Data protection

This privacy policy applies to all business areas of Fitgrade GmbH, Schaffhauserstrasse 106, 8180 Bülach, Switzerland.

1. HOW DO WE PROTECT YOUR PERSONAL DATA?

We have technical and organizational security procedures in place to maintain the security of your personal data and to protect your session data and personal data against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure or access. However, you should always be aware that the transmission of information via the Internet and other electronic means involves certain security risks and that we cannot guarantee the security of information transmitted in this way.

2. HOW LONG DO WE KEEP DATA?

We will retain your personal data for as long as we deem necessary or appropriate to comply with applicable laws or for as long as it is necessary for the purposes for which it was collected. We will delete your personal data as soon as it is no longer required and in any event after the expiry of the maximum retention period required by law.

3. WHAT RIGHTS DO YOU HAVE WITH RESPECT TO YOUR PERSONAL DATA?

You have the right to assert your data protection rights at any time and to receive information about your stored personal data, to correct or supplement your personal data, to object to the processing of your personal data or to request the deletion of your personal data. You can find the contact options in section 4 below. We reserve the right to correspond with you electronically (particularly by email) in this context.

4. HOW CAN YOU CONTACT US?

If you wish to exercise your rights with regard to your personal data or if you have any questions or concerns regarding the processing of our personal data, you can contact us as follows: Fitgrade GmbH, Schaffhauserstrasse 106 , 8180 Bülach, Switzerland, service@fitgrade.ch. We will endeavor to answer your questions or concerns promptly upon receipt.

5. WHO OWNS THE DATA COLLECTION?

We are legally obliged to inform you of the owner of the data collection containing your personal data. The owner of the data collection is Fitgrade GmbH, Schaffhauserstrasse 106, 8180 Bülach, Switzerland.

6. WHEN DO WE COLLECT PERSONAL INFORMATION?

We collect your personal data whenever we have contact with you. The situations in which we have contact with you are varied. For example, we collect your personal data in the following circumstances:

• You visit our stores or other premises;
• You purchase our goods or services in our stores or through our websites;
• You take part in our courses, seminars or training sessions;
• You use a service from our customer service;
• You register a product or service purchased from us;
• You order and use one of our customer cards or loyalty cards;
• You receive a newsletter or other advertising about our goods and services;
• You participate in a competition or prize draw;
• You become a member of one of our customer loyalty programs;
• You take part in one of our market research campaigns or opinion polls;
• You use or communicate with us or third parties via our websites, apps for mobile devices or offers on Internet platforms, multimedia portals or social networks;
• You communicate with us via telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging;
• Your mobile phone connects to the Wi-Fi network provided by us in our offices;
• You contact us on special occasions such as events, promotional events, sponsorship events or cultural and sporting events.

7. WHAT PERSONAL INFORMATION DO WE COLLECT?

The personal data collected is just as diverse. On the one hand, we collect personal data that you provide to us. On the other hand, we collect personal data that is automatically or manually collected when you contact us, such as:

Personal Data:

• Name and first name;
• Birthday and age;
• Gender;
• residential address;
• household size;
• shopping habits;
• Information on purchasing power;
• Customer and purchasing preferences;
• Delivery address;
• Billing address;
• Credit card and account information;
• language preferences;
• Telephone number(s);
• Email address);
• Identification numbers of your technical devices;
• Customer and loyalty card numbers;
• Information about subscribed newsletters or other advertising;
• Consent to receive advertising;
• Online customer account information (including opening date, user names, profile pictures);
• Memberships within our business area;
• Photo and video recordings of visits to our stores or other premises.

Customer activity data

• Contract data (including contract date, contract type, contract content; contracting parties; contract term; contract value; claims asserted under the contract);
• Purchase information (including purchase date; purchase location; purchase time; type, quantity and value of goods and services purchased; shopping cart; abandoned shopping cart; payment method used; payment location; purchase history);
• Customer service information (including returns of goods, complaints, warranty cases, delivery information);
• Session data relating to visits to our websites, apps for mobile devices or offers on internet platforms, multimedia portals or social networks (including duration and frequency of visits, language and country preferences, information about browser and computer operating system, internet protocol addresses, search terms and search results; ratings submitted);
• location-based data when using mobile devices;
• Information about accumulated loyalty points on customer and loyalty cards;
• Communications via telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging;

8. WHY DO WE PROCESS PERSONAL DATA?

We process your personal data for various purposes. These purposes can be grouped into different categories. In particular, we may process your personal data in whole or in part for one or more of the following purposes:

8.1 PROCESSING PURPOSES IN CONNECTION WITH OUR GOODS AND SERVICES

• Providing and selling our goods and services;
• Processing of orders and contracts, including sending order and shipping confirmations, delivery confirmations, delivery and invoicing;
• Organisation and implementation of courses, seminars or training sessions;
• Organisation and implementation of customer services;
• Organisation and implementation of customer card or loyalty card programmes;
• Organisation and conduct of market research and opinion polls;
• Checking the customer's creditworthiness: Fitgrade.ch grants the third parties involved in checking the customer's creditworthiness and collecting the purchase price (in particular the credit agency CRIF AG, Zurich, or a company associated with it) access to the customer's personal data arising from the business relationship at any time, including all payment experiences from the ordering process. The customer is entitled to revoke his or her above consent in writing at any time.

8.2 PROCESSING PURPOSES IN CONNECTION WITH CUSTOMER COMMUNICATION:

• Provision, administration and implementation of customer communications by post and electronic means of communication;
• business communications by post and by telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging;
• Evaluation of the use of our offers via telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS) or instant messaging such as: type of use, frequency and duration of use, exact location of use.

8.3 PROCESSING PURPOSES IN CONNECTION WITH SPECIAL ACTIVITIES AND EVENTS:

• Organisation and implementation of competitions or prize draws, including notification and publication of the winners via our websites, apps for mobile devices or our offers on internet platforms, multimedia portals or social networks;
• Organisation and implementation of special occasions such as events, promotional events, sponsorship events, cultural and sporting events.

8.4 PROCESSING PURPOSES IN CONNECTION WITH THE ANALYSIS OF CUSTOMER BEHAVIOR:

• Optimization of the locations and product range in our stores. This is done through individualized and personal, but also anonymous and group-related recording and evaluation of historical and current customer and purchasing behavior in our stores or other premises - including creation and analysis of location data, movement profiles and shopping cart analysis;
• Individualized and personal or anonymous and group-related recording and evaluation of historical and current customer and purchasing behavior when using the offers on our websites, apps for mobile devices or on Internet platforms, multimedia portals or social networks;
• Individualized and personal or anonymous and group-related recognition, classification and analysis of current and potential customer needs and interests;
• Individualized and personal or anonymous and group-related classification and analysis of customer behavior and customer potential;
• statistical evaluation of customer behavior based on anonymized customer data;
• Linking the new personal data we collect about you with the personal data we have collected in the past;
• Linking the personal data we collect about you with publicly available data and data acquired from third parties to improve our database and analyze customer behavior. The enrichment of profiles with third-party data includes, for example: data from the Federal Statistical Office, calendar data or geodata.

8.5 PROCESSING PURPOSES IN CONNECTION WITH DIRECT MARKETING:

9. TO WHOM DO WE SHARE YOUR PERSONAL DATA?

We may share your personal data with other companies for the purposes set out in this privacy policy. The other companies may use your personal data in their own interest for the same purposes as we do. We may process your personal data in our own interest, in particular for individualized and personalized analyses of customer behavior and for direct marketing activities. Our employees will only have access to your personal data to the extent necessary to perform their duties.

We may also pass on your personal data to third parties in order to use technical or organizational services that we require to fulfill the aforementioned purposes or our other business activities. Our service providers are contractually obliged to process the personal data exclusively on our behalf and in accordance with our instructions. We also oblige our service providers to comply with technical and organizational measures that ensure the protection of personal data. If the service providers are located in countries where the applicable laws do not provide for protection of personal data comparable to Swiss law, we will contractually ensure that the service providers concerned comply with the Swiss level of data protection.

We may also disclose your personal information if we believe it is necessary to comply with applicable laws and regulations, in legal proceedings, at the request of competent courts and authorities, or due to other legal obligations, to protect and defend our rights or property.

10. HOW DO WE USE COOKIES?

We also use so-called cookies on our website. These are small files that are stored on your computer or mobile device when you use one of our websites. We would also like to provide you with comprehensive information about our use of cookies.

10.1 WHY DO WE USE COOKIES?

The cookies we use are primarily designed to ensure the functionality of our website, such as the shopping cart functionality. We also use cookies to adapt our website to your customer requirements and to make surfing with us as convenient as possible for you. We also use cookies to optimize our advertising. Cookies allow us to present you with advertising and/or special goods and services that may be of particular interest to you based on your use of our website. Our goal is to make our website as attractive as possible for you and to present you with advertising that matches your areas of interest.

10.2 WHICH COOKIES DO WE USE?

Most of the cookies we use are automatically deleted from your computer or mobile device at the end of the browser session (so-called session cookies). For example, we use session cookies to save your country and language preferences and your shopping cart across different pages of an internet session.

We also use temporary or permanent cookies. These remain stored on your computer or mobile device after the end of the browser session. When you visit one of our websites again, the settings and inputs you prefer are automatically recognized. These temporary or permanent cookies remain stored on your computer or mobile device for between one month and ten years, depending on the type of cookie, and are automatically deactivated after the programmed time has elapsed. They are designed to make our websites more user-friendly, effective and secure. Thanks to these cookies, you can, for example, see information on the site that is specifically tailored to your interests.

