Privacy Policy

We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is any data that can be used to personally identify you.

The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Fitness Nation GmbH, Bergstr. 18, 59394 Nordkirchen, Germany, Tel: +49 2596 9372486, Email: info@fitness-nation.com. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

The person responsible has appointed a data protection officer who can be reached as follows: "Mr. Jürgen Recha, c/o datarev GmbH, Robert-Koch-Straße 55, 30853 Langenhagen"

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection because the address line of the browser is " http://" on " https://" changes and the lock symbol in your browser line.

If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which page you came to this page
• Browser used
• Operating system used
• IP address used (possibly in anonymized form)

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website, including investigating misuse of the website (DoS/DDoS attacks, etc.). The data will not be shared or used in any other way, and we generally do not draw any conclusions about your identity from the data collected. We reserve the right to only do this if it becomes necessary to investigate misuse of the website if there are concrete indications of illegal use.

If you upload images via our portal (see Section 7), we use a content delivery network (CDN) from the technology service provider Cloudinary. A content delivery network is an online service that delivers large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected over the Internet. Using Cloudinary's content delivery network helps us optimize the loading speed of our website.

Your images are sent via the technical service provider Cloudinary Inc., 111 W Evelyn Ave, Suite 206, Sunnyvale, CA 94086 (http://www.cloudinary.com), to which we transmit the data provided. This transfer is based on Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the secure and efficient provision, improvement of the stability and functionality of our website and the provision of a voluntary, user-friendly network. Please note that your data is usually transferred to and stored on a Cloudinary server in the USA. Cloudinary stores the data exclusively in a pseudonymized form with its own unique ID.

To protect your data in the USA, we have entered into a data processing agreement with Cloudinary based on the European Commission's Standard Contractual Clauses to enable the transfer of your personal data to Cloudinary. This order processing agreement can be viewed at any time upon request. Regardless of this, we ask for your consent to transfer your data to third countries (Art. 49 Para. 1 lit. a GDPR) when you upload your images. Please note that these third countries, particularly the USA, may not provide an adequate level of data protection equivalent to that of the EU or EEA. In particular, personal data may be subject to extensive access rights from authorities. This may involve risks to your rights and freedoms.

You can view Cloudinary's privacy policy here: https://cloudinary.com/privacy

In order to make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). When cookies are set, they collect and process, to varying degrees, certain user information such as browser and location data and IP addresses. Persistent cookies are automatically deleted after a certain period of time, which may vary depending on the cookie. The storage period of each cookie can be found in the cookie settings of your web browser.

Some cookies are used to simplify the ordering process by remembering preferences (e.g. saving the contents of a virtual shopping cart for a later visit to the website). If the cookies we use also process personal data, this processing is carried out in accordance with Article 6 (1) (b) GDPR to fulfill the contract, in accordance with Article 6 (1) (a) GDPR in the case of consent or in accordance with Article 6 (1) lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a user-friendly and effective website experience.

Please note that you can configure your browser to notify you when cookies are set, so that you can individually decide whether to accept them or block cookies in certain cases or completely. Each browser manages cookie settings differently. This is described in each browser's help menu, which explains how to change your cookie settings. You can find this information for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that the functionality of our website may be limited if you do not accept cookies, namely functionally necessary cookies for which we do not ask for your prior consent.

This website uses the cookie consent tool from consentmanager, Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden ("consentmanager") to obtain effective user consent for cookies and cookie-based applications that require consent.

By integrating appropriate JavaScript code, users are shown a banner when they visit the site that allows them to give consent to certain cookies and/or cookie-based applications by checking a box. The tool blocks the setting of all cookies that require consent until the user provides the relevant consent by checking the box. This ensures that such cookies are only set on the user's device if consent has been given.

So that the cookie consent tool can clearly assign page views to individual users and record, log and store the consent settings made by the user individually for a session duration, when accessing our website, certain user information (including the IP address) is collected by the cookie consent tool, transmitted to consentmanager servers and stored there.

This data processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly consent management for cookies and thus in the lawful design of our website.

Another legal basis for the data processing described is Article 6 Paragraph 1 Letter c GDPR. As those responsible, we are legally obliged to make the use of cookies that are not technically necessary dependent on the user's consent.

Further information on data usage by consentmanager can be found in consentmanager's data protection declaration at https://www.consentmanager.de/privacy.php.

