PRIVACY POLICY

 

§ 1 Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Waldemar Waigel, Mindener Straße 442, 49086 Osnabrück, Germany, Email: support@your-fitness-guide.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

§ 2 Data Collection when Visiting our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

 

§ 3 Hosting & Content Delivery Network

Bunny

We use a Content Delivery Network from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia.

This service allows us to deliver large media files such as graphics, page content, or scripts through a network of regionally distributed servers more quickly. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, ensuring the protection of the data of our website visitors and prohibiting unauthorized disclosure to third parties.

§ 4 Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device and allow us to save your settings for future visits (so-called “persistent cookies”). In the latter case, you can find the storage duration in the cookie settings of your web browser.

If personal data are also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can configure your browser settings according to your preferences, and you can be informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

§ 5 Contact

In the context of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been finally clarified and there are no legal retention obligations to the contrary.

§ 6 Comment Function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is done for security reasons and in the event that the affected person violates the rights of third parties or posts illegal content through a given comment.

The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

§ 7 Data Processing when Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with such data when opening a customer account. The necessary data for opening an account can be found in the input mask of the respective form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned contact address. After deletion of your customer account, your data will be deleted provided that all contracts concluded through it have been fully processed, no legal retention periods oppose it, and there is no legitimate interest on our part in continued storage.

§ 8 Data Processing for Order Processing

To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order (name, address, email) to inform you personally about upcoming updates within the legally prescribed period as part of our legal obligations in accordance with Art. 6(1)(c) GDPR via a suitable communication channel (e.g., postal or email). Your contact details will be strictly used for communication about updates owed by us and processed by us only to the extent necessary for the respective information.

To process your order, we also collaborate with the following service provider(s) who assist us in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

§ 9 Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables the analysis of your use of our website.

By default, when visiting the website, Google Analytics 4 sets cookies that are small text files placed on your device and collect certain information. This information includes your IP address, which, however, is truncated by Google to exclude direct personal identification.

The information is transmitted to Google’s servers and processed there. Transmissions to Google LLC in the USA are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. The data collected during the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the described processing, especially the setting of cookies on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without your consent, the use of Google Analytics 4 will be suspended during your visit to the site. You can revoke your consent at any time for the future. To exercise your right of revocation, please disable this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google to ensure the protection of our site visitors’ data and to prohibit unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 uses the special feature “demographic features” and can create statistics about the age, gender, and interests of page visitors. This is done through the analysis of advertising and information from third-party providers. Target groups for marketing activities can be identified in this way. However, the collected data cannot be attributed to a specific individual and is deleted after storage for a period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics under Art. 6(1)(a) GDPR, analyze your cross-device usage behavior and create database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the “Personalized Advertising” feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en. Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en 

UserIDs

As an extension to Google Analytics 4, the “UserIDs” function may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6(1)(a) GDPR, set up an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

§ 10 Page Functionalities

10.1 Vimeo

This website uses plugins for the display and playback of videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos via the plugin is started, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be directly associated with your account when you click on a video. If you do not wish to associate it with your account, you must log out before pressing the play button.

All the aforementioned processing, especially the setting of cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. The granted consent can be revoked at any time for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

10.2 Youtube

This website uses plugins for the display and playback of videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC., USA.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos via the plugin is started, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be directly associated with your account when you click on a video. If you do not wish to associate it with your account, you must log out before pressing the play button.

All the aforementioned processing, especially the setting of cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. The granted consent can be revoked at any time for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

10.3 FontAwesome

This page uses web fonts from the following provider for the uniform presentation of fonts: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA.

When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.

Processing of personal data in connection with the provider of fonts only takes place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent granted at any time with effect for the future by deactivating this service through the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font will be used from your computer.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

10.4 Google Web Fonts

This page uses web fonts from the following provider for the uniform presentation of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA.

Processing of personal data in connection with the provider of fonts only takes place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent granted at any time with effect for the future by deactivating this service through the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font will be used from your computer.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, ensuring compliance with the European data protection level based on the European Commission’s adequacy decision.

10.5 Google reCAPTCHA

On this website, we use the CAPTCHA service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses “Google Fonts,” fonts loaded from the internet by Google. This does not involve processing additional information beyond what is already transferred to Google through the functionality of ReCaptcha.

The service checks whether input is made by a natural person or through abusive machine and automated processing, blocking spam, DDoS attacks, and similar automated malicious attempts. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the used device, recognition data of the used browser and operating system type, as well as the date and duration of the visit and transmits this for evaluation to the provider’s servers.

The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, ensuring the protection of data of our site visitors and prohibiting unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, ensuring compliance with the European data protection level based on the European Commission’s adequacy decision.

10.6 OpenStreetMap

This website utilizes an online mapping service provided by the following provider: OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK.

The online mapping service is a tool for displaying interactive (land) maps to visually represent geographic information. By using this service, our location will be displayed to you, facilitating potential geolocation.

Upon accessing the subpages where the provider’s map is integrated, information about your usage of our website (such as your IP address) will be transmitted to and stored on the provider’s servers.

The processing of your personal data is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the user-friendly design of our website. If you do not agree to the future transmission of your data to the provider, you have the option to completely deactivate the provider’s online mapping service by disabling JavaScript in your browser. The online mapping service on this website will then no longer be usable.

To the extent legally required, we have obtained your consent pursuant to Art. 6 Para. 1 lit. a GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the procedure described above for lodging an objection.

When transferring data to the provider’s location, an adequate level of data protection is ensured through an adequacy decision of the European Commission.

§ 11 Tools and Miscellaneous

Cookie Consent Tool

This website uses a “Cookie Consent Tool” to obtain effective user consents for cookies requiring consent and cookie-based applications. The tool is displayed to users in the form of an interactive user interface upon page load, allowing consents for specific cookies and/or cookie-based applications to be granted by checking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user grants consent by checking the box. This ensures that such cookies are only set on the respective user’s device in case of granted consent.

The tool uses technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

In individual cases, for the purpose of storing, assigning, or logging cookie settings, the processing of personal data (such as IP address) may occur in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for processing is Art. 6(1)(c) GDPR. As data controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent.

If necessary, we have concluded a data processing agreement with the provider, ensuring the protection of data of our site visitors and prohibiting unauthorized disclosure to third parties.

Further information about the operator and the settings of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

§ 12 Rights of the Data Subject

12.1 The applicable data protection law grants you the following rights vis-à-vis the controller regarding the processing of your personal data (data subject rights), with reference to the specified legal basis for the respective exercise conditions:

  • Right to information according to Art. 15 GDPR;
  • Right to rectification according to Art. 16 GDPR;
  • Right to erasure according to Art. 17 GDPR;
  • Right to restriction of processing according to Art. 18 GDPR;
  • Right to notification according to Art. 19 GDPR;
  • Right to data portability according to Art. 20 GDPR;
  • Right to withdraw consent granted according to Art. 7(3) GDPR;
  • Right to lodge a complaint according to Art. 77 GDPR.

12.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE SCOPE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

§ 13 Duration of Personal Data Storage

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, additionally by the respective legal retention period (e.g., commercial and tax retention periods).

In the case of processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the relevant data is stored until you revoke your consent.

If there are legal retention periods for data processed within the framework of contractual or similar obligations based on Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer necessary for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

In the case of processing personal data based on Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object according to Art. 21(1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

In the case of processing personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object according to Art. 21(2) GDPR.

Unless otherwise stated in the specific processing situations in this statement, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Datenschutz