Privacy policy


1. data protection [01 .09.2023]

The privacy policy describes how and why we collect, process and use personal data. The responsible handling of customer data is important to us. The following privacy policy applies to the use of our website and the services offered on it. Among other things, you will find out in this privacy policy

  • what personal data we collect and process;
  • for what purposes we use your personal data;
  • welchen Nutzen unsere Datenbearbeitung für Sie hat;
  • how long we process your personal data;
  • what rights you have in relation to your personal data; and
  • how you can contact us.

The collection and processing of your personal data is carried out in compliance with the applicable data protection laws and requirements. Furthermore, the GYYM accepts no liability for the use of this website, insofar as this is permissible. The GYYM only offers its services in Switzerland.

2. responsible person

The controller within the meaning of the Swiss Data Protection Act (DSG) is: GYYM Health & Fitness AG Hochbergerstrasse 70 4057 Basel Managing Director: Alessandro Biassoni Schmitz Phone: +41 61 633 20 60 Mail: info@gyym.ch Website: www.gyym.ch

3. collection and processing of personal data
  • Visit the website

When you visit our website, we automatically record information about access (date and time, pages accessed, type of web browser, operating system, etc.). This data is collected automatically and is used exclusively for statistical purposes or to improve our website. We cannot assign this data to a specific person. We need this data and information to present our website properly, to improve its content, to ensure the long-term functionality of our IT infrastructure and the technical aspects of the website and to provide law enforcement authorities with relevant information in the event of a cyber attack. The collected data is then deleted.

  • Links to other websites

This website may contain links to websites of other providers. The GYYM has no influence on these websites, their content, offers or availability or the data protection declarations and provisions applicable there. The GYYM therefore rejects any liability to the extent permitted.

  • Cookies and other services

GYYM also uses cookies on the website. Cookies are text files with a so-called cookie ID, a unique identifier of the cookie, which assigns websites and servers to a specific Internet browser. A specific Internet browser can be recognized and identified via this unique cookie ID. In accordance with Art. 45c lit. b FMG, we would like to point out that you have the option of preventing the setting of cookies in your browser, for which you can refer to the respective instructions of the browser provider. Further information on the cookies used can be found at the end of this privacy policy.

  • Social Media

Buttons (“social media plugins”) may be placed on this website that establish contact with the servers of social networks (Facebook, Instagram). By clicking on one of these buttons, you give your consent for necessary data such as IP address, visit to the website, etc. to be transmitted to the respective operator of the social network. The processing of your personal data is then the responsibility of this operator in accordance with its data protection regulations. We do not receive any information about you from them.

  • Newsletter

You have the option of subscribing to our newsletter via our website. Data that you provide to the GYYM, in particular your e-mail address and your name, can be used for the regular dispatch of our newsletter. The newsletter is sent either directly by the fitness center or by a contracted company. You can unsubscribe from the newsletter at any time (via the link in the newsletter). You can also inform us of this by e-mail or using the contact details provided in the legal notice. The personal data will remain with GYYM and, if applicable, with the company commissioned to send the newsletter for as long as you have subscribed to the newsletter. You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter.

  • Contact us

Our website contains certain information that enables quick electronic contact and direct communication, which also includes a general e-mail address. If you contact us via the communication options offered on our website, your contact details and content will only be used to process and respond to your inquiry. If you contact us via the contact form, by e-mail or in any other way, we will store and process the personal data you provide (e.g. name, e-mail address, telephone number) to process your request and for any follow-up questions.

  • GYYM membership

When you register for a membership at GYYM, we collect and process your personal data (first/last name, salutation, street, zip code, city, country, title, gender, profession, telephone, smartphone, e-mail, company, nationality, length of stay, guest data, comment, contact person, interests, reservation number, web, fax, customer account, health insurance, bank details (IBAN, BIC, BLZ), conditions, membership (contract, check-in), debtor accounts, treatment date, treatment time, name of treatment, reservation holder, type of treatment carried out, therapist/trainer, information sent, type of diet) for the purpose of contract processing, the implementation of courses, training sessions and treatments and for administrative purposes.

