This website uses cookies. By continuing to browse and use this website, you indicate your consent for us to use these cookies. You can change how your browser handles cookies in your browser settings.

eGym Privacy Policy

Privacy policy

    eGym Privacy and Cookies Policy

    We are committed to protecting your privacy online and complying with our legal obligations. We appreciate that information you provide to us may be of a personal and private nature and here we explain how we collect information, what we do with it and what controls you have.

    1. About us

    eGym GmbH, Prannerstrasse 2-4, 80333 Munich, Germany (“eGym” “we” “us” or “our”) are responsible for the recording, processing and use of your personal information in accordance with the German Data Protection Act (the “DSGVO”) and we are the data controller under the DSGVO.

    If you have any questions regarding data protection at eGym, please do contact us at any time as follows:

    FAO: Data Protection Officer, Mr. Bassam Saleh
    eGym GmbH
    Prannerstraße 2-4

    80333 Munich
    Germany
    E-Mail: privacy@eGym.com

    2. Affected services of eGym

    This privacy and cookies policy applies to the following:

    • eGym website (accessible at www.egym.co.uk) (Site)
    • eGym power training devices (training devices in fitness facilities) as well as weight and endurance training machines from other manufacturers used with eGym training software
    • eGym Fitness App (consumer smartphone application available for iOS (Apple) or Android (Google))
    • eGym Trainer App (application providing support to fitness facilities and personal trainer on iPad)
    • eGym gym finder (a platform listing suitable gyms in users' local areas)
    • eGym premium (subscription service for the use of additional training methods and the creation of personalized training plans on the eGym power devices) (together the Applications).

    “Fitness facility(ies)” includes gyms, health centres and physio practices.

    3. Data transfer and security

    Information that you submit via the Site or Application is sent to and stored on secure servers located in the EU/the European Economic Area (EEA). This is necessary in order to process the information. The servers on which eGym stores customer data of eGym GmbH are located within the European Union/the European Economic Area (EEA).

    Information submitted by you may be transferred by us to the third parties mentioned in the circumstances described in this policy, which may be situated in the United States or elsewhere outside the EEA and may be processed by staff operating outside the EEA. The countries concerned may not have similar data protection laws to the EEA. Where we transfer your information we will take all reasonable steps to ensure that your privacy rights continue to be protected and that adequate transfer methods are in place where required by law. Examples of adequate transfer methods we may use include: signing Standard Contractual Clauses as approved by the European Commission or working with third parties that are certified participants in the EU-U.S. Privacy Shield or have approved Binding Corporate Rules in place. If you have any questions about this, please contact us at privacy@egym.com.

    We place great importance on the security of all personal data associated with our users. We have security measures in place to safeguard our website and other systems against the loss, destruction, access, misuse, alteration and distribution by unauthorised persons of personal information under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal information. Whilst we cannot ensure or guarantee that loss, destruction, access misuse, alteration or distribution of information by unauthorised persons will never occur, we use all reasonable efforts to prevent it.

    Where you make orders or log in your personal data will be securely transferred by us via encryption, eGym exclusively uses TLS (Transport Layer Security) 1.0 to 1.2 for the communication between eGym devices and servers. Older versions of TLS will not be relied upon. Older versions of PFS (Perfect Forward Security), used by eGym for encryption (cipher), will also not be relied upon. eGym only uses HSTS-processes which are younger than one year. The encryption will be commonly referred to as SSL (the coding system). The above described processes ensure a high level of security for data transfers.

    You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via the Site or Application whilst it is in transit over the internet and any such submission is at your own risk.

    It is advisable to close your browser when you have finished your user session to help ensure others do not access your personal information if you use a shared computer or a computer in a public place.

    4. Processing of personal information

    How and why we collect and process your personal information is set out below:

    4.1 Website use/registration

    Visiting our website is optional and if you choose to visit the website we may collect and will process personal information in accordance with our own legitimate interests to promote our business, because you have agreed to provide us with such information or as otherwise permitted by applicable law.

    The legal basis for the processing of the abovementioned data is the fulfilment of a contract (Art. 6 I b) GDPR). The processing of the abovementioned data is necessary for the fulfilment of this contract with you.

