Privacy Policy

1. Controller

Kniger Gym GmbH
Gritznerstr. 68
12163 Berlin
Germany

Phone: +49 (30) 58584839-0
Email: info@kniger.club

Managing directors: Klaus Knese, Johannes Behrndt. Full details in the imprint.

2. General data processing

We process personal data only within the framework of statutory law (GDPR, TDDDG, BDSG). Where we obtain consent for processing operations, Art. 6 (1) (a) GDPR is the legal basis. For processing necessary to perform a contract or pre-contractual measures, Art. 6 (1) (b) GDPR applies. Where a legal obligation requires processing, Art. 6 (1) (c) GDPR is the basis. Where processing is based on a legitimate interest, Art. 6 (1) (f) GDPR applies.

3. Hosting & site delivery

Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA — via its Irish subsidiary Vercel Ireland Limited. When the site is accessed, connection data is processed on the server side (IP address, user-agent, requested resource, referrer, timestamp). Legal basis: Art. 6 (1) (f) GDPR (secure and stable provision of the website). Delivery uses the EU region Frankfurt; logs are typically deleted or anonymized after 14 days. A data processing agreement (DPA) is in place with Vercel; standard contractual clauses apply for any transfers to third countries.

4. Vercel Web Analytics

This site uses Vercel Web Analytics. Vercel Web Analytics captures aggregated, anonymized usage data (e.g. pages viewed, country, device, referrer) without cookies and without tracking IP addresses in clear text. No unique identifiers are stored. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in privacy-friendly audience measurement). Further information: vercel.com/docs/analytics/privacy-policy.

5. Content management (Sanity)

Editorial content (text, images, packages) is delivered via the headless CMS Sanity by Sanity.io ApS, Forhåbningsholms Allé 6, 1904 Frederiksberg, Denmark. Sanity is used exclusively for delivering editorial content and does not store any personal data of our website visitors. Legal basis: Art. 6 (1) (f) GDPR.

6. Booking system (bsport)

We use the booking system bsport SAS, 35 rue de Penthièvre, 75008 Paris, France, for class bookings, memberships, trial sessions and other appointments. When you click a "Book" or "Trial" button, you are redirected to the bsport portal. There, bsport processes your booking data, contact data, payment data and communication (e.g. reminders, cancellations) under its own controllership. Legal basis: Art. 6 (1) (b) GDPR (contract / pre-contractual measures).

bsport's privacy policy: bsport.io/privacy-policy.

7. CRM & newsletter (Klaviyo)

For processing lead enquiries (trial session, contact form) and sending the newsletter we use Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA. Depending on the form, we transmit name, email, phone number, training goal, marketing consent and delivery metadata (e.g. whether and when an email was opened).

Legal basis for lead enquiries: Art. 6 (1) (b) GDPR. Legal basis for the newsletter: your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the unsubscribe link in every newsletter email.

Klaviyo processes data in the USA. A DPA is in place with Klaviyo; Klaviyo is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission). In addition, standard contractual clauses apply. Further information: klaviyo.com/legal/privacy-policy.

8. Online shop (Shopify)

Our merchandise shop at shop.kniger.club is provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. As soon as you visit the shop domain or place an order, Shopify processes order, payment and contact data under its own controllership and under Shopify's own privacy policy. Legal basis: Art. 6 (1) (b) GDPR.

Shopify's privacy policy: shopify.com/legal/privacy.

9. Maps (Google Maps)

On our location page you can activate an interactive map provided by Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). The map only loads after you explicitly click the "Activate map" button. Until then, no data is transmitted to Google. Once activated, your browser transmits connection data (in particular IP address) to Google; Google may also set cookies and similar technologies. Legal basis: Art. 6 (1) (a) GDPR (consent via active click).

Google may process data in the USA as well. Google is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses apply. Google's privacy policy: policies.google.com/privacy.

10. Cookie management (Usercentrics)

To obtain and manage consent for non-essential cookies and third-party services, we use the consent management platform Usercentrics by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Usercentrics stores a consent ID in your browser's local storage to document your consent or refusal. Legal basis: Art. 6 (1) (c) GDPR in conjunction with § 25 TDDDG (legal obligation to document consent) and Art. 6 (1) (f) GDPR (legitimate interest in a legally compliant website).

You can adjust or revoke your consent at any time via the "Cookie Settings" link in the footer. Further information: usercentrics.com/privacy-policy.

11. Embedded fonts

This site uses the fonts Fahkwang and Manrope, served locally from our domain / Vercel hosting. No transmission to third-party providers (e.g. Google Fonts) takes place.

12. Retention

Lead data is kept up to 12 months after the last contact if no membership is concluded. Member data is kept for the duration of the membership and afterwards for the duration of statutory retention periods (in particular HGB/AO, up to 10 years). Newsletter subscriptions remain active until you unsubscribe. Server logs are deleted or anonymized after a maximum of 14 days.

13. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where you have given consent, you can withdraw it at any time with effect for the future.

To exercise your rights, contact info@kniger.club.

You also have the right to lodge a complaint with the competent supervisory authority — for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin.

14. Changes to this privacy policy

We reserve the right to adjust this privacy policy if legal frameworks or the tools we use change. The current version published on this page applies.