When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively to process your request or to contact you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract or relates to an existing contractual relationship with you, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted after your request has been processed. This is the case if it can be seen from the circumstances that the matter in question has been conclusively clarified and there are no legal retention obligations to the contrary.

Direct contact with fitness studios:

We offer various options for contacting a fitness studio directly via our portal (callback, landing pages, trial training, bring-a-friend). The personal data you provide in these contact requests will be analyzed by us and then forwarded to the fitness studio in question for the purpose of answering your request and for the associated technical administration within our system. We will no longer process your data after forwarding. The gym you contacted will use it to respond to your request. Further information can be found in the privacy policy of the fitness studio you contacted.

Dedicated function for online appointment booking:

We process your personal data in connection with the online appointment booking service. You can see which data we collect for online appointment booking in the respective input form or in the appointment request. If certain data is required to complete an online appointment booking, we will indicate this in the input form or appointment request. If we provide a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you want to enter. The data you provide will be stored and used exclusively for the purpose of scheduling appointments. The legal basis for the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures) is Art. 6 Para. 1 lit. b GDPR. Otherwise, the legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR.

Direct contact with fitness studios:

We also offer the option of booking an appointment directly with a fitness studio via our portal. The personal data you provide when booking an appointment will be analyzed by us and then forwarded to the fitness studio concerned for the purpose of answering your inquiry or contacting you and for the associated technical administration within our system. We will no longer process your data after forwarding. The gym you contacted will use it to respond to your request. Further information can be found in the privacy policy of the fitness studio you contacted.

In accordance with Article 6 Paragraph 1 Letter b of the GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in compliance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further data processing as permitted by law, about which we will inform you accordingly below.

Registration in the portal

You can register on our website by providing personal information. The input form used determines which personal data is processed for registration. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete once you have confirmed it by clicking on the link in the confirmation email sent to you for this purpose. If you do not confirm your registration within 24 hours, it will be automatically deleted from our database. Providing the aforementioned data is mandatory. You can provide further information voluntarily via our portal.

When you use our portal, we store your data necessary for the fulfillment of the contract, including all payment information, until you permanently delete your account. We also store any voluntary data you provide for the duration of your use of the portals, unless you delete it beforehand. You can manage and change all of this information in the secure customer area. The legal basis for this is Article 6 Paragraph 1 Letter f GDPR.

In addition, we store any content you publish (such as public posts, wall entries, guestbook entries, etc.) to operate the website. We have a legitimate interest in providing the website with all user-generated content. The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. If you delete your account, your public statements, particularly in the forum, will remain visible to all readers, but your account will no longer be accessible. All other data will be deleted in this case.

Registration via resellers and studios (third-party access)

The platform of the aforementioned responsible party is also open to other providers. In particular, we enable resellers and gym operators (“Third Party Providers”) to access the Platform through their own websites or apps (“Third Party Access”). These third parties offer their access under their own name and with their own look and feel. However, third-party access gives you access to all the functionalities of our platform and your data will be processed by the aforementioned controller as if you had registered directly on the portal.

We and your chosen third party are jointly responsible for setting up your account via the relevant third-party access (Article 26 GDPR). Subject to this Agreement, any Content you upload to the Platform will simultaneously be shared on the Fitness Nation Network and displayed to the entire Fitness Nation community unless you object. For this purpose, based on our legitimate interest in reaching the widest possible international community (Art. 6 Para. 1 lit. f GDPR), data will be transferred from your chosen third party to the person responsible mentioned above. We inform you here about this processing and the essential points of our agreement. By the way: The person responsible above is your first point of contact if you want to exercise your rights as a data subject (Articles 15-22 GDPR). However, you can also contact your chosen third party provider at any time, who will then respond to your request Fitness Nation GmbH forwards.

Facebook Connect

On our website you can create a customer account or register using the single sign-on method "Facebook Connect" of the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), provided you have a Facebook profile. You can recognize “Facebook Connect” on our website by the blue button with the Facebook logo and the text “Log in with Facebook” or “Log in with Facebook”.