    If you choose to register an account with us, you are requesting certain services from us and we need to collect certain information from you to provide you with these services. You can access your data which we store through your profile. In order to create a profile, you must register with your e-mail address for any weight machine or on the eGym website.

    You can add further information to your profile in addition to your email address such as a profile picture, body weight and height, gender, language, date of birth, address, telephone number e-mail and newsletter settings, fitness condition, training experience, training frequency, preferred training days, length of training unit as well as your occupation, typical working position, hobbies and sports practised to your profile on the eGym website in order to enable a targeted consultation and to receive a training plan from your trainer that is based on a corresponding analysis. This information is optional and whether you would like to provide this information is up to you.

    4.2 eGym training software (for eGym weight machines and those of other manufacturers for use with the eGym training software in fitness facilities)

    Registration is necessary (see 5.1) to be able to train on a weight or endurance training machine and use the eGym training software. Following successful registration you will receive a corresponding e-mail confirmation, with which you can create a password that will allow you to access the password protected areas of the website or the eGym Fitness App. Where necessary equipment settings will be generated by the trainer prior to the first training session. These settings (gender, body height, movement radius, weights) will be stored, so that the equipment will automatically be adapted to you during subsequent training.

    Training data (training equipment, weights, repetitions, distance and duration) will be stored automatically to enable an analysis of the training on this equipment with the eGym training software. Training results can also be documented manually with the aid of the eGym Fitness App.

    Processing this information is necessary for the fulfilment of the contract for services which you have requested from us.

    If you choose to, the information gathered by these machines and the eGym software will be shared with the both the trainer and the Fitness facility. You can update your preferences at any time to decide whether not share this information, please update your settings on the website or App or contact us, or the trainer or Fitness facility directly.

    The legal basis for the processing of the abovementioned data is the fulfilment of a contract (Art. 6 I b) GDPR). The processing of the abovementioned data is necessary for the fulfilment of this contract with you.

    4.3 eGym Fitness App

    The following information is required for use of the eGym Fitness App: Name, first name, height, weight. The results of the strength measurement on the weight machines will also be stored. In addition to documenting the training and training progress the information will make it possible to analyse your maximum strength, any muscle imbalance, your age and your activity level. The legal basis for the processing of the abovementioned data is the fulfilment of a contract (Art. 6 I b) GDPR). The processing of the abovementioned data is necessary for the fulfilment of this contract with you.

    You also have the chance to share your progress on Facebook and authentication of your Facebook account will be required if you choose to do this.

    In addition, you also have the option of creating links to other third party partners, for example to share training results with the aid of other services, if this is provided. This is your decision and will require your approval.

    4.4 eGym Trainer App

    We differentiate between the provision of eGym data to studios and the studio data of the eGym profile. eGym data is data recorded as part of your contractual relationship with eGym, whilst studio data is data that is recorded as part of your membership contract with the Fitness facility.

    The provision of the following eGym information to your fitness facility is necessary in addition to information required for registration (see 4.1) to allow a trainer of your fitness facility to manage your training via the Training App: Name, RFID assignment, equipment settings. This provision is required for the provision of eGym services. We need to process this information in order to perform the services under our contract with you. You can deactivate the link of your eGym profile with the Trainer App of your trainer at any time by cancelling the link in your profile settings. The legal basis for the processing of the abovementioned data is the fulfilment of a contract (Art. 6 I b) GDPR). The processing of the abovementioned data is necessary for the fulfilment of this contract with you.

    Studio data can be transferred to your profile from the fitness facility to allow you to use the relevant additional functions (for example downloading of training plans compiled by the trainer). Study data recorded by your fitness facility includes: telephone number, membership start/end, photograph, date of birth, gender, training experience, plans and stipulations. A transfer of your studio data to your eGym profile requires your approval to be provided to the fitness facility. Additional approval will always be obtained if you have entered your health information in the Trainer App for an analysis and this is optional.

    If you no longer wish the trainers of your fitness facility to have access to your information or do not wish to provide health information any longer you can ask for this to be switched off at any time during your contract with the fitness facility by contacting them or you can send us an email at privacy@egym.com.

    4.5 eGym Premium

    If you acquire the chargeable eGym Premium product from eGym, the subscription model/ object purchased, your first and surname, account details or credit card information as well as your private address will be recorded as part of the purchase process for processing the contract and for providing the service purchased. In addition further personal information such as for example training aims may be recorded. The processing of data is necessary for providing the service as part of the eGym Premium offer.

