SPEEDFIT PRIVACY AND COOKIE POLICY

Last Modified: June, 2025

This privacy and cookie policy (“Policy”) describes the personal data collected or generated (processed) when you interact with SPEEDFIT through our website, digital experiences, mobile application, events, or one of our other products or services, all of which are part of SPEEDFIT’s services (“Services”).

It also explains how your personal data is used, shared and protected, what choices you have relating to your personal data and how you can contact us.

1. Who is responsible for data processing and who can you contact if you have any questions?

The joint controllers of the data processing are Speedfit GmbH, SFIP1 GmbH, SFIP 2 NÖ GmbH and SFIP 3 STMK GmbH have their registered office at Bernoullistraße 9, 1220 Vienna, Austria, while CF Fitness GmbH & Co KG has its registered office at Industriestraße 1, 2100 Korneuburg, Austria.

Any questions about your data privacy or this privacy policy, please use request form on website https://speedfit.club or by mail office@speedfit.club.

The SPEEDFIT entity responsible for the processing of your personal data will depend on how you interact with Services and where you are located in the world. The relevant SPEEDFIT entity are referred to as “SPEEDFIT”, “our”, “we” or “us” in this privacy policy.

Third Party Links

The Services may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

2. What Personal Data Do We Collect and When

We ask you for certain personal data to provide you with the products or services you request. For example, when you contact our consumer services, request to receive communications, create an account, participate in our events or contests, or use our Services.

Because we may change our website and the services we offer from time to time, the means and methods to provide us with personal data may also change. Depending on how you interact with us and use the website, the personal data we collect may vary.

This personal data includes your:

contact details including first name, last name, email, telephone number, shipping and billing address;

login and account information, including screen name, password;

personal details including gender, hometown, date of birth;

payment or credit card information;

images, photos;

data on the types of services, the duration of the contract, access to additional services (including visiting schedule), expense and purchase history.

When interacting with our Services, certain data is automatically collected from your device or web browser. More information about these practices is included in the “Cookies” section of this privacy policy below.

3. Sensitive Personal Information

From time to time, we collect and process sensitive personal information, which may include health data. With a few necessary exceptions, you are never required to provide this information, but you may consent to its processing. For example, you can provide information about medical contraindications. Whenever the processing of this data is based on consent, you may withdraw that consent at any time by deleting such information or by asking us to delete it for you.

4. Children’s Privacy

We do not knowingly collect personal information online from children under the age of 13. We comply with local laws and do not allow children to register on our Services when they are under the legal age limit of the country in which they reside. We will ask for parental consent for children participating in SPEEDFIT experiences and events. If you learn that a child has provided us with personal data in violation of this Privacy Policy, you can alert us at office@speedfit.club.

5. Why and How We Use Your Personal Data

We will only use your personal data when allowed by law. Generally, we will use your personal data:

(a) where we need to perform the contract we are about to enter into or have entered into with you;

(b) where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests;

(c) where we need to comply with a legal or regulatory obligation.

We use your personal data in the following ways:

To Provide the Features of the Services You Request

When you use our Services, we will use your personal data to provide the requested product or service. For example, if you make a purchase on our website or participate in an event or promotion, we will use the contact information you give us to communicate with you about the purchase, event or promotion. If you contact our consumer services, we will use information about you, such as delivery or payment information, or the product you have purchased to help you resolve a problem or question.

To Communicate Information about our Products, Services, Events and for Other Promotional Purposes

When you consent, we will send you marketing communications and news concerning SPEEDFIT’s products, services, events and other promotions that may be of interest to you. You can opt-out at any time after you have given your consent.

Direct Marketing

If you are an existing customer of SPEEDFIT, we may use the contact details you provided to send you marketing communications about similar SPEEDFIT products or services where permitted by applicable law (unless you have opted-out). In other cases, we ask for your consent to send you marketing information.

Personalization

We may use the information that you provide to us as well as information from other SPEEDFIT products or services – such as your use of Services, your participation in SPEEDFIT events and contests – to personalize communications on products and services that may be interesting for you. In doing so, we may combine the information you provide to us with information that we create about your online activity, including internal insights and analysis.

To Operate, Improve and Maintain our Business, Products and Services

We use the personal data you provide to us to operate our business. For example, when you make a purchase, we use that information for accounting, audits and other internal functions. We may use personal data about how you use our products and services to enhance your user experience and to help us diagnose technical and service problems and administer our Services.

To Protect Our or Others’ Rights, Property or Safety

We may also use personal data about how you use our Services to prevent, detect or investigate fraud, abuse, illegal use, violations of our Terms of Use, and to comply with court orders, governmental requests or applicable law.

For General Research and Analysis Purposes

We use data about how our visitors use our Services to understand customer behavior or preferences. For example, we may use information about how visitors search for and find products to better understand the best ways to organize and present product offerings.

Other Purposes

We may also use your personal data in other ways and will provide specific notice at the time of collection and obtain your consent where necessary.

6. Video Surveillance

To safeguard the legitimate interests of the data controller, video surveillance is carried out in specific areas of the studios for the protection of individuals (members, visitors, and staff) as well as property. The processing is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Monitored areas:

Studio entrance area

Selected zones of the training area

Storage and access:

Video recordings are stored on a locally operated data carrier and are subject to technical and organizational measures in accordance with the state of the art to protect against unauthorized access. Access to the video data is permitted solely in specific cases where required by law or where necessary to pursue a legitimate interest, for example to maintain order and safety within the operational premises. All access is logged in a traceable manner.

Data recipients:

Access to the stored video data is logged and is granted exclusively for the purpose of investigating criminally relevant acts and/or asserting legitimate claims for damages. Disclosure takes place only for legitimate purposes and only to the following recipients:

the competent court for the preservation of evidence in criminal and civil proceedings

law enforcement authorities for security policing purposes

employees, witnesses, or victims (in the context of asserting legal claims)

insurance companies (exclusively) for processing insurance claims

legal counsel, public authorities, and other competent bodies for the purpose of legal enforcement

Retention period:

If no access has occurred, the video data is automatically deleted after 72 hours.

7. Disclosures of Your Personal Data

From time to time, we may need to share your personal data with others.

Third-Party Service Providers

We may share your information with third party service providers who perform various functions to enable us to provide our services and help us operate our business, such as website design, sending email communications, fraud detection and prevention, customer care, or payment processing. Our contracts with these third parties require them to maintain the confidentiality of the personal data we provide to them and only act on our behalf and under our instructions.

With our Affiliates and Partners

When participating in events or activities that we offer along with our partners and/or affiliates, you may be asked to share personal information. In those situations, the information we obtain from you may be shared with our co-sponsor, unless you instruct us not to.

With Unaffiliated Controllers

In some cases we may transfer personal data to unaffiliated third-party data controllers. We will only provide your personal data to third-party data controllers where you have not opted-out of such disclosures, or in the case of sensitive personal data, where you have opted in if the disclosure requires consent.

Protection of SPEEDFIT and Others

We may share personal data when we believe it is appropriate to enforce our Terms of Use, protect the rights, property, or safety of SPEEDFIT, our users, or others. This includes exchanging information for fraud protection and risk reduction.

Response to Subpoenas and Other Legal Requests

We may share your information with courts, law enforcement agencies, or other government bodies when we have a good faith belief we’re required to do so by law, including to meet national security or law enforcement requirements.

Sale of Our Business

If we sell, merge, or transfer any part of our business, we may be required to share your information. If so, you will be asked if you’d like to stop receiving promotional information following any change of control.

With Your Consent

Other than as set out above, we will provide you with notice and the opportunity to choose when your personal data may be shared with other third parties.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Notice of Privacy Practices

THIS NOTICE OF PRIVACY PRACTICES (“Notice”) DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Company collects protected health information (“PHI”) about you that is necessary to perform our Services. “PHI” is information about you that may identify you and that relates to past, present, and/or future physical or mental health condition and related health care services.

Our Responsibilities

Company is committed and required by law to maintain the privacy and security of your PHI. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. If you provide us with authorization to use or disclose your PHI and later change your mind, please let us know in writing.

Your Rights

You have certain rights when it comes to your PHI. You have the right to:

Ask that we limit how we use or share your PHI.

Ask us to contact you in a specific and/or confidential way.

Ask for an electronic or paper copy of your medical record.

Ask us to correct your protected health information that you think is incorrect or incomplete.

Ask for a list (accounting) of times we’ve shared your PHI in the six years prior to your request.

Our Uses and Disclosures

Your PHI may be used and disclosed for treatment, payment, healthcare operations, and other purposes permitted or required by law. We may use or disclose your PHI without specific authorization for certain purposes, including:

Treatment: To provide and coordinate your treatment with medical professionals.

Payment: To bill and receive reimbursement from health plans.

Health care operations: To support our business operations.

Business associates: With contractors who perform services for us.

Communication with individuals involved in your care.

As required to comply with laws.

Public health activities and threats to health and safety.

And other purposes as detailed in the full policy, such as for research, law enforcement, and judicial proceedings.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. In some circumstances you can ask us to delete your data. In some circumstances we may anonymize your personal data for research or statistical purposes.

11. EU Data Subjects Privacy Rights

EU data subjects have certain rights with respect to your personal data that we collect and process. We respond to all requests from individuals in the EEA wishing to exercise their data protection rights in accordance with applicable data protection laws.

Access, Correction or Deletion: You may request access to, correction of, or deletion of your personal data.

Objection: You may object to the processing of your personal data on grounds of legitimate interest or for direct marketing.

Restriction: You have the right to ask us to suspend the processing of your personal data in certain scenarios.

Portability: You have the right to request the transfer of your personal data to you or to a third party.

Withdraw Consent: If we process data based on your consent, you can withdraw it at any time.

File a Complaint: You have the right to file a complaint with a supervisory authority.

To exercise these rights, please contact us. There is no fee, but we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, repetitive or excessive. We try to respond to all legitimate requests within one month.

12. Cookies

Our website uses cookies. A cookie is a piece of code that allows the web server to identify and track activity of the web browser. While we may automatically use some cookies that are strictly necessary, we request your consent for all of our other cookie uses.

Types of Cookies

Strictly necessary cookies: Required for the website to operate properly.

Analytics cookies: Allow us to improve how our website works by counting visitors and seeing how they move around the site.

Functionality cookies: Used to recognize you when you return to our website and personalize content.

Advertising, tracking or targeting cookies: Record your visit to our website to make advertising more relevant to your interests.

You can manage cookies through your browser settings. If you turn cookies off, some of our services may not function properly.

Cookie Details (Last Updated: 19.12.2024)

Name	Provider	Purpose	Max Storage	Type
_grecaptcha	Google	Pending	Persistent	HTML Local Storage
_GRECAPTCHA	Google	Pending	180 Days	HTTP-Cookie
1.gif	Cookiebot	Used to count the number of sessions on the website, necessary for optimizing CMP product delivery.	Session	Pixel-Tracker
CookieConsent	Cookiebot	Stores the user’s cookie consent state for the current domain.	1 Year	HTTP-Cookie
dmn_chk_#	cdn.chatsimple.ai	Pending	Session	HTTP-Cookie
rc::a	Google	Used to distinguish between humans and bots.	Persistent	HTML Local Storage
rc::b	Google	Used to distinguish between humans and bots.	Session	HTML Local Storage
rc::c	Google	Used to distinguish between humans and bots.	Session	HTML Local Storage
rc::d-15#	Google	Used to distinguish between humans and bots.	Persistent	HTML Local Storage
rc::f	Google	Used to distinguish between humans and bots.	Persistent	HTML Local Storage
test_cookie	Google	Used to check if the user’s browser supports cookies.	1 Day	HTTP-Cookie
wpEmojiSettingsSupports	speedfit.club	Maintains the correct state of font, blog/image sliders, color themes, and other website settings.	Session	HTML Local Storage

13. Updates to Our Policy

By using our Services, you agree to the terms and conditions contained in this Policy. If you do not agree, you should not use the Services. You agree that any dispute over privacy will be governed by the laws of the Austrian Republic. We reserve the right to amend this Policy at any time and will provide notice by posting the amended Policy on the website. We may also email you to give notice of material changes.

14. How to Contact Us

If you have any questions or wish to register a complaint, please contact us by any of the following means: