Privacy Policy
This English version is provided for convenience only. The German version is legally binding.
Last updated: October 2026
1. Controller
Nikolai Pourraki
MyFitness Ansbach / MMA Ansbach
Katterbach 5
91522 Ansbach
Germany
Phone: +49 (0)171 7009497
Email: info@myfitness-ansbach.de
2. Summary
- We do not use any analytics or advertising tools or tracking cookies on this website. No cookies are set during a normal visit.
- Fonts are loaded from our own server, not from Google.
- Google Maps is only loaded when you click “Load map”.
- We receive the information from our forms by email. It is not stored in a website database.
- Links to WhatsApp, Instagram and Facebook only transfer data when you click them.
3. Legal bases
We process personal data under the General Data Protection Regulation (GDPR): with your consent (Art. 6 (1) (a) GDPR), to perform a contract or take steps prior to a contract such as a trial session request (Art. 6 (1) (b) GDPR), to comply with legal obligations (Art. 6 (1) (c) GDPR) and to pursue our legitimate interests (Art. 6 (1) (f) GDPR). Storing or accessing information on your device is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
4. Hosting and technical support
This website is operated by an external hosting provider and technically maintained by Hexa Media, Herrieden. Both process data solely on our behalf and according to our instructions (Art. 28 GDPR). Emails, including those from our forms, are delivered to our mailbox at our email provider, which also acts on our behalf. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR).
5. Server log files
Each time the website is accessed, the server automatically stores: IP address, date and time, the page or file requested, the amount of data transferred, the status code, the previously visited page (referrer) and your browser and operating system. We need this data to deliver the website, find errors and fend off attacks (Art. 6 (1) (f) GDPR). Log files are deleted after 30 days at the latest unless they are needed longer to investigate a security incident.
6. Encryption
This website uses SSL/TLS encryption. You can recognize it by “https://” and the padlock icon in your browser’s address bar.
7. Cookies
This website does not set any cookies during a normal visit. Technically necessary cookies are only set on the login page of our team’s internal area: “typo3nonce_…” protects the login form and “fe_typo_user” keeps the session after login. Both become invalid when the browser is closed at the latest. The legal basis is Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (b) or (f) GDPR. If you load the Google map, Google may set cookies (see section 12).
8. Fonts
The fonts used on this website are hosted on our own server. No connection to Google or other font providers is established when you visit a page.
9. Contact form, trial sessions and event registration
When you write to us using one of our forms, request a trial session or register for an event such as our open house, we process the information you provide. Depending on the form, this is: first and last name, email address, phone number, subject, preferred class or area, preferred date, number of people, preferred time slot, participation in the 60-second challenge, confirmation of the minimum age and your message. Required fields are marked; without them we cannot process your request.
We use this information to answer your request, arrange the trial session or organize the event. The legal basis is Art. 6 (1) (b) GDPR; for general inquiries, our legitimate interest in responding (Art. 6 (1) (f) GDPR).
Your information is sent to us by email. You will receive a confirmation at the email address you provided. It is not stored in a website database. To protect against spam, we use an invisible form field without any third-party services.
If you register your child, we process the information about your child solely to organize the training or event.
We delete requests and registrations no later than six months after they have been dealt with or after the event has taken place. If a contract is concluded, we retain data where statutory retention periods require it.
10. Contact by email and phone
If you contact us by email or phone, we process your information to deal with your request (Art. 6 (1) (b) or (f) GDPR). The data is deleted once it is no longer needed for this purpose and no statutory retention obligations apply.
11. WhatsApp
Our website contains buttons linking to WhatsApp. These are simple links: no data is transferred to WhatsApp when you merely visit the website. WhatsApp only opens when you click one of these links. The provider is WhatsApp Ireland Limited, Ireland, a company of the Meta group.
If you message us via WhatsApp, we process your phone number, your profile name and the content of your messages to respond to your request (Art. 6 (1) (b) or (f) GDPR). Data may be transferred to the USA in the process. Meta is certified under the EU-US Data Privacy Framework. If you do not want this, you can also reach us by phone or email.
12. Google Maps
On some pages you can display a Google Maps map. The map is only loaded when you click “Load map”. A connection to Google servers is then established. Google receives, among other things, your IP address and the information which of our pages you visited, and may set cookies. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis is the consent you give by clicking (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). It only applies to the current page view; the map is not loaded automatically on your next visit. Data may be transferred to the USA in the process. Google is certified under the EU-US Data Privacy Framework. The “Open in Google Maps” button opens Google Maps in a new window. More information: Google Privacy Policy.
13. Instagram and Facebook
Our website links to our profiles on Instagram and Facebook. We do not embed any social media plugins; data is only transferred when you click a link.
When you visit our profiles on Instagram or Facebook, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, processes your data under its own terms. We are jointly responsible with Meta for the page statistics (“Insights”) (Art. 26 GDPR). In a joint controller addendum, Meta has undertaken to assume primary responsibility for this and to fulfil your data subject rights. The legal basis for our presence is our legitimate interest in communicating with interested people and members (Art. 6 (1) (f) GDPR). More information: Meta Privacy Policy.
14. Eventbrite
For some events we additionally use the Eventbrite platform. If you register there, your data is processed by Eventbrite; data may be transferred to the USA in the process. Details can be found in Eventbrite’s privacy policy at eventbrite.de. We receive your name, email address and registration details from Eventbrite in order to hold the event (Art. 6 (1) (b) GDPR).
15. Internal area
Our team has a password-protected area for maintaining the class schedule and coach profiles. There we process user names, passwords (stored only as a hash) and the changes made (Art. 6 (1) (b) GDPR).
16. Storage period
We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. It is then deleted.
17. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).
Right to object: Where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
Simply write to info@myfitness-ansbach.de.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
18. No automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
19. Changes
We update this privacy policy when the website or the services we use change. The version published here applies.