    The legal basis for the processing of the abovementioned data is the fulfilment of a contract (Art. 6 I b) GDPR). We need to process this information in order to provide you with our services under the eGym Premium contract.

    4.6 Fitness-Finder

    The provision of your name and e-mail address is necessary for using the services of the fitness-finder.com platform for requesting vouchers for trial training at participating fitness studios. Your telephone number is required to allow eGym and the fitness facility chosen by you to agree appointments and in case of possible queries. We process this data in order to fulfil the requested services by you subject to the terms, for example, the specific transfer of a voucher selected by you for the fitness studio in question. Your information provided in this circumstance will not be used for marketing purposes. The legal basis for the processing of the abovementioned data is the fulfilment of a contract (Art. 6 I b) GDPR). The processing of the abovementioned data is necessary for the fulfilment of this contract with you.

    4.7 Registration for the newsletter and updates on our offers

    If you would like to subscribe to the eGym newsletter you will need to provide an e-mail address to which we can send this newsletter.

    For the registration of new users and for sending out the newsletter and offer updates, which is part of the eGym range of services, we use the so-called “double opt-in” process. We will only send you a newsletter and updates on our offers by e-mail if you have first expressly confirmed that you have registered under the corresponding e-mail address to receive newsletters by checking the appropriate box. To complete your registration for newsletters and offer updates, we then send you a notification e-mail and ask you to confirm that you have registered under this e-mail address by clicking on a link contained in this e-mail. You can unsubscribe from the newsletter and offer updates at any time. Please note that this concerns only promotional e-mails. If you choose to unsubscribe from our promotional emails, we may still send you service communications in relation to the services which you subscribe to from us. The legal basis for the the dispatch of the newsletter you have subscribed to is the fulfilment of a contract (Art. 6 I b) GDPR).

    For sending out our newsletters we use the dispatch service provider Mailchimp [MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA, 30308 ], USA. The e-mail addresses of the newsletter subscribers as well as the corresponding registration details required for logging/proof of registration for the newsletter are stored on the Mailchimp servers outside the European Union/European Economic Area in the USA. These data are used exclusively on our behalf on the basis of an order processing agreement between us and Mailchimp for sending out the newsletter and storing the registration details, not for other purposes and especially not e.g. for sending e-mail messages by Mailchimp to you. Mailchimp is Privacy Shield-certified (https://www.privacyshield.gov/EU-US-Framework). The legal basis is Article 6 I f) GDPR (processing on the basis of the legitimate interest) in conjunction with Article 28 III GDPR (processing by a processor on the basis of a contract).”

    You may unsubscribe from the newsletter and offer updates at any time (for example by clicking on the “unsubscribe” link in every email) or by contacting us directly.

    4.8 Registration via Facebook Connect

    To use our services we also offer the possibility to register for eGym with your Facebook account. If you want to register using your Facebook profile, your account will need to be active. Facebook is a social network operated in Europe by Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland.

    The legal basis for logging in via Facebook Connect is Article 6 I a) GDPR (processing on the basis of the consent of the data subject).

    To register with your Facebook account you must first link your Facebook account with your eGym account. This can be done by selecting the “Apps” tab within your eGym account settings and clicking on “connect/link” in the Facebook section. You will be transferred to Facebook, where you’ll be asked to log in to Facebook in case you’re not already logged in to Facebook at that time. If you are not a Facebook user, you’ll be asked to create an account on Facebook.

    Next you’ll be asked to permit eGym access to the following data: public profile (name, profile picture, gender, language, age range, country, public information), e-mail address, birthday, current place of residence based on the information you have supplied to Facebook. Provided that you allow access to this data, it will be added to your eGym account.

    Lastly, eGym will ask your permission to make public any of our posts on your Facebook page. Permission is required in order to display your training results on your timeline. Please note that eGym cannot automatically make your posts public, you will be able to decide whether a post can be made public or not. In addition, you will be able to select which of your Facebook friends will be able to view the optional public post.

    Following a successful connection you will be taken back to your eGym account and will see a success message.

