Privacy Policy
Change Cookie Settings
Change Cookies
Cookie History
Revoke Cookie Settings
1. An overview of data protection
General information
The following information provides an easy-to-understand overview of what happens with your personal data when you visit this website. “Personal data” includes all data that can be used to identify you personally. Detailed information on data protection can be found in this Privacy Policy.
Data recording on this website
Who is responsible for data collection on this website?
The data on this website is processed by the website operator. Their contact details can be found in the section “Information about the responsible party (referred to as the ‘controller’ in the GDPR).”
How do we collect your data?
Some data are collected when you provide them to us, for example, by filling out a contact form.
Other data are collected automatically or after your consent during your website visit. These data are mainly technical (e.g., browser type, operating system, or time of page access). They are collected automatically as soon as you enter the website.
What do we use your data for?
Part of the data is used to ensure the proper functioning of the website. Other data can be used to analyze user behavior.
What rights do you have regarding your data?
You have the right to obtain free information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request rectification or deletion of these data. If you have given consent to data processing, you can revoke it at any time with future effect. You also have the right to request the restriction of processing under certain circumstances and the right to lodge a complaint with a supervisory authority.
2. Hosting
External Hosting
This website is hosted externally. The personal data collected on this website are stored on the host’s servers. This may include IP addresses, contact requests, metadata, communication data, contract data, contact information, names, website access data, and other data generated via the website.
The external hosting is carried out for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing a secure, fast, and efficient online offering (Art. 6(1)(f) GDPR). If appropriate consent has been obtained, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time.
Our host(s) will process your data only as necessary to fulfill their service obligations and in accordance with our instructions.
Hosting provider:
SiteGround Spain S.L
Calle de Prim 19
28004 Madrid, Spain
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with the above provider to ensure GDPR-compliant processing of personal data.
3. General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your data confidentially and in accordance with statutory data protection laws and this Privacy Policy.
Whenever you use this website, various personal data are collected. This policy explains what data we collect, how we use it, and for what purpose.
We point out that data transmission over the internet (e.g., via e-mail) may have security vulnerabilities. Complete protection against third-party access is not possible.
Information about the responsible party
Responsible party (controller) for data processing:
Elisa Soravia
Zur alten Kirche 12
78315 Radolfzell, Germany
Phone: +49 176 223 531 98
E-mail: info@elso-fitness.com
Storage duration
Unless a more specific period is mentioned, your personal data will be kept until the purpose of the processing ceases to apply. If you request deletion or withdraw consent, your data will be deleted unless legally required otherwise.
Legal basis for data processing
Depending on the context, data processing is based on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), or Art. 6(1)(f) GDPR (legitimate interest). Details are specified in the respective sections of this Policy.
Transfer to third countries
We may use tools from companies based in non-EU countries. If these are not certified under the EU-US Data Privacy Framework (DPF), your data may be transferred outside the EU without an equivalent level of data protection. We only transfer data when adequate safeguards (e.g., standard contractual clauses) are in place.
Recipients of personal data
We may share data with external partners when legally required, contractually necessary, or justified by legitimate interest. In all cases, processing occurs only based on appropriate legal agreements (Data Processing Agreement or Joint Controllership Agreement).
Revocation of consent
You can revoke your consent to data processing at any time. The legality of the processing before the revocation remains unaffected.
Right to object (Art. 21 GDPR)
You may object to processing based on Art. 6(1)(e) or (f) GDPR at any time on grounds relating to your situation. This also applies to profiling. We will then cease processing your data unless compelling legitimate grounds override your interests.
If your data are processed for direct marketing purposes, you may object at any time; your data will then no longer be used for that purpose.
Right to lodge a complaint
You have the right to file a complaint with the competent data protection authority of your place of residence or work, or where the alleged violation occurred.
Right to data portability
You have the right to receive data processed automatically based on your consent or contract in a commonly used, machine-readable format or to have it transferred to another controller.
Access, rectification, and erasure
You have the right to obtain information about your stored personal data, their origin, recipients, and purpose, and the right to rectification or deletion of these data at any time.
Restriction of processing
You may request restriction of processing in certain cases (e.g., dispute of accuracy, unlawful processing, pending objection). During restriction, data will be processed only with your consent or for legal claims.
SSL/TLS encryption
This site uses SSL/TLS encryption for security and to protect confidential data (e.g., messages or orders). You can recognize an encrypted connection by “https://” and the lock icon in your browser. Data transmitted via encrypted connections cannot be read by third parties.
4. Recording of data on this website
Cookies
This website uses cookies to ensure proper functionality and enhance the user experience. Cookies may be temporary (session) or persistent. Persistent cookies remain until deleted manually or automatically by your browser.
Cookies necessary for electronic communication or specific requested functions are stored on the basis of Art. 6(1)(f) GDPR (legitimate interest). When consent is requested for optional cookies, processing occurs solely based on Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time.
You can configure your browser to notify you before cookies are stored, allow them only in specific cases, or automatically delete them on exit. Disabling cookies may limit website functionality.
Real Cookie Banner
We use the Real Cookie Banner consent tool from devowl.io GmbH, Tannet 12, 94539 Grafling, Germany, to manage cookie consent. It is installed locally, ensuring no data are transferred to external servers. Real Cookie Banner stores a cookie in your browser to record your consent status.
Legal basis: Art. 6(1)(c) GDPR (legal obligation to obtain consent).
5. Plug-ins and Tools
Google Fonts
To display fonts consistently, we use Google Fonts provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address may be transmitted to Google. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). If consent is required, processing is based on Art. 6(1)(a) GDPR.
More info: Google Privacy Policy
Font Awesome
We use Font Awesome by Fonticons Inc., 6 Porter Road 3R, Cambridge MA 02140, USA, for consistent icon and font display. Your browser may connect to Font Awesome servers, transmitting your IP address. Legal basis: Art. 6(1)(f) GDPR.
More info: Font Awesome Privacy Policy
Google Maps
We use Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to display interactive maps. IP address and location data may be processed. Data transfer to the USA may occur; Google is certified under the EU-US DPF.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in usability). Consent may be requested under Art. 6(1)(a) GDPR.
More info: Google Privacy Policy
Google reCAPTCHA
We use Google reCAPTCHA (Google Ireland Ltd.) to protect our forms from spam and automated abuse. The tool analyzes user interactions (e.g., mouse movements, time on page) and sends them to Google.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing misuse). More info: Google Privacy Policy
6. eCommerce and payment service providers
Processing of customer and contract data
We process personal data for establishing, executing, and terminating contractual relationships under Art. 6(1)(b) GDPR. Customer data are deleted after completion of the contract or upon expiry of legal retention obligations.