By using the "Facebook Connect" button on our website, you have the opportunity to log in or register with your Facebook user data. Only if you expressly consent to the exchange of data with Facebook during the registration process on the basis of a corresponding notification in accordance with Art. 6 Para. 1 lit. a GDPR, we receive the general and publicly accessible information stored in your profile from Facebook when you use the “Facebook Connect” button. This information depends on your personal privacy settings on Facebook. We process the data transmitted to us by Facebook for the purpose of registering on the portal (Art. 6 Para. 1 lit. b GDPR).

Please note that following changes to Facebook's Privacy Policy and Terms of Service, granting your consent may also result in the transfer of your profile pictures, your friends' user IDs, and your friends list if they are marked as "public" in your Facebook privacy settings. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary information (title, first name, last name, email address), provided you have authorized this with Facebook.

Information about the purpose and scope of data collection as well as the further processing and use of the data by Facebook as well as your associated rights and data protection settings can be found in Facebook's data protection declaration: https://www.facebook.com/policy.php

Single sign-on with your Apple ID

If you sign in to our website using your Apple device, you can also use your Apple ID to sign in. As part of this single sign-on process, if you grant us permission during the sign-in process, Apple will provide us with the email address associated with your Apple ID. Alternatively, you can choose to hide the email address associated with your Apple ID from us. Apple will then create a unique email address that is only valid for our portal. Apple forwards messages sent to this address to the mailbox associated with your Apple ID.

All accounts are protected with two-factor authentication to ensure greater security, and Apple promises not to track your activity on our portal.

When using Single Sign-On with your Apple ID, you will also be required to provide additional information required to register with our portal, as described in Section 7 of this Privacy Policy.

Information about the purpose and scope of data collection as well as the further processing and use of the data by Apple as well as your associated rights and data protection settings can be found in Apple's data protection declaration: https://www.apple.com/de/legal/privacy/de-ww/

If you use the comment function on this website, your comment, the date and time of publication and your chosen username will be saved and published on this website. Your IP address is also logged and stored. This storage of your IP address is for security reasons and in the event that your comment violates the rights of third parties or contains illegal content. We need your email address to contact you if a third party complains that your published content is unlawful. The legal basis for storing your data is Article 6 Paragraph 1 Letters b and f GDPR. We reserve the right to delete comments if they are criticized by third parties as being unlawful.

You can sign up for follow-up comments. You will receive a confirmation email to ensure that you are the owner of the email address provided (double opt-in procedure). The legal basis for data processing when registering for comments is Art. 6 Para. 1 lit. a GDPR. You can unsubscribe from ongoing comment subscriptions at any time with future effect; Further information on how to unsubscribe can be found in the confirmation email.

Sign up for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing further data is voluntary and serves to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed that you agree to receiving newsletters. We will then send you a confirmation email in which we will ask you to click on an appropriate link to confirm that you would like to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 (1) (a) GDPR. If you register for the newsletter, we will store your IP address registered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to track possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used exclusively for the purpose of advertising via newsletter. You can unsubscribe from the newsletter at any time using the unsubscribe link provided in each newsletter or by sending a corresponding message to the person responsible mentioned above. After you unsubscribe, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to continue to use your data in a legally permissible manner, which we will inform you about in this statement.

Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with Section 7 Paragraph 3 UWG, we do not have to obtain separate consent from you for this. Data processing is carried out exclusively on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6 (1) (f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you emails. You have the right to object to the use of your email address for the aforementioned advertising purposes at any time with future effect by sending a message to the person responsible named at the beginning of this document. You will only incur transmission costs according to the basic tariffs. Once your objection has been received, the use of your email address for advertising purposes will be stopped immediately.

Newsletter dispatch via Sendinblue

We send our newsletters (sections 10.1 and 10.2) via our service provider Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin. Sendinblue acts exclusively as a processor for us and does not process your personal data for its own business purposes.

Advertising by post

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 Para. 1 lit. f GDPR and to use it to send interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

To process your order, we work with the following service providers who support us in whole or in part in the fulfillment of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the information below.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, to the extent that this is necessary to deliver the goods. We pass on your payment data to the commissioned bank as part of payment processing, to the extent that this is necessary for payment processing. If payment service providers are used, we will expressly inform you of this below. The legal basis for passing on the data is Art. 6 Para. 1 lit. b GDPR.

