GDPR Statement

Our commitment to data protection

Power of One is committed to protecting the personal data of every individual we work with. We comply with the EU General Data Protection Regulation (GDPR) and treat the privacy and security of your data as fundamental to how we operate. This statement summarises our approach and complements our full Privacy Policy.

Lawful, fair and transparent processing

We only collect personal data where we have a lawful basis to do so — your consent, the performance of a contract, or our legitimate business interests. We collect only what we need, use it only for the purposes we have told you about, and never sell it to third parties.

Your rights under the GDPR

As a data subject, you have the following rights, which we will always honour promptly and free of charge:

• The right to be informed about how your data is used.
• The right of access to the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (the “right to be forgotten”).
• The right to restrict processing in certain circumstances.
• The right to data portability.
• The right to object to processing, including direct marketing.
• Rights relating to automated decision-making and profiling.

Consent management

Where we rely on consent — for example, to send you marketing communications — we obtain it through a clear, affirmative action. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. Every marketing email includes a simple unsubscribe option.

Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. Where we work with processors, we require them to provide equivalent safeguards under written agreements.

Data protection contact

To exercise any of your rights, raise a concern, or ask a question about how we handle your data, please contact our data protection contact at dpo@powerofone.coach. You also have the right to lodge a complaint with your local data protection supervisory authority — in France, the CNIL.