PRIVACY POLICY

We, boost technologies UG (haftungsbeschränkt), Lerchenfeldstraße 30, 80538 München, are committed to protecting privacy of users of the boost website, boost application(s), and/or other related services (hereinafter collectively the “boost Services” or the “Services”).
For the purposes of this Privacy Policy, boost technologies UG (haftungsbeschränkt) is the “data controller” for all boost Services.
This Privacy Policy describes the types of personal and non-personal data we collect and how we use such data. This Privacy Policy is part of our General Terms and Conditions and applies to all boost Services. Therefore, please make sure that you read and understand our Privacy Policy, as well as the General Terms and Conditions.
This Privacy Policy does not apply to any third-party websites, services or applications, even if they may be accessible through the boost Services.
By using any of the boost Services, you hereby warrant and represent that (i) you have read, understand and agree to this Privacy Policy, (ii) you are over 16 years of age (or are a parent or guardian with such authority to agree to this Privacy Policy for the benefit of an individual who is under 16 years of age). If you do not accept the terms set forth in this Privacy Policy and the consents associated therewith, please do not use our Services.
Last revised: September 2020

To be able to use our services, you must register. Already during the registration process you will provide certain personal data to us. How we use such data and what rights you have in connection therewith is explained in this Data Privacy Policy.
You will also transfer certain information to us when you access our website e.g. your IP address. We will also receive data about which terminal device (computer, smartphone, tablet, etc.) you are using, which browser (Internet Explorer, Safari, Firefox, etc.) you are using, the time at which you access the website, the so-called referrer, and the data volume transferred.
Such data cannot be used by us to identify the user. They are used for statistical purposes only. Such analyses help us make our services more attractive and, if necessary, to improve our services.

The term “personal data” is defined by the Federal Data Protection Act (BDSG) and, after its effective date, the European General Data Protection Regulation (GDPR). You can think of your personal data as any data that allow you to be identified or that can be correlated to you. Such data include, for example, your name and contact information. We need some of this information so that we can offer you our boost Services.
On the other hand, “non-personal” data cannot be correlated to any specific user. By removing identifiable parts from and anonymizing personal data, personal data can be converted into “non-personal data.”

Personal data is collected by us if you provide such data to us on your own initiative. This happens, for example, when you contact us or other members, i.e., when you open your boost user account or sign up for a subscription. We will use personal data you have provided to us only if and to the extent necessary for providing our services and handling of the contract or if you have consented that we may use your data for the purposes described in this Data Privacy Policy.
Your personal data will be stored for as long as this is necessary for achieving the defined purposes. If you cancel your user account, we will also erase your personal data. An exception applies only if we have a legal obligation to archive data for a certain time period.

A log file automatically logs all or defined actions on a computer system. Such log files are important, for example, for process control and automation. In the case of databases a log file tracks changes to the database of correctly executed transactions. In the event of an error (e.g., a system crash), this allows the current dataset to be restored. Log files are also created by web servers. Inter alia, the following data are logged: the address of the accessing computer, authentication fields, date and time of access, access method, content of HTML access, status code of the web server, and information about the browser and operating system used by the client.
Every time you access our website the aforementioned data will be automatically stored in log files.

We collect information about visitors to our website in order to improve our services. For this purpose we use different kinds of so-called cookies and tracking pixels.
A cookie allows a web server to place a text file (e.g., a clear ID) on your computer or smart phone/tablet. Cookies are used, for example, to automatically recognize you the next time you visit our websites. The cookie is sent either by the web server to your browser or is generated by client-side scripting (e.g., JavaScript). Cookie data will be stored locally on your terminal device and in most cases will be effective only for a limited time period.
Websites that include flash media write user-specific data to your computer and later read such data. Such files are called flash cookies or local shared objects (LSO). Such files are not managed by your browser, but rather by the flash player plug-in. Flash cookies are subject to the same rules as conventional cookies. Flash cookies, too, can only be read by the website that caused those flash cookies to be placed. However, flash cookies can store a substantially greater volume of data.
Your browser offers extensive setting options to manage cookies. For example, you can deactivate cookies in your browser or limit cookies to certain websites. You can also program your browser to first notify you before a cookie is placed. You can also choose these settings on your mobile terminal devices. You can at any time manage cookies by changing the settings of your devices, delete cookies, or block cookies altogether.
You can also visit our website even if you block cookies on your terminal device. If you block cookies, the display of our website may however be impaired and not all functions may be available to you.
Tracking pixels are small graphics in HTML e-mails or on websites. When you access such a website, your access to the tracking pixel will be recorded in a log file. This allows statistical analyses which, in turn, can be used to improve our services. You can set your e-mail program or your browser so that HTML e-mails will be displayed as text only, thereby preventing the use of some tracking pixels.

We collect three types of data:
• data you provide to us voluntarily,
• data we receive when you use our services, and
• data we receive from third parties.
In other words, we process and use data (including personal data) you make available to us voluntarily on the website and mobile apps in various situations (e.g., when you send us an e-mail). We also use data that are collected automatically on our website. Finally, we may also receive data about you from third parties, for example when another user provides us with information about you.
It is therefore impossible to provide you with an exhaustive list of all possible types of data that we may possibly collect, process, and use. Typically, we collect, process and use the following data:
• your name and address;
• your personal contact information (e-mail
• your username and password;
• your user profile data (e.g., workout schedule);
• your IP address, operating system, browser type, browser version, browser configuration, name of Internet provider, and any other relevant information regarding your computer and Internet connection in order to identify the type of your device, to connect you to the website, to exchange data with your (mobile) terminal device, or to ensure proper use of the website;
• the URL and IP address of the website from which you access our website or from which you are transferred to our website, including date and time;
• any pages of our website on which you click during your visit, and any links on our website on which you click, including date and time;
• the entire Uniform Resource Locator (URL) clickstream regarding, through, and from the website, including date and time;
• your service inquiries and your orders;
• your transaction history, including open and completed transactions;
• search terms you input;
• information regarding your orders and payments;
• information collected by cookies or similar technologies (as explained below);
• your survey answers, critiques, evaluations, or other responses;
• the content of all messages sent through the website, including information uploaded to social networks through the website or otherwise shared with us and/or other users, as well as chat messages and chat logs;
• your newsletter subscriptions;
• any consents you have given us;
• any other information input or uploaded by you through the website e.g., information you provide when completing an online form, photos you upload); or
• data we receive when you log in through social media (e.g., if you log in with Facebook).

We use cloud services. This means we will transfer your data to a third party – the cloud services provider – and store data on the servers of that provider. In some cases, your data may also be stored on servers outside the European Union (EU) or European Economic Area (EEA). In some cases, your data may also be processed there. We either ensure through appropriate contracts that such service providers guarantee the same level of data privacy to which you are also entitled in the European Union or we use only providers that are EU-US Privacy Shield certified (https://www.privacyshield.gov/welcome). Either alternative ensures an appropriate level data privacy.

We will store your data for as long as is necessary to provide our website and the associated services or as long as we have a legitimate interest in further storage. In all other cases, we will erase your personal data with the exception of data that we are required to maintain in order to comply with contractual or legal (e.g. under tax or commercial law) retention periods (e.g. invoices). Contractual retention periods may also result from contracts with third parties (e.g. holders of copyrights and ancillary copyrights).
We will block any data that is subject to a retention period until the end of that period.

We will collect, process, and use your personal data and other data in particular for the following purposes:
• to administrate, operate, maintain, and improve the website;
• to allow and process orders for services placed by you through the website;
• to customize your experience of our website (e.g., by tailoring content and offers to your personal preferences);
• to assess your right to receive certain types of offers or services;
• to support the improvement and customization of the boost Services;
• to analyze and research customer behavior;
• to respond to your questions and inquiries;
• to provide you with information about services that may be of interest to you;
• to communicate with you about certain concerns;
• to manage awards, surveys, winning games, lotteries, or other promotional activities or events;
• to comply with our legal obligations to prevent any unlawful use of the website, to settle disputes, and to enforce our contracts;
• for any other purposes to which you have consented in a particular case, or
• otherwise as permitted by applicable law.
If required by law, we will ask for your consent before collecting, processing, or using your personal data for any of the aforementioned purposes.
We will also notify you if we want to use your personal data for a new or different purpose. We will use your personal data for such other purposes only if and to the extent necessary or permitted by applicable law or with your consent.

You may create an boost user account through our login system. Following registration, you will be able to use your user account to subscribe to all boost Services. To register, you must provide us with at least the following information:
• name,
• e-mail address, and
• password
Before completing the registration process, you must confirm that you have read our Data Privacy Policy and accept our General Terms and Conditions.
You can also link your boost user account to your Facebook profile. To do so, simply choose “Login with Facebook” during the registration process; you will then be transferred to Facebook. There, you will be shown to which Facebook data we will receive access. We will store your Facebook e-mail address. This is the e-mail address we will use to contact you, if necessary. We will also record the fact that you have registered through Facebook.

You can contact us by sending us messages at our e-mail address.
support@boost.fit
If you transmit personal data to us by e-mail, we will use such data only for the purpose for which you entrust us with such data when you contact us.
The same applies when you communicate with us by using a contact form.

You can register for our newsletter. That way, you will receive regular updates about the boost Services. All you need to receive our newsletter is a valid e-mail address. If you are no longer interested in receiving the newsletter, you may unsubscribe at any time using the link that is included in each newsletter.

We use our own cookies and tracking pixels. As explained above, this will however allow no inferences as to your identity.

To be able to offer you all functions and services in the most convenient way possible and to be able to continuously improve our product, we use third-party services and partners. We also use the assistance of third parties to improve our website. Finally, we use certain tools for our marketing. What tools we use and for what purposes is explained below:

Our website (not App) uses Google Analytics, a web analysis program of Google. Google Analytics uses cookies that are stored on your terminal device and allow an analysis of your use. We activate IP address anonymization so that IP addresses will first be truncated by Google within the European Union. On our behalf Google uses such information to analyze your use of our services as well as the use of our services by other users, and provides us with reports and other services. The IP address transmitted from your terminal device to Google Analytics will not be merged with any other data of Google. Google will transfer your data to third parties only if permitted by applicable law or in accordance with outsourced data processing agreements.
You can prevent the collection and processing of information generated by the Google cookie by placing an opt-out cookie or deactivating Google Analytics in the menu of your terminal device. In the alternative, you can also install a browser plug-in, which you will find here https://tools.google.com/dlpage/gaoptout

Your personal data will be transferred to third parties only if we have a legal obligation to do so, if the data transfer is necessary for performance of the contract, or if you have consented to the transfer of your data. Third-party service providers and partner companies will receive your data only if and to the extent necessary for performance of the contract or with your consent. In such cases, the extent to which data are transferred will however be kept to the absolute minimum. To the extent that our service providers come into contact with your personal data, we will make sure that they too will comply with all applicable data protection laws. Please also read the data privacy policies of such third-party providers.

Data transfers are generally subject to security gaps. It is technically impossible to protect your data 100% from access by third parties. However, we strive to minimize this risk as much as possible. We therefore maintain state-of-the-art measures to guarantee data security and to protect your data from access by third parties. In addition, we use strong SSL or TLS encryption for all data transfers. However, please make sure not to provide your login data to any third parties.

We occasionally place links to websites of third parties. Although we carefully select such third parties, we make no guarantee and assume no liability for the correctness or completeness of content or data security of any third-party websites. Nor does this Data Privacy Policy apply to linked third-party websites. We assume no responsibility for data privacy policies or content of any other websites.

We may need to make changes to this Data Privacy Policy, for example if we add new functions or services. We will however notify you of any changes and ask that you read and accept such changes before they are implemented by us.

You may at any time and at no cost demand information about your personal data that are processed by us, correction of any errors in your personal data, termination of processing of your personal data, or erasure of your personal data – subject to mandatory legal provisions or obligations to the contrary. To exercise these rights, simply contact us at any time by letter or e-mail at:
boost technologies UG (haftungsbeschränkt)
Lerchenfeldstraße 30
München 80538
Germany

E-mail: support@boost.fit
Managing directors: Maximilian Körner

Recorded in the Commercial Register at the Local Court of München under number HRB 257747
VAT ID: DE332038466