    You can delete the connection with your Facebook profile in your Facebook profile settings at any time. Alternatively/in addition, you can also delete the connection in your eGym account settings. Please note that in this case, data such as training progress will be deleted and that you’ll have to register for eGym again if you want to keep using our services.

    Your Facebook log-in data will not be stored by eGym. Other than stated above, there will be no further processing of your Facebook profile data by eGym.

    You can request that eGym no longer processes any of the aforementioned data transferred to eGym by Facebook to create an user account at any time with future effect by contacting us (e.g. by email to privacy@egym.com).

    5. Cookies and other similar tracking technologies

    We use various methods to process personal data, pseudonymous and anonymous data in order to continuously improve the Site and our Applications and to tailor them to be of interest to you and to make user friendly. We also use this data to advertise our service on other third party sites. Pseudonymous data will not alone identify you specifically. We would like to inform you of your right to object to the generation of user profiles when using such data for the purposes of advertising, market research or for certain tailoring of our Site and Applications.

    Please see further detail set out below:

    5.1 Server log files

    Each time you access the pages of the eGym Site or Applications, usage data is transmitted by the relevant internet browser and stored in server log files. The data sets stored in this case contain the following data: date and time of retrieval, name of the page accessed, IP address, referrer URL (the source URL from which you accessed the eGym Site), the volume of data transmitted plus product and version information for the browser used. The user’s IP addresses are deleted or pseudonymised after the end of use. Pseudonmysing means that the IP addresses are altered in such a way that the particular details about personal or factual circumstances cannot alone be assigned to a specific or identifiable person, or only at disproportionately high expense in terms of time, costs and manpower. We evaluate the log file datasets in order to improve our range of services on the Site even further and make it more user-friendly, to locate and eliminate errors more quickly and to control server capacities.

    The legal basis for the use of log files on our website is Article 6 I f) GDPR (processing is necessary to protect the legitimate interests of the controller).

    5.2 General information on Cookies

    When you interact with the Site or Applications, we try to make that experience simple and meaningful. When you visit our Site or access or use any Application, our web server sends a cookie or similar technology to your computer or mobile device (as the case may be). Cookies are small pieces of information which are issued to your computer or mobile device (as the case may be) when you visit a website or access or use a mobile application and which store and sometimes track information about your use of the Site or Application (as the case may be). A number of cookies we use last only for the duration of your web or Application session and expire when you close your browser or exit the Application. Other cookies are used to remember you when you return to the Site or Application and will last for longer.

    Use of some of the features on our Site or Applications could be restricted if the cookie function is deactivated.

    When the cookie is activated, an identification number is allocated to it. Your name, your IP address or similar data which would enable a cookie to be assigned to you is not linked with this information by us. On the basis of cookie technology we receive, for example, information about which pages of our Site and Application have been visited and we use this information to learn more about our services, customers and potential customers. In individual cases it is permitted for our third party partner companies to collect, process, or, use data from our Site through cookies as well. This applies in particular to the web analytics or social media services named below. In addition, data will be collected on the basis of cookie technology in order to optimise our advertising. This data collects also serves to produce an evaluation of the use of the services. Using this technology we can present you with advertising and/or particular offers and services on our own Site and Applications and on other third party websites. Our aim here is to make our range of online services as attractive as possible for you and to present you with advertising which corresponds to your areas of interest. The legal basis for the use of cookies on our website is Article 6 I f) GDPR (processing is necessary to protect the legitimate interests of the controller).

    For more information about cookies generally, please see http://www.allaboutcookies.org/.

    We use different types of cookies such as:

    • **Essential cookies** which enable you to navigate and use certain features provided through our Site and application. Without these, some of our pages or features would not load.
    • **Functionality cookies** which mean we can remember whether you have previously visited our Site and Applications, including any preferences you may have previously selected and to help us give you a tailored experience.
    • **Performance and analytical cookies** are used to help ensure that our Site and Application can support the number of visitors we get and to help correct any errors on the Services. They also help us understand if you have interacted with these Services before or if you are a unique visitor. We can also see which parts of the Services are the most popular. We use third parties (see below) to deliver these cookies.
    • **Retargeting and advertising cookies** collect information about the pages on our Site that you visit and other information about other websites you visit, in order to place you in a "market segment". This information is collected by reference to the cookie or other unique identifier. This may result in your seeing advertisements for our products you may be interested when visiting other websites or apps. We use a number of third parties as described below to help deliver these cookies.

