9. It is your responsibility to send your weekly check-in and maintain contact with me. If I do not hear or receive check-ins from you, I'm not obliged to follow up with or chase you and any changes to the plan in accordance with check in may be delayed or not made at all.
10. If you miss 3 check-ins within the first 16 weeks of receiving your program without informing your coach prior as to the reason why you cannot make a check in. DWA Fitness has the right to suspend all services to you without refunding moneys already paid.
11. Data Processing
Definitions:
Data Protection Legislation: the General Data Protection Regulation 2018 ("GDPR") as amended or updated from time to time, or any successor legislation.
Personal Data; an information relating to an identified or identifiable natural person (a data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an indentifier such as name, an identification number, location date, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
For the purposes of the Data Protection Legislation, the customer is the data controller and DWA Fitness is the data processor (where Data Controller and Data Processor have the meanings as defined in the Data Protection Legislation)
DWA Fitness shall, in relation to any Personal Data processed in connection with the performance by me of my obligations:-
(a) process that Personal Data only on the written instructions of the Customer,
(b) ensure that it has in place appropriate technical and organisational measures (that can be reviewed and approved by the Customer at the Customer's request), to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures (those measures may include, where appropriate, pseudonymising and encrypting Personal Data, ensuring confidentiality, integrity, availability and resilience of its systems and services, ensuring that availability of and access to Personal Data can be restored in a timely manner after an incident, and regularly assessing and evaluating the effectiveness of the technical and organisational measures adopted by it);
(c) ensure that only those individuals that need to access or process Personal Data will have access to and/or process Personal Data and those individuals are and will continue to be obliged to keep the Personal Data strictly confidential in compliance with the Data Protection Legislation;
(d) assist the Customer, at the Customer's request and reasonable cost. in responding to any request from a Data Subject and in ensuring compliance with its obligations under the Data Protection Legislation with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators: