I will be happy to respond to your information requests and feedback on the subject of data protection. Simply email me at firstname.lastname@example.org.
Personal data is any information relating to an identified or identifiable natural person (e.g. name, address, telephone number, date of birth or email address). As a rule, it is possible to use my website without providing any personal information. However, the use of certain services may require you to provide personal data, for example if you register or you participate in a competition. Mandatory information is normally indicated with a *.
Should you use services that require registration, we will collect, process and use the data required for those services from you, in particular in order to make the services available to you.
With the user’s explicit registration, the following data can be collected (provided the user enters this data him- or herself): first name, last name, date of birth, email address, street, house number, postcode, town, SEPA data for direct debit, telephone number. We determine your country of origin based on the IP address you use to visit our website.
The personal data you provide when registering is collected, processed and used by Body Image Fitness for the purpose of creating the relevant contract, for executing and processing the contract, as well as for billing purposes.
Using our website
When you use our website, we also process personal data to the extent necessary (e.g. when you participate in courses, add favourite courses, participate in competitions)
Disclosure of data to third parties; service providers
In principle, we will only pass on the data we collect if:
- you have given your explicit consent pursuant to Art. 6(1) (a) GDPR;
- disclosure is necessary pursuant to Art. 6(1) (f) GDPR in order to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed;
- we are legally obliged to do so under Art. 6(1) (c) GDPR; or
- this is required under Art. 6(1) (b) GDPR for the processing of contractual relationships with you or for taking steps at your request prior to entering into a contract (e.g. forwarding enquiries and orders to regional cooperation partners).
In addition, data may be disclosed in connection with official requests, court orders and legal proceedings if this is necessary to pursue or enforce rights.
If these service providers process your data outside the European Union, this may result in your data being transferred to a country with a lower data protection standard than that of the European Union. In such cases, Body Image Fitness ensures that the service providers concerned guarantee an equivalent level of data protection, either by contract or otherwise (e.g. by concluding Standard Contractual Clauses with the service provider. Alternatively, for data transfers to third countries, Gymondo relies on one of the exceptions under Art. 49 DSGVO.
Disclosure of data to cooperation partners
Where a contract is concluded within the framework of a cooperation, we may also disclose your personal data to the respective cooperation partner (e.g. your telecommunications provider or your health insurance provider), for example to verify your membership or contract status with the cooperation partner or for billing purposes in connection with the cooperation. Depending on the cooperation, the legal basis for this is Art. 6(1) (a) or (b) GDPR.
Disclosure of data to banks and payment service providers
We use external payment service providers. Depending on which payment method you choose when ordering, we will disclose the data collected for payment processing purposes (e.g. bank details or credit card information) to the bank commissioned with the payment or to payment service providers commissioned by us. The legal basis for this data processing is Art. 6(1) (b) GDPR.
Data processing for advertising purposes
Sending of advertising to existing customers
We offer you the opportunity to subscribe to a newsletter, in which we regularly inform you about our new products, services and news from the world of fitness and lifestyle. The legal basis of this data processing is your consent pursuant to Art. 6(1) (a) GDPR.
In our email newsletters, we use market-standard technologies to allow us to measure interactions with the newsletters (e.g. opening and click rates). We use this data for general evaluations as well as to personalise and further develop our content and customer communication. This is done using small graphics (known as pixels) and special links embedded in the newsletters. The data collected in this way will be associated with your other personal data. However, we can only view aggregated information about our subscribers’ reading habits, and not whether and when a subscriber opened a particular email. The legal basis of this is your consent pursuant to Art. 6(1) (a) GDPR. If you do not want your usage behaviour to be analysed in this way, you can unsubscribe from the newsletter or disable the display of graphics in your email client by default.
You can withdraw your consent at any time. To do this, please use the unsubscribe link at the end of a newsletter or contact us using the information in the “Your contact person and contact” section.
Online presence on social media
We maintain online presences on social networks in order, among other things, to communicate with customers and other interested parties and to inform them about our products and services.
User data is usually processed for market research and advertising purposes. In this way, user profiles can be created based on the users’ interests. For this purpose, cookies and other identifiers are stored on users’ computers. Based on these usage profiles, ads are then shown on the social networks, for example, but also on third-party websites.
We would like to point out that the most efficient way to assert data protection requests is with the respective social network provider, as only these providers have access to the data and can take appropriate measures directly.
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Facebook fan pages based on an agreement on the joint processing of personal data
- EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
- Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
- EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
- Vimeo, Inc., 555 West 18th Street, New York, New York 10011, US
- EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active
Duration of storage; retention periods
We will store your data for as long as is necessary to provide our website and the associated services or as long as we have a legitimate interest in further storage. In all other cases, we will erase your personal data with the exception of data that we are required to maintain in order to comply with contractual or legal (e.g. under tax or commercial law) retention periods (e.g. invoices). Contractual retention periods may also result from contracts with third parties (e.g. holders of copyrights and ancillary copyrights).
Your rights of access and rectification
You may request that we confirm whether we process personal data concerning you, and you have a right of access to the personal data of yours which we process. Should your data be inaccurate or incomplete, you may request that it be rectified or completed. If we have passed on your data to third parties, we will inform them about the rectification to the extent required by law.
Your right to erasure
If the legal requirements are met, you can request that we erase your personal data without delay. In particular, this is possible if
- your personal data is no longer needed for the purposes for which it was collected; the legal basis for the processing was solely your consent and you have withdrawn this;
- you have objected to processing for advertising purposes (“advertising objection”);
- You have objected to processing, citing the legal basis of the balancing of interests for personal reasons, and we cannot prove that there are overriding legitimate reasons for a processing;
- your personal data has been unlawfully processed; or
- your personal data must be erased in order to comply with legal requirements.
Please note that your right to erasure is subject to restrictions. For example, we do not have to, or rather are not allowed to, erase any data that we have to retain further due to legal retention periods. Data which we require for the establishment, exercise or defence of legal claims is also excluded from your right to erasure.
Your right to restriction of processing
If the legal requirements are met, you can request that we restrict processing. In particular, this is possible if
- the accuracy of your personal data is disputed by you, in which case we will restrict the processing until we have had the opportunity to verify its accuracy;
- the processing is not lawful and you request a restriction of use instead of erasure (see previous section); we no longer require your data for the purposes of processing, but you need it to establish, exercise or defend your legal claims;
- you have objected for personal reasons, in which case we will restrict the processing until it is established whether your interests prevail.
If there is a right to restriction of processing, we will mark the data concerned in order to ensure that it will only be processed within the narrow limits that apply to such limited data (in particular to defend legal claims or with your consent).
Your right to data portability
You have the right to receive, in a transferable format, personal data that you have provided to us for the performance of the contract or on the basis of your consent. In this case, you can also request that we transfer this data directly to a third party, to the extent that this is technically feasible.
Your right to withdraw your consent
If you have consented to us processing your data, you can withdraw this at any time with effect for the future. This will not affect the lawfulness of the processing of your data before the withdrawal.
Your right to object to direct marketing
You can also object to the processing of your personal data for advertising purposes at any time (“advertising objection”). Please note that for organisational reasons there may be an overlap between your withdrawal and the use of your data during a campaign that is already running.
Your right to object for personal reasons
You have the right to object to data processing by us for reasons arising from your particular situation, insofar as this is based on the legal basis of a legitimate interest. We will then cease processing your data, unless we can – in accordance with the statutory provisions – prove compelling legitimate reasons for further processing which outweigh your rights.