The cookies stored on your computer or mobile device may also come from partner companies. These cookies allow our partner companies to target you with advertising that may actually be of interest to you. The partner companies' cookies remain stored on your computer or mobile device for between one month and ten years and are automatically deactivated after the programmed time has elapsed.

10.3 WHAT DATA IS STORED IN THE COOKIES?

No personal data is stored in the cookies we use. The cookies we use cannot be assigned to a specific person. When a cookie is activated, it is assigned an identification number.

In addition to the information collected as standard, Google also collects data on access. For example, target groups can be identified and statistics retrieved across devices. To do this, Google collects visitor data and links it with the information from Google accounts of logged-in users. The visitor data can include the end user's location, search history, YouTube history and data from Google partner websites. It is used to provide aggregated and anonymized statistics on user behavior across devices. In order for Google signals to be used, end users must have previously agreed to such a link in order to receive personalized advertising.

10.4 HOW CAN YOU PREVENT COOKIES FROM BEING STORED?

Most Internet browsers automatically accept cookies. However, you can instruct your browser not to accept cookies, or to prompt you before accepting a cookie from a website you visit. You can also delete cookies from your computer or mobile device by using the appropriate feature on your browser. If you choose not to accept our cookies or those of our partners, you will not see certain information on our websites and will not be able to use some features designed to improve your visit.

11. HOW DO WE USE LOG FILES?

Every time you access our website, your browser transmits certain usage data to us for technical reasons and saves it in log files. This includes the following usage data: date and time of accessing our website; name of the website accessed; IP address of your computer or mobile device; address of the website from which you came to our website; amount of data transferred, and the name and version of your browser.

The evaluation of the log files helps us to further improve our Internet offerings and make them more user-friendly, to find and correct errors more quickly and to manage server capacities. Using the log files, we can determine, for example, at what times our Internet offerings are particularly popular and provide the appropriate data volume to ensure you have the best possible experience.

12. HOW DO WE USE WEB ANALYSIS TOOLS?

We use tracking technologies to continually improve and optimize our Internet offering. Web analysis tools provide us with statistics and graphics that give us information about the use of our Internet pages. The data on the use of an Internet page is transferred to the server used for this purpose. Depending on the provider of a web analysis tool, these servers may be located abroad. For the most commonly used web analysis tool, Google Analytics, this data is transferred including abbreviated IP addresses, which prevents the identification of individual devices. Google complies with the data protection provisions of the “Swiss-US Privacy Shield” agreement and has registered with the US Department of Commerce for the “Swiss-US Privacy Shield” (information on the Swiss-US Privacy Shield can be found at https://www.privacyshield.gov/Swiss-US-Privacy-Shield-FAQs ). The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. Google will only transfer this data to third parties if required by law or as part of order data processing.

If other web analysis tools are used, the data collection process is essentially the same.

You can prevent Google from collecting the data generated by cookies and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de). For more information about Google Analytics and data protection, see http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html .

13. HOW DO WE USE SOCIAL PLUGINS?

Our websites use social plugins, e.g. from Facebook, Twitter or Google+. The plugins are marked with the provider's logo and can be, for example, Like buttons or a Google+ button or Twitter button.

When you visit our websites that contain such a plugin, your browser establishes a direct connection to the provider's computers. The content of the plugin is sent directly from the provider's website to your browser, which then integrates it into the website. By integrating the plugin, the provider receives the information that you have visited our website. If you are logged in to the provider at the same time, the provider can assign the visit to your profile. If you interact with the plugin - for example, by clicking the "Like" button or leaving a comment - the corresponding information is sent directly from your browser to the provider and stored there.

If you do not want the provider to collect data about you via our website, you must log out of the provider before visiting our website. Even when you are logged out, the providers collect anonymous data via the social plugins and set a cookie for you. This data can be assigned to your profile if you log in to the provider at a later date.

If a login is offered via a social login service - e.g. Facebook Connect - data is exchanged between the provider and our website. With Facebook Connect, this can be data from your public Facebook profile, for example. By using such login services, you agree to the data transfer.

The purpose and scope of data collection and the further processing of your data by the provider as well as your rights and setting options for protecting your privacy can be found in the data protection information of the provider.

Facebook Ireland Ltd. or Facebook Inc.: http://de-de.facebook.com/policy.php

Google Inc.: http://www.google.com/intl/de/privacy/plusone/

Twitter Inc.: http://twitter.com/privacy.

If you do not want the providers to collect data about you via these cookies, you can select the "Block third-party cookies" function in your browser settings. The browser will then not send any cookies to the server for embedded content from other providers. With this setting, other functions of our website may no longer work.

Date 24.04.2023

Version 2.0