    eGym uses the services of a few partners who help us to design the internet service and the eGym Site in a way which is interesting for you. Therefore, when you visit the eGym Site, cookies from partner companies will also be stored on your device. These cookies are automatically deleted after the pre-set time. In some cases pseudonymous data under a user ID is collected by the cookies. This data relates to such things as which products you have looked at, whether anything has been purchased, etc. Where third party advertising partners deliver the cookies on our Site which they also collect information via the eGym Site about which pages you have previously visited or which products you may for example have been interested in, so that advertising can be displayed to you which best corresponds to your interests. It serves the purpose of enabling our advertising partners to approach you with advertising which might be of interest for you throughout your online interaction across different websites.

    You can choose your settings, for example through reviewing the settings of your device and / or browser itself, which allows the storage of cookies conditional upon your consent. If you only want to accept the eGym cookies but not the cookies from our service providers and partners, you can select the setting “Block third-party cookies” in your browser. Generally there will be a display via the Help function in the menu list of your web browser telling you how to reject new cookies and disable ones already received. With shared-use computers which are set to accept cookies and flash cookies, we recommend that you always sign out completely after the end of a session.

    For more information about advertising cookies including how to manage your third party cookie settings, please visit http://www.youronlinechoices.com/uk/.

    5.3 Use of social media plug-ins

    As mentioned above, our Site uses social plug-ins (“plug-ins”) for and cookies (see below) from the social network facebook.com, which is operated by in Europe by Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland (“Facebook”). The plug-ins are identified with a Facebook logo or the addition of “Facebook Social Plugin”. Through social plugins we offer you the possibility to interact with the social network and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the social plugins is Article 6 I f) GDPR.

    If you call up a web page on the Site or Applications which contains a plug-in of this kind, your browser produces a direct connection with the Facebook servers, which may be basd in the United States or elsewhere outside Europe. The content of the plug-in is transmitted by Facebook direct to your browser and is integrated by this into the web page. With the integration of the plug-ins, Facebook receives the information that you have called up the corresponding page of our Site or Applications. If you are logged into Facebook then Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for example by clicking on the “Like” button or leaving a comment, the corresponding information will be transmitted by your browser directly to Facebook and stored there.

    Another example of our Site linking with Facebook is through the use of various Facebook cookies. Here, a browser will send data using cookies to the Facebook servers on websites including active Facebook elements (IFrames). These will include the URLs of pages recently accessed as so-called referrers, amongst others, as well as previously applied cookies. If you are also logged into Facebook the browser window will show your session ID. With this Facebook can ascertain the websites visited by a specific person and generate movement and surfing profiles. If you are not logged into Facebook, data will still be sent to Facebook. Facebook will also set a cookie valid for two years containing a clear ID, which is sent by the browser every time a connection with a Facebook server is made. The ID can subsequently be allocated to a person once more by Facebook - for example if the same later logs in.

    If you do not desire this association you can select the function “block third party cookies” in your browser settings. The browser will then not send cookies to the server for embedded content from other providers. Please note that this setting may also disable other website-wide functions in addition to the Like button. More detailed information can be found in Facebook’s data protection conditions under https://en-gb.facebook.com/help/.

    Please refer to the Facebook privacy settings for further information about how Facebook processed and uses this data as well as your rights in this respect and the chance to configure your privacy settings. Please see here https://www.facebook.com/privacy/explanation for more detail.

    5.4 Tracking and Remarketing Tools

    To continuously improve and optimise our offer, to be able to show you relevant advertising based on your interests outside our website and to measure the effectiveness of our advertising, we use so-called tracking technologies. We use the services of Google Analytics, Google AdWords (Remarketing), Branch.io, Firebase, Custom Audience for Website and Crahlytics. The legal basis for the use of tracking-based analyses and remarketing tools on our website is Article 6 I f) GDPR (processing is necessary to protect the legitimate interests of the controller). In detail:

    5.4.1 Google Analytics

    Google Analytics is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). eGym uses the Google Analytics functionality “User ID” via all platforms on the eGym Site /mobile Site, the eGym fitness application and the trainer application to gather information on the usage of our services by you, both locally and globally to improve and help us analyse the eGym services. Please see further information set out below:

    eGym Site/mobile website:

    Google Analytics uses “cookies”, i.e. text files, which are stored on your computer and enable an analysis of the use of our range of services by Google. As a rule, the information gathered by the cookie about the use of our Site (including your IP address) is transmitted to a Google server in the USA and stored there. On our Site the 'Google Analytics' cookie has been expanded by the code “gat._anonymizeIp();“so-called IP masking. At our request, your IP address is therefore collected by Google in abbreviated form. Your IP address will first be abbreviated by Google within the member states of the European Union or European Economic Area. In some cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Google will use the information gathered by the cookie to in order to evaluate your usage of our Site, to compile reports on Site activities for us and to provide us with other services associated with the use of web pages and the Internet. You can prevent the storage of cookies by updating your settings in your browser; however, this may prevent you from using some functions of our Site to their full extent. In addition you can prevent the collection of the data produced by the cookie and relating to your use of the Site (including your IP address) for Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link https://tools.google.com/dlpage/gaoptout.

    More information can be found on Google Analytics and data protection at https://support.google.com/analytics/answer/6004245?hl=en.

    eGym Applications:

    Data on the usage of the Applications is gathered with the download, installation and usage of the Application on a mobile device. This contains the following data: device model, geographical information (only insofar as you chosen to configureyour device in this way) or the operating system installed on the mobile device (iOS, Android) as well as aggregated data on the usage of the Application. An identification key allows individual users of the Application to be identified. The user’s log-in information is not stored or processed. The resulting analysis on the usage of the Application helps us to improve our service, to develop new features and to optimise our focus on the needs of our users. You can opt-out from the collection of the data directly in the settings on your mobile device. For Applications on mobile devices from Apple (iOS operating system) you can opt-out in the general settings (eGym fitness app/ trainer Application). For Applications on mobile devices with an Android operating system you can opt-out in your profile settings within the Application. However, please note that sometimes opting out will prevent you from using the functions of the Applications to their full extent.

    Google AdWords (Retargeting)

    We also use retargeting functionalities on our Site provided by the Google AdWords service. Google AdWords is an online advertising service provided by Google. By using the retargeting functionalities we are able to present you with interest based advertising within the Google advertising display network (“Google adverts” on Google or on other third party websites). This is based on an analysis of your interaction with the Site, e.g. which services and offers you were interested in, in order to present the users with interest based advertisements on other third party websites after you have visited our website. To do so, Google stores “cookie”, in your web browsers if you visit websites that use Google services and those websites within the Google display network. Information from your visits to such websites is gathered via the cookie. The cookie allows the unique identification of a web browser on a specific computer. As a rule, the information gathered by the cookie about the use of our Site (including your IP address) is transmitted to a Google server in the USA and stored there. On our Site the 'Google Adwords (retargeting) cookie has been expanded by the code “gat._anonymizeIp();” so-called IP masking. At our request your IP address is collected by Google in abbreviated form. As above, your IP address will first be abbreviated by Google within the member states of the European Union or in other states which are contracting parties to the Agreement on the European Economic Area. In some cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. You can prevent the storage of cookies by updating your browser settings; although sometimes this will prevent you from using all the functions of this website to their full extent. In addition you can deactivate interest based adverts on Google as well as interest-based Google adverts on other websites (for websites that are part of the Google display network) in your browser, by visiting the “deactivation settings” on.

    https://support.google.com/ads/answer/7029158?hl=en-GBand click on the link “deactivate”.

    Furthermore, you can also opt-out from interest-based advertisements on http://www.networkadvertising.org/choices/?partnerId=1/>http://www.networkadvertising.org/choices/?partnerId=1/. Please note, that this opt-out requires the storage of an opt-out cookie on your computer.

    5.4.2 Branch.io

    eGym uses the Branch.io service, a service provided by Branch Metrics, Inc. in 2443 Ash Street, Palo Alto, CA 94306, USA, for improved user experience. The service allows simplified interaction by the user with eGym products across various devices, channels and platforms. Branch.io recognises if you access our services in ways other than through our app. , Branch.io directs you to the store of your respective provider of the Smartphone operating system to download the app if you wish to (there is no obligation to download this unless you want to).

