Privacy policy
1. data protection [01.09.2025]
The privacy policy describes how and why we collect, process and use personal data. The responsible handling of customer data is important to us. The following privacy policy applies to the use of our website and the services offered on it.
Among other things, you will learn in this privacy policy:
- what personal data we collect and process;
- for what purposes we use your personal data;
- welchen Nutzen unsere Datenbearbeitung für Sie hat;
- how long we process your personal data;
- what rights you have in relation to your personal data; and
- how you can contact us.
The collection and processing of your personal data is carried out in compliance with the applicable data protection laws and requirements. Furthermore, the GYYM accepts no liability for the use of this website, insofar as this is permissible.
The GYYM only offers its services in Switzerland.
2. responsible person
The controller within the meaning of the Swiss Data Protection Act (DSG) is
GYYM Health & Fitness AG
Hochbergerstrasse 70
4057 Basel
Managing Director: Alessandro Biassoni Schmitz
Phone: +41 61 633 20 60
Mail: info@gyym.ch
Website: www.gyym.ch
3. collection and processing of personal data
- Visit the website
When you visit our website, we automatically record information about access (date and time, pages accessed, type of web browser, operating system, etc.). This data is collected automatically and is used exclusively for statistical purposes or to improve our website. We are unable to assign this data to a specific person.
We need this data and information to present our website properly, to improve its content, to ensure the long-term functionality of our IT infrastructure and the technical aspects of the website and to provide law enforcement authorities with relevant information in the event of a cyber attack. The collected data is then deleted.
- Links to other websites
This website may contain links to websites of other providers. The GYYM has no influence on these websites, their content, offers or availability or the data protection declarations and provisions applicable there. The GYYM therefore rejects any liability to the extent permitted.
- Cookies and other services
GYYM also uses cookies on the website. Cookies are text files with a so-called cookie ID, a unique identifier of the cookie, which assigns websites and servers to a specific Internet browser. A specific Internet browser can be recognized and identified via this unique cookie ID. In accordance with Art. 45c lit. b FMG, we would like to point out that you have the option of preventing the setting of cookies in your browser, for which you can refer to the respective instructions of the browser provider.
Further information on the cookies used can be found at the end of this privacy policy.
- Social Media
Buttons (“social media plugins”) may be placed on this website that establish contact with the servers of social networks (Facebook, Instagram). By clicking on one of these buttons, you give your consent for necessary data such as IP address, visit to the website, etc. to be transmitted to the respective operator of the social network. The processing of your personal data is then the responsibility of this operator in accordance with its data protection regulations. We do not receive any information about you from them.
- Newsletter
You have the option of subscribing to our newsletter via our website. Data that you provide to the GYYM, in particular your e-mail address and your name, can be used for the regular dispatch of our newsletter. The newsletter is sent either directly by the fitness center or by a contracted company. You can unsubscribe from the newsletter at any time (via the link in the newsletter). You can also inform us of this by e-mail or using the contact details provided in the legal notice. The personal data will remain with GYYM and, if applicable, with the company commissioned to send the newsletter for as long as you have subscribed to the newsletter. You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter.
- Contact us
Our website contains certain information that enables quick electronic contact and direct communication, which also includes a general e-mail address. If you contact us via the communication options offered on our website, your contact details and content will only be used to process and respond to your inquiry.
If you contact us via the contact form, by e-mail or in any other way, we store and process the personal data you provide (e.g. name, e-mail address, telephone number) to process your request and for any follow-up questions.
- GYYM membership
When you register for a membership at GYYM, we collect and process your personal data (first/last name, salutation, street, zip code, city, country, title, gender, profession, telephone, smartphone, e-mail, company, nationality, length of stay, guest data, comment, contact person, interests, reservation number, web, fax, customer account, health insurance, bank details (IBAN, BIC, BLZ), conditions, membership (contract, check-in), debtor accounts, treatment date, treatment time, name of treatment, reservation holder, type of treatment carried out, therapist/trainer, information sent, type of diet) for the purpose of contract processing, the implementation of courses, training sessions and treatments and for administrative purposes.
- Video surveillance
Video surveillance systems may be used on our premises for the security of our customers and to prevent criminal offenses. The recordings made are used exclusively for security purposes and are deleted after a reasonable period of time, unless they are required as evidence of any incidents.
4. purposes of data processing
We use personal data that we have received or collected primarily to process contracts with customers and business partners in fitness centers. In addition, we process this data for purposes such as the further development of our offers, communication with third parties, advertising and marketing, the security of our facilities and business transactions. We also process personal data in order to comply with legal obligations and prevent breaches. If you are active in such a function, your personal data may also be affected.
5. disclosure of data to third parties
Personal data will only be transferred to third parties if this is necessary to fulfill our contractual obligations or if we are required to do so by law. As a rule, these service providers process personal data on our behalf as so-called “processors”. Our processors are obliged to process personal data exclusively in accordance with our instructions and to take appropriate data security measures. Certain service providers are also jointly or independently responsible with us (e.g. debt collection companies). We ensure that data protection is guaranteed throughout the processing of your personal data by selecting the service providers and through suitable contractual agreements.
- TAC (member administration)
TAC and GYYM mutually undertake to treat all information provided by the other contractual partner in the course of the transaction as strictly confidential. This information may only be used in connection with the use of the software.
If it is necessary for TAC to store personal data, this is done exclusively in the context of contract processing with the customer, for the provision of customer support and for the identification and rectification of software errors in real-time or original operation, during the term of the respective contractual relationship.
TAC emphasizes that all persons entrusted with data processing are obliged to maintain confidentiality before commencing their activities or are subject to an appropriate statutory duty of confidentiality. This obligation to maintain confidentiality remains in force in particular after the termination of their activity at TAC.
Further information can be found in TAC’s privacy policy: https://www.tac.eu.com/datenschutzerklaerung/
- EGYM
In order to use our EGYM products, it is generally necessary to register with EGYM in advance, where you will need to enter your e-mail address, your first and last name and a password of your choice. GYYM Health & Fitness AG will add the start/end date of your subscription contract and your MemberID (badge) to your profile.
- EGYM Fitness APP
The EGYM Fitness app enables users to record their fitness training and create training plans. The results of the strength measurements on the EGYM strength machines are also saved in the application when the user uses them.
You can also manually record and save training sessions and results in the EGYM Fitness app. This data is not only used to record your training and progress, but also to analyze your maximum strength, muscle imbalances, biological age (“BioAge”) and activity levels. This health data is processed on the basis of your consent. Please note that these functions are not accessible without your consent.
Users of the fitness app also have the option of sharing their training progress with friends or other gym members and competing in a ranking list. Your consent is required for this.
In addition, you have the option of establishing connections to external partners and services/third-party devices (such as fitness trackers and other wearables), for example to document training results via other services. Consent to data processing is required for each connection to a service you wish to use.
Further information can be found in EGYM’s privacy policy: https://egym.com/de/datenschutz
- EGYM strength equipment
If necessary, the equipment is configured by a trainer before the first training session. These settings (gender, body size, range of motion, weights) are saved so that they can be automatically adjusted for all future training sessions of the respective user on the strength equipment. This eliminates the need to reset the settings each time. The legal basis for the processing of this data arises from the fulfillment of the contract.
Health data is processed on the basis of the user’s consent. The user has the right to withdraw this consent at any time with effect for the future. However, this does not affect the legality of the storage that took place on the basis of the consent up to the time of revocation. Please note that in this case the functions concerned may no longer be available.
- SECA TRU
Health data is processed on the basis of the user’s consent. Health data measured by the body analysis measurement is recorded. This data may be visible in the myAnalytics APP. This data may also be visible in your EGYM Fitness APP. The user has the right to withdraw this consent at any time with effect for the future. However, this does not affect the legality of the storage that has taken place on the basis of the consent up to the time of revocation. Please note that in this case the functions concerned may no longer be available. Further information can be found in SECA Tru’s privacy policy.
https://www.seca.com/de_de/datenschutz
- Matrix fitness and cardio equipment
Health data is processed on the basis of the user’s consent. The user has the right to withdraw this consent at any time with effect for the future. However, this does not affect the legality of the storage that took place on the basis of the consent up to the time of revocation. Please note that in this case the functions concerned may no longer be available. Further information can be found in Matrix’s privacy policy.
https://www.matrixfitness.com/ch/deu/privacy-policy
- Brevo
We send notifications and messages via third-party services or with the help of service providers. Cookies may also be used for this purpose. We also guarantee appropriate data protection for such services. When sending newsletters, we only collect information about first and last names and the e-mail address.
Further information on data protection can be found under the following link:
https://www.brevo.com/de/datenschutz-uebersicht/
- SMTP2Go
Notifications and messages may contain links to websites or tracking pixels that are designed to determine whether an individual message has been opened and which links have been clicked on. These links and tracking pixels also have the ability to track the use of notifications and messages on a personal level. This statistical tracking of usage is necessary to measure success and reach. This allows us to customize notifications and messages to the needs and reading preferences of recipients to ensure effective, user-friendly, persistent, secure and reliable delivery.
Further information on data protection can be found under the following link: https://www.smtp2go.com/privacy/
https://support.smtp2go.com/hc/en-gb/articles/
- Intrum AG
It is possible to obtain creditworthiness information from existing members or potential new members and to pass on payment experience to Intrum AG.
In the event of collection of outstanding payments, personal data may be transmitted to Intrum AG. Additional information regarding the type, scope and purpose of data processing by Intrum AG can be found in the privacy policy of Intrum AG
https://www.intrum.ch/de/losungen-fur-unternehmen/uber-intrum/datenschutz-und-geschaftsbedingungen/
Payment service provider:
We use payment service providers to process our members’ payments securely and reliably. The terms and conditions of the respective payment service providers, such as general terms and conditions or data protection declarations, apply to processing.
Worldline: https://de.worldline.com/de/home/privacy.html
TAC Pay: https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy
PostFinance : https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html
Visas: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html
Mastercard: https://www.mastercard.ch/de-ch/datenschutz.html
American Express: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html
Apple Pay: https://support.apple.com/de-ch/ht203027
6. data security
We take appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access. Our security measures are regularly reviewed and adapted to technological progress.
7. your rights
You have the right to receive information about the personal data we have stored about you. In addition, you have the right to correct incorrect data, block and delete your personal data, provided that there are no statutory retention obligations.
To assert your rights, please contact us. We will be happy to provide you with further information in this regard.
8. cookies and tracking
This cookie information describes how and why we collect, process and use personal and other data when you use our websites, in particular in connection with cookies and similar technologies.
What are cookies and similar technologies?
Cookies are files that your browser automatically saves on your device when you visit our website. Cookies contain a unique identification number (an ID) that enables us to distinguish individual visitors from others, but generally without identifying them. Depending on the purpose of use, cookies contain further information, e.g. about the pages accessed and the duration of the visit to a page. We use session cookies, which are deleted when the browser is closed, and persistent cookies, which remain stored for a certain period of time after the browser is closed (usually between a few days and two years) and are used to recognize visitors on a subsequent visit.
We may also use similar technologies such as pixel tags, fingerprints and other technologies to store data in the browser. Pixel tags are small, usually invisible images or program code that are loaded by a server and thereby transmit certain information to the server operator, e.g. whether and when a website was visited. Fingerprints are information that is collected when you visit a website via the configuration of your end device or your browser and that make your end device distinguishable from other devices. Most browsers also support other technologies for storing data in the browser, similar to cookies, which we can also use (e.g. “web storage”).
How can cookies and similar technologies be deactivated?
When you visit our websites, you have the option of activating or deactivating certain categories of cookies via a button displayed in the browser. You can also configure your browser settings to block certain cookies or similar technologies or to delete existing cookies and other data stored in the browser. You can also add software (so-called “plug-ins”) to your browser that blocks tracking by certain third parties. You can find out more about this in the help pages of your browser (usually under the heading “Data protection”). Please note that our websites may no longer function fully if you block cookies and similar technologies.
