Privacy Policy
1) Information on the collection of personal data and contact details of the data controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Outgym GmbH, Bgm.-Georg-Reck-Str. 3, 91336 Heroldsbach, Germany, Tel.: +49 9190 / 995-7878, Fax: +49 9190 / 9958-914, E-mail: info@outgym.de. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.
2) Data collection when visiting our website
When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed this page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Outgym GmbH, Bgm.-Georg-Reck-Str. 3, 91336 Heroldsbach, Germany, Tel.: +49 9190 / 995-7878, Fax: +49 9190 / 9958-914, E-mail: info@outgym.de. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.
3) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow us to save your website settings (so-called “persistent cookies”). In the latter case, you can find information about the storage duration in your web browser’s cookie settings.
If any of the cookies we use also process personal data, this processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR if you have given your consent, or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible website functionality and a user-friendly and effective website experience.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to block cookies in certain cases or entirely.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Making contact
4.1 – Tidio
This website uses technologies from Tidio Poland Sp. z o.o., Wojska Polskiego 81, 70-481 Szczecin, Poland (www.tidio.com) to collect and store anonymized data for web analytics and to operate the live chat system, which is used to answer live support requests. Usage profiles can be created from this anonymized data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor’s internet browser. The cookies enable the internet browser to be recognized. If the information collected in this way is personally identifiable, it is processed in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer support and the statistical analysis of user behavior for optimization purposes.
The data collected using Tidio technologies will not be used to personally identify visitors to this website without their explicit consent, nor will it be combined with personal data about the holder of the pseudonym. To prevent the storage of Tidio cookies, you can configure your internet browser to block all cookies from being stored on your computer in the future or to delete cookies that have already been stored. However, disabling all cookies may prevent some functions on our website from working properly. You can object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future by sending us your objection informally via email to the email address provided in the legal notice.
4.2 When you contact us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.
5) Data processing when opening a customer account
In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for account opening is indicated in the input fields of the corresponding form on our website. You can delete your customer account at any time by sending a message to the data controller’s address provided above. After your customer account is deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, no statutory retention periods apply, and we have no legitimate interest in continuing to store the data.
6) Data processing for order processing
6.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided when placing your order (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period, in accordance with our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR, via a suitable communication channel (e.g., by post or email). Your contact details will be used strictly for the purpose of notifying you about updates we owe you and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
6.2 Transfer of personal data to shipping service providers
– Deutsche Post:
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will forward your email address to Deutsche Post before delivery, in accordance with Article 6 Paragraph 1 Letter a of the GDPR, for the purpose of coordinating a delivery date or providing delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery, in accordance with Article 6 Paragraph 1 Letter b of the GDPR, we will only forward the recipient’s name and delivery address to Deutsche Post. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
You can withdraw your consent at any time with effect for the future by contacting the data controller named above or Deutsche Post.
– DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your email address to DHL before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we will only forward the recipient’s name and delivery address to DHL. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible. You
can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider DHL.
– DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will forward your email address and telephone number to DPD before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we will only forward the recipient’s name and delivery address to DPD. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible. You
can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider DPD.
– Hermes
If the goods are delivered by the transport service provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg), we will forward your email address to Hermes before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we will only forward the recipient’s name and delivery address to Hermes. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Hermes or the transmission of shipment status information is not possible. You
can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider Hermes.
– UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will forward your email address to UPS before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we will only forward the recipient’s name and delivery address to UPS. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of shipment status information is not possible.
You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider UPS.
7) Web analytics services
Google (Universal) Analytics:
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by truncation and prevents direct identification of individuals. With this extension, your IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Furthermore, Google Analytics allows the creation of statistics about the age, gender, and interests of website visitors through a special function called “demographics.” This is based on an analysis of interest-based advertising and the use of third-party information. This allows for the definition and differentiation of website user groups for the purpose of targeted marketing. However, the data collected via “demographics” cannot be attributed to any specific individual.
Details regarding the processing initiated by Google Analytics and Google’s handling of website data can be found here: https://policies.google.com/technologies/partner-sites.
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
8) Page functionalities
8.1 Facebook Plugins with 2-Click Solution
Our website uses social plugins (“plugins”) from the social network Facebook, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
To enhance the protection of your data when you visit our website, the plugins are initially deactivated using a “2-click” solution. You can recognize deactivated plugins by their gray background. This integration ensures that when you access a page on our website containing such plugins, no connection is established with Facebook’s servers. Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to Facebook’s servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no control over the scope of data that Facebook collects using these plugins. To our knowledge, Facebook receives information about which of our websites you are currently visiting and have previously visited. By integrating these plugins, Facebook also receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in. The collected information (including your IP address) is transmitted directly from your browser to a server of Meta Platforms Inc. in the USA and stored there. When you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your contacts.
You can revoke your consent at any time by deactivating the plugin by clicking it again. However, this revocation does not affect data that has already been transmitted to Facebook.
For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php
8.2 Use of YouTube Videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The enhanced privacy mode is used, which, according to the provider, only initiates the storage of user information when the video(s) are played. When embedded YouTube videos are played, the provider “YouTube” sets cookies to collect information about user behavior. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness, and prevent misuse. If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not want this association with your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube. When using YouTube, personal data may be transferred to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only take place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, YouTube videos will not be displayed during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website using the alternative methods explained to you on the website.
Further information on data protection at YouTube can be found in the YouTube Terms of Service at https://www.youtube.com/static?template=terms and in Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy
8.3 Google reCAPTCHA
This website also uses the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function primarily serves to distinguish whether an entry is made by a natural person or is being misused through automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in establishing individual accountability on the internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA.
Further information about Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
9) Tools and other items
9.1 – sevDesk
For our accounting, we use the sevDesk service, a cloud-based accounting software provided by sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.
SevDesk processes incoming and outgoing invoices, as well as, where applicable, our company’s bank transactions, in order to automatically record invoices, match them to transactions, and generate financial accounting records in a semi-automated process.
If personal data is processed in this context, the processing is carried out in accordance with Article 6 Paragraph 1 Letter f GDPR based on our legitimate interest in the efficient organization and documentation of our business transactions.
Further information about sevDesk GmbH, the automated processing of data, and the data protection regulations can be found at https://sevdesk.de/sicherheit-datenschutz/
9.2 Cookie Consent Tool
This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users upon visiting the site as an interactive interface, where consent for specific cookies and/or cookie-based applications can be granted by ticking boxes. By using this tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the boxes. This ensures that such cookies are only placed on the user’s device if consent has been given.
The tool uses technically necessary cookies to store your cookie preferences. No personal user data is processed in this process.
If, in individual cases, the processing of personal data (such as the IP address) occurs for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Article 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and thus in the legally compliant design of our website.
A further legal basis for the processing is Article 6(1)(c) GDPR. As the data controller, we are legally obligated to make the use of cookies that are not technically necessary dependent on the respective user’s consent.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
9.3 – Google Maps
We use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on our website. Google Maps is a web service for displaying interactive maps to visually represent geographical information. Using this service allows us to show you our location and makes it easier for you to find directions.
When you access any page on our website that includes a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers. This may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether a user account exists at all. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The collection, storage, and analysis are carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR, based on Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites to meet user needs. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.
You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html , and the additional Terms of Service for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
– OpenStreetMap
This website uses the open-source mapping service “OpenStreetMap” from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, via an API to show you the location of our company and make it easier for you to find us.
In order to provide you with the map services of OpenStreetMap, the service collects your IP address when you access the page and transmits it to an OpenStreetMap server, where it is stored.
This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in an appealing presentation of our online services and the easy location of our premises.
If you do not agree to the future transmission of your data to OpenStreetMap, you can completely deactivate the OpenStreetMap web service by disabling JavaScript in your browser. OpenStreetMap, and therefore the map display on this website, will then be unavailable.
You can find further information about OpenStreetMap’s privacy policy at the following web address: https://wiki.osmfoundation.org/wiki/Privacy_Policy.
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
10) Rights of the data subject
10.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising these rights:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Article 16 GDPR;
- Right to erasure pursuant to Article 17 GDPR;
- Right to restriction of processing pursuant to Article 18 GDPR;
- Right to information pursuant to Article 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Article 77 GDPR.
10.2 Right of objection
If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.
If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
11) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his or her consent.
If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of a contract or for initiating a contract and/or we no longer have a legitimate interest in its continued storage.
When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.