    Branch.io will provide a user-specific hyperlink if you choose to download the app which will be shared with eGym. . Branch.io will record the operating system and version, date stamp, API key (ID key of the application), application version, the equipment model, manufacturer and ID number, the iOS ID key for advertising (an identifier which allows iOS to collect information about the download), the iOS ID key for vendors, Android ID keys for advertising (an identifier which allows Google to collect information about the download), the IP address and network status in order to improve user guidance. The listed data, in particular the IP address, will be used only for the purpose of providing a link to eGym products and for a limited period only across the iOS and Android platforms with those other third party app providers which also use services and participate in the Branch.io network. Branch.io may also use cookies under certain circumstances. Please see above or further detail below of the eGym data protection notice regarding the use of cookies and how these can be blocked or deleted.

    You can object to the recording of data by Branch.io by following this link:https://app.link/optout. Further information regarding Branch.io data protection policy can be found underhttps://branch.io/policies/#privacy.

    5.4.3 Firebase

    Firebase is a development platform for mobile and web applications which is administered by Google.

    eGym uses Firebase in its Fitness App and Trainer App to analyse user behaviour. Activity data, i.e. contact gestures, scrolling or user interaction, is collected and stored. This data is recorded as part of this service and is not linked with actual user data as part of the service by us. On iOS equipment you can deactivate the recording of data in the settings under the tab Fitness App. On Android units please select the incognito mode in your browser settings. Further information about Firebase can be found under: https://firebase.google.com/support/faq/ and about data protection under https://www.google.com/policies/privacy/.

    5.4.4 Custom audience from website

    Custom Audience, is a marketing method of Facebook used for the targeted presentation of advertising on Facebook. eGym incorporates a so-called “Facebook pixel” into its pages fitness-finder.com to find out which Facebook members have visited our website and will show our own advertising only to those Facebook members and will include customers and non-customers. A “Facebook pixel” is JavaScript code for websites with which target groups for website visitors are compiled automatically, which are then to be addressed again. For this e-mail addresses or telephone numbers are uploaded to a Facebook server. The information is encrypted by means of the SHA256 method and then checked by Facebook in order to display advertising in a targeted way.

    You can block these advertisements at any time. To do this you can click on the unsubscribe link within Facebook on a specific advertisement (“Why am I being shown this?”) and hide the advertisement by clicking directly on it as well as selecting the option “Hide all from this advertiser”.

    You can also update your Facebook advertising by on your account by visiting Settings > Ads.

    5.4.5 Crashlytics

    In addition, our Applications also use Crashlytics, a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. This service supports the improvement and troubleshooting of our Applications by collecting and storing usage data. More information in relation to this service can be found by visiting https://try.crashlytics.com/terms/privacy-policy.pdf.

    5.4.6 Google Maps API

    Fitness-finder.com uses Google Maps API, a map service Google , to display an interactive map. By using Google Maps information about your use of this website (including your IP address) will be transmitted to a Google server in the USA and will be stored there.

    Google may transmit the information obtained through Analytics & Maps to third parties that process such data on behalf of Google or as otherwise permitted. Google will process store and use this data in accordance with their own privacy policies, please see here: https://www.google.com/policies/privacy/.

    You can disable the connection with the Google Maps service in a simple way and prevent your data being transferred to Google: Simply deactivate JavaScript in your browser. Please note though that you will not be able to use the map display on fitness-finder.com in this case.

    By using our website and not deactivating the JavaScript function your data will be processed by Google in the way described above and for the purpose mentioned above in order to deliver the service you have requested.

    5.5 Use of anonymised data for sports science studies

    For the purpose of sports science studies, partly in cooperation with research institutions, universities and institutes, we process anonymised user data about the training behaviour of users to be able to make sports science-related findings e.g. with regard to training intensity and training frequency and to publish studies. Your training data are completely anonymised, so that eGym cannot deduce information about individual users and anonymisation cannot be reversed. Research institutions, universities and institutes only receive anonymous data sets for evaluation purposes. The legal basis is Article 6(1)(1)(f) GDPR (processing on the basis of the legitimate interest).

    6. Cancellation of approvals/Special reference to the right of objection

    If we use your data for a purpose that is not set out in this privacy policy or that otherwise requires your approval we will ask you for your specific agreement which you can withdraw at any time.

    We would also like to point out that if your personal data are processed on the basis of the legitimate interest within the scope of the weighing of interests pursuant to Article 6 I f) GDPR and/or your personal data are processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time.

    If you agree to such further processing but subsequently wish to object to our processing of your personal data in this way, please do contact us at privacy@egym.com . Any processing before such withdrawal of agreement will not be affected.

    7. How we keep your data

    We comply with the principle of data minimisation. This means we store your personal information only for as long as this is necessary for the provision of the performance/ service desired or ordered by you (see details of performances/ services and intended use listed under section 4 above),for example, for as long as a contractual relationship with you exists and/or your agreement has been given.

    Once the respective processing purpose has lapsed or at the end/ termination of a contractual relationship or following cancellation of your agreement the relevant data we will only retain that data which we are permitted to retain under legal provisions or otherwise obliged to under legal retention requirements that we must comply with for example commercial law provisions.

    8. Required data

    The provision of some personal information is necessary (as referred to in section 4.1 above) for the purpose of completing the contract or for the purpose of providing the performance/ service desired by you is necessary to enable you to make use of said performance/ service desired by you (see the description of the respective service according to point 4).

    The provision of data that is not essential for the completion of the contract in question or for the provision of the performance/ service desired by you is voluntary and such information is identified in the corresponding entry fields that are marked as “optional”.

    A possible non-provision of data required for completing the contract or for the provision of the performance/ service desired by you may result in us being unable to provide the respective contractual performance/ service, or to provide it in line with the contract.

    9. Recipients of your data

    In performing the services, eGym may disclose your data to third party recipients. We will share personal and pseudonymous data to third parties in the ways described above, for example, through our use of cookies providers or where we disclose your data to trainers or Fitness facilities if you choose to use these services.

    We may also disclose aggregate statistics about visitors to the Site, users of the Applications, customers and sales in order to describe our services to prospective partners, advertisers, sponsors and other reputable third parties and for other lawful purposes.

    We may disclose your personal information to any of our affiliates, or to our agents or contractors who assist us in providing the services we offer through the Site or Applications, processing transactions, fulfilling requests for information, receiving and sending communications, updating marketing lists, analysing data, providing support services or in other tasks, from time to time. Our agents and contractors will only use your information to the extent necessary to perform their functions.

    In the event that we undergo re-organisation or are sold to a third party, you agree that any personal information we hold about you may be transferred to that re-organised entity or third party.

    We may disclose your personal information if required to do so by law or if we believe that such action is necessary to prevent fraud or cyber crime or to protect the Site or Application or the rights, property or personal safety of any person.

    By way of example, eGym will transmit personal information to the following contracted processors for hosting our customer data as part of processing the contract:

    Contracted processor Address/ country Performance Details
    Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, Washington 98109-5210, USA (Region: Ireland) AWS provides data processing and storage services as part of its cloud computing service We choose to process and store the data concerned for these services at computer centres within the EEA. This data may be subject to further transfer outside the EEA by Amazon to or by its sub-processors.
    Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland eGym uses the services of Google Cloud Platform for storing and processing customer data as well as for operating eGym Cloud. We choose to process and store the data concerned for these services at computer centres within the EEA. This data may be subject to further transfer outside the EEA by Google to or by its sub-processors.

    10. Your Rights

    You have a right under certain circumstances to:

    • ask eGym what personal data we process about you and access such personal data and further information about the processing and use of such data and whether there is the existence of automatic decision making as well as the logic behind such automated decision making;
    • request the correction of incorrect and incomplete personal data relating to you;
    • request the deletion of personal information relating to you if it is no longer necessary for the purposes for which it was recorded or processed in some other way;
    • ask that we restrict (while we verify or investigate your concerns with this information, for example) processing or object to processing;
    • right to request to receive personal information relating to you which has been provided by you in a structured, common and machine readable format;
    • withdraw your approval for certain processing where we have relied upon your approval for processing.

    You can exercise the rights listed above at any time by contacting us at FAO: Data Protection Officer: Mr. Bassam Saleh
    eGym GmbH
    Prannerstraße 2-4

    80333 Munich, Germany
    E-Mail: privacy@eGym.com

    If your request or concern is not satisfactorily resolved by us or you would otherwise like to exercise your right to contact your local data protection authority you may find further information here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html.

    Last updated: May 2018