Information on deleting cookies can be found under the following links:
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internetexplorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
9. adobe fonts web fonts
We use Typekit web fonts from Adobe Fonts for the visual design of our website. Adobe Fonts is a service provided by Adobe Systems Software Ireland Companies that gives us access to a library of fonts. In order to embed the fonts we select, your browser must connect to an Adobe server in the USA and download the required font for our website. This action results in Adobe receiving information that your IP address has accessed our website.
Further details on Adobe Fonts can be found in the Adobe Fonts privacy policy, which is available at the following link: https://www.adobe.com/de/privacy/policies/adobefonts.html
If your browser does not support web fonts or you do not give your consent, a standard font from your computer will be used.
The provider does not currently provide an option for an uncomplicated deselection or prevention of data transmission. If you wish to prevent the tracking of your activities on our website, we ask you to revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers via the cookie consent tool.
10. Google Analytics
We use Google Analytics, an analysis service from Google. Google uses cookies and similar technologies to collect certain information about the behavior of individual users on or in the relevant website and the end device used (tablet, PC, smartphone, etc.) (e.g. how often you have opened our website, how many purchases have been made or what interests you have, as well as data about the end device you are using, such as the operating system).
We have configured the service so that the IP addresses of visitors to Google’s websites within Europe are truncated before being forwarded to the USA, so that they cannot be traced back. Google provides us with reports and in this sense can be regarded as our processor. However, Google also processes certain data for its own purposes. Google may be able to draw conclusions about the identity of visitors to the websites based on the data collected and therefore create personal profiles and link the data obtained with any existing Google accounts of these persons.
You can find information on data protection from Google Analytics here: https://www.blog.google/topics/google-europe/gdpr-europe-data-protection-rules/
11. Google Ads
This website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, by setting your browser to generally deactivate the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.
Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
In order to make our advertising measures more efficient and to exclude existing members from certain Google advertisements, we may transmit e-mail addresses in encrypted form (hashed) to Google (Google Ireland Limited).
This transmission takes place as part of the so-called Customer Match function. Google matches the hashed email addresses with existing Google accounts to prevent our members from receiving advertising for offers they have already used. This enables us to reduce the spread of our advertising and avoid irrelevant ads. The data is not transmitted in plain text, but using the hash method (SHA-256). Google uses this data exclusively for the above-mentioned purpose.
The legal basis for this data processing is our legitimate interest in targeted, efficient advertising in accordance with Art. 31 FADP.
You have the right to object to this processing at any time (Art. 30 FADP). Please send your objection to info@gyym.ch or contact us using the contact details provided in the legal notice.
Further information on data processing by Google can be found at:
https://policies.google.com/privacy
12. Google Maps
This website uses Google Maps. This enables us to display interactive maps directly on the website and allows you to use the map function conveniently. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
For more information on the purpose and scope of data collection and processing by Google, as well as further information on your rights in this regard and setting options to protect your privacy, please visit: http://www.google.de/intl/de/policies/privacy
13. facebook pixel
Our websites may also use the so-called “Facebook pixel” and similar technologies from Facebook. We use these technologies to display Facebook ads placed by us only to users on Facebook and partners who have shown an interest in us, which we transmit to Facebook for this purpose (preferences). This allows us to track the effectiveness of Facebook ads. You can find more information about this here: https://de-de.facebook.com/legal/terms/customaudience
There is a corresponding supplementary agreement, which means that users can send requests for information and other data subject requests in connection with joint responsibility directly to Facebook.
14. Instagram
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.
Further information can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/
15. Youtube
Functions of the “YouTube” service are integrated on this website. “YouTube” is the property of Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.
Your legal agreement with “YouTube” consists of the terms and conditions that you can find at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de.
These Terms constitute a legally binding agreement between you and “YouTube” regarding your use of the Services. Google’s privacy policy explains how “YouTube” handles and protects your personal data when you use the service.
16. changes
This privacy policy may be amended at any time without prior notice. The current version published on our website shall apply. If the privacy policy is part of a contract with you, we will inform you of the change by e-mail or other suitable means in the event of an update.
