How we hold gym data
Read-only open banking, limited access, GDPR. This is what an owner needs to know before connecting the bank.
1.Bank access
The Finance module imports account movements via PSD2 open banking. The connection is read-only: StrateGYM does not instruct payments, transfer funds or move money.
You grant the permission from your bank, and you can revoke it. TODO_CONTENUTO: AISP provider name and consent duration.
2.Where the data is hosted
Site and lead data sit on infrastructure in the European Union. TODO_CONTENUTO: region and provider of the StrateGYM application environment (database, backups, retention).
Backups stay in the same area. TODO_CONTENUTO: backup frequency and retention time.
3.Who can access it
The owner and the operators you authorise see their own gym. The accountant sees data only if you open access.
ABBS staff access data only for support, on request, under processing instructions. TODO_CONTENUTO: internal roles, logging and trace retention.
4.GDPR
The controller is ABBS S.R.L. Legal bases, data-subject rights and retention are in the privacy notice.
TODO_CONTENUTO: DPAs with processors, the current processor list, and technical measures (encryption at rest, MFA).
5.Frequently asked questions
5.1.Can you move money from my account?
No. PSD2 open banking is read-only: it imports movements for cash and reconciliation. It does not instruct payments.
5.2.Can I disconnect the bank?
Yes. Revoke consent at the bank or ask support to close the connection. TODO_CONTENUTO: how long the feed actually takes to stop.
6.Contact
For questions on data, access or GDPR write to info@abbs.one. The full notice is in the privacy notice.