  • Video surveillance

Video surveillance systems may be used on our premises for the security of our customers and to prevent criminal offenses. The recordings made are used exclusively for security purposes and are deleted after a reasonable period of time, unless they are required as evidence of any incidents.

4. purposes of data processing

We use personal data that we have received or collected primarily to process contracts with customers and business partners in fitness centers. In addition, we process this data for purposes such as the further development of our offers, communication with third parties, advertising and marketing, the security of our facilities and business transactions. We also process personal data in order to comply with legal obligations and prevent breaches. If you are active in such a function, your personal data may also be affected.

5. disclosure of data to third parties

Personal data will only be transferred to third parties if this is necessary to fulfill our contractual obligations or if we are required to do so by law. As a rule, these service providers process personal data on our behalf as so-called “processors”. Our processors are obliged to process personal data exclusively in accordance with our instructions and to take appropriate data security measures. Certain service providers are also jointly or independently responsible with us (e.g. debt collection companies). We ensure that data protection is guaranteed throughout the processing of your personal data by selecting the service providers and through suitable contractual agreements.

  • TAC (member administration)

TAC and GYYM mutually undertake to treat all information provided by the other contractual partner in the course of the transaction as strictly confidential. This information may only be used in connection with the use of the software. If it is necessary for TAC to store personal data, this will be done exclusively in the context of contract processing with the customer, for the provision of customer support and for the identification and rectification of software errors in real-time or original operation, during the term of the respective contractual relationship. TAC emphasizes that all persons entrusted with data processing are obliged to maintain confidentiality before commencing their activities or are subject to an appropriate statutory duty of confidentiality. This obligation to maintain confidentiality remains in force, in particular after termination of their employment with TAC. Further information can be found in TAC’s data protection information: https://www.tac.eu.com/datenschutzerklaerung/

  • EGYM

In order to use our EGYM products, it is generally necessary to register with EGYM in advance, where you will enter your e-mail address, your first and last name and a password of your choice. GYYM Health & Fitness AG will add the start/end date of your subscription contract and your MemberID (badge) to your profile.

  • EGYM Fitness APP

The EGYM Fitness app enables users to record their fitness training and create training plans. The results of the strength measurements on the EGYM strength machines are also saved in the application when the user uses them. In addition, you can also manually record and save training sessions and results in the EGYM Fitness app. This data is not only used to record your training and progress, but also allows you to analyze your maximum strength, muscle imbalances, biological age (“BioAge”) and activity levels. This health data is processed on the basis of your consent. Please note that these functions are not accessible without your consent. Users of the fitness app also have the option of sharing their training progress with friends or other members of the gym and competing in a ranking list. Your consent is required for this. In addition, you have the option to establish connections to external partners and services/third-party devices (such as fitness trackers and other wearables), for example to document training results via other services. Consent to data processing is required for each connection to a service you wish to use. Further information can be found in EGYM’s privacy policy: https://egym.com/de/datenschutz

  • EGYM strength equipment

If necessary, the equipment is configured by a trainer before the first training session. These settings (gender, body size, range of motion, weights) are saved so that they can be automatically adjusted for all future training sessions of the respective user on the strength equipment. This eliminates the need to reset the settings each time. The legal basis for the processing of this data results from the fulfillment of the contract. Health data is processed on the basis of the user’s consent. The user has the right to withdraw this consent at any time with effect for the future. However, this does not affect the legality of the storage that took place on the basis of the consent up to the time of revocation. Please note that in this case the functions concerned may no longer be available.

  • SECA TRU

Health data is processed on the basis of the user’s consent. Health data measured by the body analysis measurement is recorded. This data may be visible in the myAnalytics APP. This data may also be visible in your EGYM Fitness APP. The user has the right to revoke this consent at any time with effect for the future. However, this does not affect the legality of the storage that has taken place on the basis of the consent up to the time of revocation. Please note that in this case the functions concerned may no longer be available. Further information can be found in SECA Tru’s privacy policy. https://www.seca.com/de_de/datenschutz

  • Matrix fitness and cardio equipment

Health data is processed on the basis of the user’s consent. The user has the right to withdraw this consent at any time with effect for the future. However, this does not affect the legality of the storage that took place on the basis of the consent up to the time of revocation. Please note that in this case the functions concerned may no longer be available. Further information can be found in Matrix’s privacy policy. https://www.matrixfitness.com/ch/deu/privacy-policy

  • Brevo

We send notifications and messages via third-party services or with the help of service providers. Cookies may also be used for this purpose. We also guarantee appropriate data protection for such services. When sending newsletters, we only collect information about first and last names and the e-mail address. Further information on data protection can be found at the following link: https://www.brevo.com/de/datenschutz-uebersicht/

  • SMTP2Go

Benachrichtigungen und Mitteilungen können Verweise auf Webseiten oder Zählpixel enthalten, die darauf abzielen festzustellen, ob eine einzelne Mitteilung geöffnet wurde und welche Verweise dabei angeklickt wurden. Diese Verweise und Zählpixel haben auch die Fähigkeit, die Nutzung von Benachrichtigungen und Mitteilungen auf persönlicher Ebene zu verfolgen. Diese statistische Erfassung der Nutzung ist notwendig, um den Erfolg und die Reichweite zu messen. Dadurch können wir Benachrichtigungen und Mitteilungen an die Bedürfnisse und Lesevorlieben der Empfängerinnen und Empfänger anpassen, um eine effektive, nutzerfreundliche sowie dauerhafte, sichere und zuverlässige Bereitstellung zu gewährleisten. Weitere Infos zum Datenschutz finden Sie unter folgendem Link: https://www.smtp2go.com/privacy/
https://support.smtp2go.com/hc/en-gb/articles/

  • Intrum AG

It is possible to obtain creditworthiness information from existing members or potential new members and to pass on payment experience to Intrum AG. In the event of collection of outstanding payments, personal data may be transmitted to Intrum AG. Additional information regarding the type, scope and purpose of data processing by Intrum AG can be found in Intrum AG’s privacy policy https://www.intrum.ch/de/losungen-fur-unternehmen/uber-intrum/datenschutz-und-geschaftsbedingungen/

Payment service provider:

We use payment service providers to process our members’ payments securely and reliably. The terms and conditions of the respective payment service providers, such as general terms and conditions or data protection declarations, apply to processing. Worldline: https://de.worldline.com/de/home/privacy.html TAC Pay: https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy PostFinance : https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html Visa: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html Mastercard: https://www.mastercard.ch/de-ch/datenschutz.html American Express: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html Apple Pay: https://support.apple.com/de-ch/ht203027

6. data security

We take appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access. Our security measures are regularly reviewed and adapted to technological progress.

7. your rights

You have the right to receive information about the personal data we have stored about you. In addition, you have the right to correct incorrect data, block and delete your personal data, provided that there are no statutory retention obligations. To assert your rights, please contact us. We will be happy to provide you with further information in this regard.

8. cookies and tracking

This cookie information describes how and why we collect, process and use personal and other data when you use our websites, in particular in connection with cookies and similar technologies. What are cookies and similar technologies? Cookies are files that your browser automatically saves on your end device when you visit our websites. Cookies contain a unique identification number (an ID) that enables us to distinguish individual visitors from others, but generally without identifying them. Depending on the purpose of use, cookies contain further information, e.g. about the pages accessed and the duration of the visit to a page. We use session cookies, which are deleted when the browser is closed, and persistent cookies, which remain stored for a certain period of time after the browser is closed (usually between a few days and two years) and are used to recognize visitors on a subsequent visit. We may also use similar technologies such as pixel tags, fingerprints and other technologies to store data in the browser. Pixel tags are small, usually invisible images or program code that are loaded by a server and thereby transmit certain information to the server operator, e.g. whether and when a website was visited. Fingerprints are information that is collected when you visit a website via the configuration of your end device or your browser and that make your end device distinguishable from other devices. Most browsers also support other technologies for storing data in the browser, similar to cookies, which we can also use (e.g. “web storage”). How can cookies and similar technologies be deactivated? When you visit our websites, you have the option of activating or deactivating certain categories of cookies via a button displayed in the browser. You can also configure your browser settings to block certain cookies or similar technologies or to delete existing cookies and other data stored in the browser. You can also add software (so-called “plug-ins”) to your browser that blocks tracking by certain third parties. You can find out more about this in the help pages of your browser (usually under the heading “Data protection”). Please note that our websites may no longer function fully if you block cookies and similar technologies. Information on deleting cookies can be found under the following links: Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internetexplorer-delete-manage-cookies Google Chrome: https://support.google.com/accounts/answer/61416?hl=de Opera: http://www.opera.com/de/help Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

9. adobe fonts web fonts

We use Typekit web fonts from Adobe Fonts for the visual design of our website. Adobe Fonts is a service provided by Adobe Systems Software Ireland Companies that gives us access to a library of fonts. In order to embed the fonts we select, your browser must connect to an Adobe server in the USA and download the required font for our website. This action results in Adobe receiving information that your IP address has accessed our website. Further details on Adobe Fonts can be found in the Adobe Fonts privacy policy, which can be accessed via the following link: https://www.adobe.com/de/privacy/policies/adobefonts.html If your browser does not support web fonts or you do not give your consent, a standard font will be used by your computer. The provider does not currently provide an option for an uncomplicated deselection or prevention of data transmission. If you wish to prevent your activities on our website from being tracked, we ask you to revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers via the cookie consent tool.

10. Google Analytics

We use Google Analytics, an analysis service from Google. Google uses cookies and similar technologies to collect certain information about the behavior of individual users on or in the respective website and the end device used (tablet, PC, smartphone, etc.) (e.g. how often you have opened our website, how many purchases have been made or what interests you have as well as data about the end device you are using, such as the operating system). We have configured the service so that the IP addresses of visitors to Google’s websites within Europe are truncated before being forwarded to the USA, so that they cannot be traced back. Google provides us with reports and in this sense can be regarded as our processor. However, Google also processes certain data for its own purposes. Google may be able to draw conclusions about the identity of visitors to the websites based on the data collected and therefore create personal profiles and link the data obtained with any existing Google accounts of these persons. You can find information on data protection from Google Analytics here: https://www.blog.google/topics/google-europe/gdpr-europe-data-protection-rules/

11. Google Ads

This website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, by using a browser setting that generally deactivates the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”. Please note that you may not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

12. Google Maps

This website uses Google Maps. This enables us to display interactive maps directly on the website and allows you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. For more information on the purpose and scope of data collection and processing by Google, as well as further information on your rights in this regard and settings options for protecting your privacy, please visit: http://www.google.de/intl/de/policies/privacy

13. facebook pixel

Our websites may also use the so-called “Facebook pixel” and similar technologies from Facebook. We use these technologies to display Facebook ads placed by us only to users on Facebook and partners who have shown an interest in us, which we transmit to Facebook for this purpose (preferences). This allows us to track the effectiveness of Facebook ads. You can find more information about this here: https://de-de.facebook.com/legal/terms/customaudience There is a corresponding supplementary agreement, which means that users can send requests for information and other data subject requests in connection with joint responsibility directly to Facebook.

14. Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

15. Youtube

Functions of the “YouTube” service are integrated on this website. “YouTube” is the property of Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland. Your legal agreement with “YouTube” consists of the terms and conditions which can be found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These Terms constitute a legally binding agreement between you and “YouTube” regarding your use of the Services. Google’s privacy policy explains how “YouTube” handles and protects your personal data when you use the service.

16. changes

This privacy policy may be amended at any time without prior notice. The current version published on our website shall apply. If the privacy policy is part of a contract with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

GYYM Map