This is an English translation provided for your convenience. The German version is legally binding.
1. Data controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Julian Stock, Grace-Hopper-Straße 14, 23562 Lübeck, Germany
Email: julian@gymsnap.de
2. General information on data processing
We generally only process personal data of our users to the extent necessary to provide a functioning website and our content and services. The processing of personal data regularly only takes place with the consent of the user or on the basis of a legal permission (Art. 6 (1) GDPR).
3. Use of the GYMSNAP app
If you create an account at app.gymsnap.de and use the app, we process the training data you enter (e.g. exercises, weights, repetitions, workout sessions) as well as your account data in order to provide you with the service and to track your training progress.
The legal basis for this is Art. 6 (1)(b) GDPR, as the processing is necessary for the performance of the usage agreement concluded with you. Transmission to our server is encrypted (TLS).
4. Server log files
When you visit our website, our hosting provider automatically collects information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request, and IP address.
This data is not merged with other data sources. The collection of this data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.
5. Cookies and local storage
Our website uses technically necessary cookies or comparable storage technologies required for the operation of the site, for example to remember your language preference. These are used on the basis of Sec. 25 (2) TDDDG (German Telecommunications and Telemedia Data Protection Act) and/or Art. 6 (1)(f) GDPR. In addition, we use the Matomo analytics software described in section 6. No tracking for advertising purposes takes place.
6. Web analytics with Matomo
This website uses the web analytics service Matomo, which we self-host on a server within the European Union (stats.die-crafter.de). Matomo sets cookies that allow us to analyze the use of this website. Among other things, this includes pages visited and clicks on certain buttons (e.g. navigation and call-to-action buttons), recorded pseudonymously to help us understand how our website is used and improve it accordingly.
Your IP address is shortened (anonymized) before it is stored. The information generated by Matomo is not passed on to third parties and is not combined with other services or advertising networks.
The legal basis for using Matomo is our legitimate interest in the statistical analysis and needs-based optimization of our offering pursuant to Art. 6 (1)(f) GDPR. You can object to this data collection at any time by blocking cookies from stats.die-crafter.de in your browser settings.
7. YouTube videos
This website lets you optionally play a video embedded via YouTube's privacy-enhanced mode (youtube-nocookie.com, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The video is only loaded once you actively click the play button; before that, no connection to YouTube or Google servers is made.
By clicking play, you load content from YouTube, which transmits your IP address and possibly other usage data to Google. We have no influence over what Google does with this data in detail. For more information, see Google's privacy policy at policies.google.com/privacy.
The legal basis for loading the video is your consent given through the active click on the play button (Art. 6 (1)(a) GDPR). As long as you do not play the video, no data is transmitted to YouTube or Google.
8. Hosting
This website and its associated API are operated by a hosting provider with a server location within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider, ensuring that personal data is processed exclusively according to our instructions and in compliance with the GDPR.
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock icon in the browser bar.
10. Storage duration
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you delete your account, the associated training data will be deleted, unless statutory retention obligations prevent this.
11. Your rights
You have the right at any time to request free information about your stored personal data, its origin and recipients, and the purpose of the data processing (Art. 15 GDPR). You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object to processing (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
12. Contact for privacy matters
If you have questions about the collection, processing, or use of your personal data, or requests regarding information, rectification, blocking, or deletion of data, please contact: julian@gymsnap.de