obtain about you via https://heqigong.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:
- we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
- we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
- we first request your explicit consent to process your personal data in cases requiring your consent;
- we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- we respect your right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep of you, please contact us.
1. Purpose, data and retention period
We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)1.1 Payments
1.1 Payments
For this purpose we use the following data:
- A first and last name
- A home or other physical address, including street name and name of a city or town
- An email address
- A telephone number
- IP Address
The basis on which we may process these data is:
Upon the provision of consent.
Retention period
We retain this data until the service is terminated.
1.2 Contact - Through phone, mail, email and/or webforms
1.2 Contact - Through phone, mail, email and/or webforms
For this purpose we use the following data:
- A first and last name
- An email address
- A telephone number
- IP Address
The basis on which we may process these data is:
Upon the provision of consent.
Retention period
We retain this data until the service is terminated.
2. Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.
3. Disclosure practices
We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.
If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.
4. Security
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
5. Third-party websites
This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
6. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.
7. Accessing and modifying your data
If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:
- You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
- Right of access: You have the right to access your personal data that is known to us.
- Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
- If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
- Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
- Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.
Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
8. Submitting a complaint
If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.
9. Contact details
HEQ SSD s.r.l.
Via Battisti 9, 00060, Sacrofano (RM)
Italy
Website: https://heqigong.com
Email: info@ex.comheqigong.com
10. Data Requests
For the most frequently submitted requests, we also offer you the possibility to use our data request form
Last updated: 23 June 2026.
This Privacy Policy explains how HEQ S.S.D. a r.l. processes the personal data it collects through the website https://heqigong.com and in connection with its activities. It applies to all users of the website whose personal data we process. We recommend you read it carefully.
1. Data Controller
The Data Controller is:
HEQ S.S.D. a r.l.
Via Battisti 9, 00060 Sacrofano (RM), Italy
VAT / Tax code: 17763781006
Email: info@heqigong.com
Phone: +39 352 083 6988
Website: https://heqigong.com
For any question about this Policy or your data, contact us at info@heqigong.com.
2. What data we process, why, on what legal basis, and for how long
We limit our collection of personal data to what is necessary for the purposes below. For each purpose we indicate the legal basis under Article 6 GDPR and the retention period.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your registration and participation in courses, seminars and activities | Identification and contact data; data needed to manage the relationship | Performance of a contract — Art. 6(1)(b) GDPR | For the duration of the relationship and 10 years thereafter, in compliance with Italian tax and accounting obligations |
| Processing payments | Identification and contact data; transaction data. Payment data is handled by the payment provider — see Section 3 | Performance of a contract — Art. 6(1)(b); legal obligation — Art. 6(1)(c) | 10 years, for tax and accounting obligations |
| Tax, administrative and affiliation obligations, including sports-body affiliation | Data required by law for these obligations | Legal obligation — Art. 6(1)(c) GDPR | 10 years |
| Responding to requests sent through phone, post, email or web forms | Contact data and the content of your request | Performance of pre-contractual measures — Art. 6(1)(b); or our legitimate interest in responding — Art. 6(1)(f) | For the time needed to handle the request and a reasonable period thereafter |
| Sending informational and promotional communications about the school’s activities | Name and email | Your consent — Art. 6(1)(a) GDPR | Until you withdraw consent or unsubscribe |
| Use of cookies and similar technologies | See our Cookie Policy | Consent for non-essential cookies — Art. 6(1)(a); legitimate interest / necessity for essential cookies | As set out in the Cookie Policy |
Photographs and audio-video recordings made during in-person activities are governed by a separate, specific consent collected through the school’s Waiver & Consent Form, and are not processed on the basis of this website Policy.
Providing the data marked as required is necessary to register for and take part in our activities; without it we cannot manage your participation. Marketing consent is always optional and can be withdrawn at any time.
3. Recipients and processors
We do not sell your personal data. We may share it, only as far as necessary, with the following categories of recipients, who act either as separate controllers or as processors on our behalf under a data-processing agreement:
- payment service provider(s);
- email and newsletter platform(s);
- video-conferencing platform(s) used for live online teaching;
- form, hosting and IT-service providers running the website;
- the sports affiliation body, our insurance provider, and the owners of venues hosting in-person activities, where relevant for organisational purposes;
- professional advisors, such as accountants and lawyers, bound by confidentiality.
We also disclose personal data where we are required to do so by law or court order, or in response to a competent authority, to the extent permitted by law.
If the website or the organisation is taken over, sold, or involved in a merger or acquisition, your data may be transferred to the advisors and prospective purchasers involved and passed on to the new owners, subject to this Policy.
4. Transfers outside the European Union
Some of the tools we use to run our activities, for example email services, video-conferencing platforms and form services, may involve transferring personal data outside the European Union.
Where this happens, the transfer takes place only to countries that ensure an adequate level of protection under the GDPR, or on the basis of appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
You can request information about the safeguards in place by contacting info@heqigong.com.
5. Security
We are committed to keeping your personal data secure. We take appropriate technical and organisational measures to limit misuse of and unauthorised access to personal data: only the persons who need access have it, access is protected, and our measures are reviewed regularly.
We also require the same standard from any party that processes personal data on our behalf.
6. Third-party websites
This Policy does not apply to third-party websites linked from ours. We cannot guarantee that these third parties handle your data securely or reliably. We recommend reading their privacy statements before using them.
7. Your rights
Under the GDPR you have the right to:
- be informed about why your data is processed, what happens to it, and how long it is kept;
- access the personal data we hold about you;
- rectification — correct or complete inaccurate or incomplete data;
- erasure — have your data deleted where the conditions apply;
- restriction of processing;
- object to processing; we will comply unless there are overriding legitimate grounds;
- data portability — receive your data and have it transferred to another controller;
- withdraw consent at any time, where processing is based on consent, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us at info@heqigong.com. Please clearly state who you are, so we can be certain not to modify or delete the data of the wrong person. We will respond to your request within the timeframe required by law.
8. Lodging a complaint
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority:
- in Italy, the Garante per la protezione dei dati personali — https://www.garanteprivacy.it;
- if you are resident in another country, with the national data protection authority of your country of residence.
9. Amendments to this Policy
We may amend this Privacy Policy. We recommend reviewing it regularly to stay aware of any changes, and we will actively inform you wherever possible.
10. Contact
HEQ S.S.D. a r.l.
Via Battisti 9, 00060 Sacrofano (RM), Italy
Email: info@heqigong.com
Phone: +39 352 083 6988
Website: https://heqigong.com