Use of specialized service providers for order processing and fulfillment

– Olimp Nutrition

The order is processed by the service provider “Olimp” (Olimp Laboratories, a branch of Olimp Laboratories SP.zoo, Am Weiher 8, 63505 Langenselbod, Germany). Your name, address and all other personal data will be transmitted to Olimp in accordance with Article 6 (1) (b) GDPR exclusively for the purpose of processing your online order. Your data will only be passed on to the extent that is actually necessary to process the order. Details about Olimp's data protection practices and its privacy policy can be found on Olimp's website at "Olimpsport.com".

– DHL Fulfillment

The order is processed by the service provider DHL Home Delivery GmbH, Sträßchensweg 10, 53113 Bonn, as part of the “Shipping by DHL Fulfillment” service. Your personal data will be transmitted to DHL Fulfillment in accordance with Article 6 (1) (b) GDPR exclusively for the purpose of processing your online order.

– Fulfillment with büromatic

Another service provider who provides fulfillment services for us is büromatic Direktwerbung GmbH & Co. KG, Gruitener Str. 202, 42327 Wuppertal. Your personal data will be passed on to büromatic exclusively for the purpose of processing your online order in accordance with Article 6 Paragraph 1 Letter b of the GDPR.

Transfer of personal data to shipping service providers

– DHL

If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your email address to DHL before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b GDPR. This data will only be passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.

Consent can be revoked at any time with future effect by contacting the person responsible above or the transport service provider DHL.

– UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will forward your email address to UPS before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO only pass on the name of the recipient and the delivery address to UPS. This data will only be passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of shipment status information is not possible.

Consent can be revoked at any time with future effect by contacting the person responsible above or the transport service provider UPS.

Use of payment service providers (payment services)

– Apple Pay

If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment will be processed via the "Apple Pay" function on your iOS, watchOS or macOS device by charging a payment card stored with "Apple Pay". Apple Pay uses security features built into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a predetermined code and verify your identity using your device's "Face ID" or "Touch ID" function.

For payment processing purposes, the information you provide during the ordering process, along with details of your order, will be transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before sending it to the payment processor of the payment card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment information. After processing the payment, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, the date and time, and whether the transaction was successful. Anonymization completely eliminates any possibility of identifying individuals. Apple uses this anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, your Mac and the authorizing device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can personally identify you. You can turn off the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay" and turn off "Allow payments on Mac."

Further information about data protection with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027

– BS PAYONE

If you choose a payment method offered by the payment service provider BS PAYONE, the payment will be processed by BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, to which we will transmit the information you provided during the ordering process together with information about your order in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will be transmitted exclusively for the purpose of processing payments with the payment service provider PAYONE and only to the extent necessary for this.

– Google Pay

If you choose the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), the payment will be processed via the “Google Pay” application on your mobile device, which must run at least Android 4.4 (“KitKat”) and have NFC functionality. The payment is processed by debiting a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorize a Google Pay payment of €25, you must first unlock your mobile device using the configured verification method (such as facial recognition, password, fingerprint or pattern).

For payment processing purposes, the information you provide during the ordering process will be shared with Google along with information about your order. Google will then transmit your payment information stored in Google Pay to the originating website in the form of a unique transaction number that is used to verify the payment. This transaction number does not contain any information about the actual payment details of your payment method stored in Google Pay, but is created and transmitted as a unique numerical token. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR.

Google reserves the right to collect, store and analyze certain transaction-specific information for each transaction made through Google Pay. This includes the date, time and amount of the transaction; Dealer location and description; a description of the goods or services purchased provided by the merchant; Photos you attached to the transaction; Name and email address of the seller and buyer or sender and recipient; the payment method used; Your description of the reason for the transaction; and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Article 6 (1) (f) GDPR based on the legitimate interest in proper accounting, verification of transaction data and the optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.

The Google Pay Terms of Service can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information about data protection at Google Pay can be found at the following web address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

– Giropay

When paying via "giropay", payment is processed by giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to whom we forward the information you provided during the ordering process together with information about your order. In accordance with Article 6 Paragraph 1 Letter b of the GDPR, your data will be transmitted exclusively for the purpose of payment processing and only to the extent necessary for this purpose. Further information about giropay GmbH's data protection policy can be found at the following web address: https://www.giropay.de/rechtliches/datenschutzerklaerung.

– Paydirect

If you choose the paydirekt payment method, payment will be made by the payment service provider paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany. Your payment data (e.g. payment amount, payee details) and your confirmation that the payment data is correct will be collected, processed and transmitted to your bank by paydirekt GmbH for the purpose of processing the paydirekt payment in accordance with Art. 6 Para. 1 lit. b GDPR. This processing only takes place to the extent that is actually necessary to process the payment. paydirekt GmbH then authenticates the payment using the authentication method registered with your bank. Further information on the transmission and processing of your data can be found in paydirekt's data protection declaration, which you can view at the following link: https://www.paydirekt.de/agb/index.html.

– Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we forward your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. This transmission is carried out in accordance with Article 6 Paragraph 1 Letter b GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check can contain probability values ​​(so-called score values). If score values ​​are included in the results of the credit check, they are based on a scientifically recognized mathematical and statistical procedure. Address data is part of the data used, but is not the only data used in calculating the score values. Further information on data protection, including the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

Own review reminder (not sent via a customer review system)

We use your email address to send you a one-time reminder to submit a review of your order for our review system, provided you have expressly given us your consent to do so as part of your order or after your order in accordance with Article 6 (1) (a) GDPR.

You can revoke your consent at any time by sending a message to the person responsible for data processing.

Rating reminder via ShopVote

If you have expressly given us your consent in accordance with Art. 6 Para. 1 lit. a GDPR as part of your order or after your order, we will transmit your email address to the rating platform ShopVote of Blickreif GmbH, Alter Messeplatz 2, 80339 Munich (www.shopvote.de), so that it can send you a rating reminder by email.

You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform.

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This uses enhanced privacy mode, which, according to the provider, only initiates the storage of user information when the video(s) are played. When embedded YouTube videos are played, the provider "YouTube" sets cookies to collect information about user behavior. According to YouTube, this information is used to, among other things, collect video statistics, improve user experience and prevent misuse. If you're signed in to Google, when you click on a video, your data will be assigned directly to your account. If you do not want this association with your YouTube profile, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and analyzes them. This analysis is carried out in particular in accordance with Art. 6 Para. 1 lit. f GDPR based on Google's legitimate interests in displaying personalized advertising, conducting market research and/or designing its website according to user needs. You have the right to object to the creation of these usage profiles and to exercise this right you must contact YouTube. When using YouTube, personal data may also be transferred to Google LLC's servers in the USA.

Regardless of whether the embedded videos are played, each time this website is accessed a connection to the Google network is established, which may trigger further data processing operations that are beyond our control.

Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy

If required by law, we have obtained your consent to process your data as described above in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, deactivate this service in the “Cookie Consent Tool” provided on the consentmanager.net website (section 4 of this privacy policy).

Our app may collect health-related data to help users monitor their performance, track progress and receive personalized fitness analysis. This data can be entered manually or collected via integrations (e.g. Google Fit or similar platforms).

The following health-related information may be collected or accessed:

• Distance –

  to record the distance covered during a training session (e.g. running, walking or cycling).

• CyclingPedalingCadence / ExerciseSession –

  for recording cadence and details of cycling sessions.

• Steps / cadence –

  to display the number of steps and frequency during running or walking training.

• Speed –

  to display the current and average speed during a session.

• Total calories burned –

  to estimate calories burned based on intensity and duration of activity.

• Heart rate –

  to monitor exercise intensity and provide support during exercise in specific heart rate zones.

We do not share this data with third parties without the express consent of users. All data is processed securely and stored in accordance with applicable data protection laws.

You have the opportunity to participate in our loyalty program and the loyalty programs of your chosen partner studios when you make purchases through our online shop and participate in various special features. If you collect BeneFit points via our portal or from partner companies, after the end of the collection period we will transmit the following data to the respective studio or partner for the purpose of crediting and redeeming BeneFit points, based on our legitimate interest in the user-friendly design and optimal marketing of our website in accordance with Art. 6 Para. 1 lit. f GDPR: First name, last name, email address, number of BeneFit points and the basis for credit or redemption. You can deactivate participation in the BeneFit points loyalty program in your profile settings.

Own live chat system

This website uses a live chat system to respond to live queries. Your chat name and the content of your chat are recorded and stored as data for the duration of the chat. During the chat, the chat and your chat name are stored exclusively in RAM (Random Access Memory) and then only in encrypted form once we or you have ended the chat conversation. This encrypted storage lasts five years and is used solely to enable us to provide information in the event of official requests (e.g. regarding illegal content) where there is a legal obligation to do so.

Cookies are used to operate the chat function. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. These cookies make it possible to recognize the website visitor's internet browser and thus ensure that individual users of the chat function on our website can be distinguished (see Section 4 of this data protection declaration).

If the information collected in this way concerns a person, processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in effective customer support.

To prevent cookies from being stored, you can configure your internet browser so that all cookies are blocked in the future or cookies that have already been stored are deleted. However, disabling all cookies may prevent the chat function on our website from working.

For our accounting we use the sevDesk service, the cloud-based accounting software from sevDesk GmbH, Hauptstraße 115, 77652 Offenburg.

SevDesk processes incoming and outgoing invoices and, where applicable, our company's bank transactions in order to automatically record invoices, assign them to transactions and create financial accounting from this data in a semi-automated process.

If personal data is processed in this context, the processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business processes.

Further information about sevDesk GmbH, the automated processing of data and the data protection regulations can be found at https://sevdesk.de/sicherheit-datenschutz/

This website uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for a uniform font display. We have integrated the Google Web Fonts we use directly into our own servers and have used appropriate settings to prevent a connection to Google servers being established when our website is accessed. Therefore, no data is transmitted to Google.

For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

The applicable data protection law grants you comprehensive rights as a data subject (rights of information and intervention) towards the controller with regard to the processing of your personal data, about which we will inform you below:

• Right to information according to Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, where appropriate, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed about the guarantees pursuant to Art. 46 GDPR regarding the transfer of your data to third countries;
• Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data stored by us;
• Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Article 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data that you have disputed is being verified; if you object to the deletion of your data due to unlawful data processing and instead request that the processing of your data be restricted; if you need your data to establish, exercise or defend legal claims after we no longer need that data for the purposes for which it was collected; or if you have objected to the processing for reasons relating to your particular situation, pending verification whether our legitimate reasons outweigh yours.
• Right to information in accordance with Art. 19 GDPR: If you have asserted your right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom your personal data has been disclosed about this correction, deletion or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, to the extent that this is technically feasible;
• Right to revoke consent in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of your data at any time with future effect. In the event of revocation, we will delete the data in question immediately, unless further processing is permitted by another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent before its withdrawal.
• Right to complain according to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Right to object

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time for reasons relating to your particular situation with effect for the future.

If you exercise your right to object, we will stop processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You can exercise your right to object as described above.

If you exercise your right to object, we will stop processing the relevant data for direct advertising purposes.

We are fully committed to protecting the safety and well-being of all users, including children and minors, who may interact with our app. Although our app is intended for a general audience and is not specifically targeted at children, we take strict measures to prevent any abuse or exploitation.

Zero Tolerance Policy on Child Sexual Exploitation and Abuse (CSAE)

We have a zero-tolerance policy regarding child sexual abuse, exploitation or any form of endangerment. Any content, communication or behavior that exploits, endangers or incites minors is strictly prohibited and will result in immediate removal and reporting to the relevant authorities.

Compliance and prevention measures

Our app complies with the Child Protection Guidelines and all applicable laws protecting minors.

We regularly monitor our systems and, where applicable, user-generated content to ensure there are no materials or conduct that violate these standards.

Reporting Concerns

If you become aware of any content or activity within the App that could harm a child or violate these policies, please contact us immediately.

You can reach our child protection contact at:

info@fitness-nation.com

We will promptly investigate all reports and take appropriate action, including cooperating with law enforcement or other relevant authorities if necessary.

Obligation to provide information

We encourage all users to act responsibly, protect personal information, and contribute to a safe community. By using this app, you agree to report any suspicious or harmful activity that may jeopardize the safety of others.

The duration of storage of personal data depends on the respective legal basis, the purpose of the processing and - if applicable - additionally on the respective legal retention period (e.g. commercial and tax law retention periods).

When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data will be stored until the data subject revokes their consent.

If there are statutory retention periods for data that are processed within the framework of contractual or quasi-contractual obligations based on Art.

When processing personal data on the basis of Art.

When processing personal data for direct advertising purposes on the basis of Article 6 Paragraph 1 Letter f of the GDPR, these data are stored until the data subject exercises their right to object in accordance with Article 21 Paragraph 2 of the GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Published under:

Privacy

www.fitness-nation.com/datenschutz