Skip to content

Privacy notice

Last updated: 1 November 2026. The German version is authoritative.

1. Controller

V8 EMS Training, Inh. Monika Riedel
Bodenseestraße 15, 81241 München
Telefon: 089 288 518 92 · E-Mail: [email protected]

Privacy matters to us – especially because you trust us with information about your health. This notice explains which data we process, when and why.

2. Hosting and delivery

The website runs on servers of Amazon Web Services EMEA SARL in the Stockholm region (EU). Our database is also hosted by Amazon Web Services in Stockholm (Amazon RDS). Delivery and protection against attacks are provided by Cloudflare, Inc. (USA), which processes your IP address and technical connection data. Legal basis: our legitimate interest in a secure, fast website (Art. 6(1)(f) GDPR). Data processing agreements are in place with all providers; transfers to the USA are covered by the EU-US Data Privacy Framework or the EU standard contractual clauses.

Technically necessary log data (time, page, browser, IP address) is used only for troubleshooting and defence against attacks and deleted after at most 14 days.

3. Cookies and browser storage

We use no analytics, tracking or advertising cookies. A technically necessary cookie is set only when you sign in to your account (session, 14 days). The AI chat keeps the current conversation in your browser’s session storage until you close the tab.

4. Contact form, company enquiries, e-mail and phone

When you contact us, we process your details (name, e-mail, phone, message, company if given) to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and record you as a prospect in our customer management.

5. Booking trial sessions and appointments online

For bookings we process your name, e-mail, phone, the chosen time, your training interest and your goal (Art. 6(1)(b) GDPR). Health information is processed only with your explicit consent (Art. 9(2)(a) GDPR). Appointments are entered in our studio calendar at Google Workspace (Google Ireland Ltd.) with name, phone and type of session only – no health information. Confirmations and reminders are e-mailed via Google Workspace.

6. AI health companion (chat)

Our chat assistant uses the AI model Claude (developed by Anthropic PBC) through Amazon Bedrock by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Processing takes place only in AWS data centres in the EU (primarily the Stockholm region). The chat starts only after you have given your consent.

  • Data: name, e-mail, optionally phone, your messages and the answers.
  • Purpose: answering your questions, advising you on EMS, booking your free trial and collecting what your trainer needs for your personal training and nutrition plan.
  • Legal basis: your consent (Art. 6(1)(a) GDPR) and, where you share health information, your explicit consent (Art. 9(2)(a) GDPR).
  • No third country: your messages do not leave the EU. Amazon Web Services is our processor (Art. 28 GDPR); Amazon Bedrock does not store the messages or use them to train AI models. Anthropic does not receive your data.
  • Storage with us: the conversation is stored in our customer management so your trainer can read it. Without a membership, we delete it at the latest 12 months after the last message.
  • No automated decisions: the AI writes a summary (goals, needs, notes) for your trainer team. People always decide about your training, your plans and your contract (Art. 22 GDPR does not apply).
  • Withdrawal: you can withdraw your consent at any time by e-mail to [email protected]; we then delete the chat.

The assistant does not replace medical advice and can make mistakes.

7. Customer account, training and nutrition plans

Your account shows your appointments and plans. You sign in with a one-time link sent to your e-mail address. Training and nutrition plans are created by our trainers, supported by an AI draft (Claude through Amazon Bedrock in the EU) based on your profile. Every plan is checked and approved by our team before you see it. Legal basis: Art. 6(1)(b) GDPR and, for health information, your consent under Art. 9(2)(a) GDPR.

8. Retention

  • Prospects without a membership: up to 12 months after the last contact.
  • Members: for the duration of the membership and afterwards as long as statutory retention duties apply (e.g. 10 years for tax records).
  • Records of consent: as long as we need to prove the processing.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. In your account you can download your data and delete your chat. You may also lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Online payments (Mollie)

You pay memberships, session cards and payment requests through Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. We pass on your name, e-mail address, amount and purpose; you enter your payment details (e.g. IBAN, card number) directly at Mollie, we never see them. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); we keep payment records for 10 years because of tax and commercial law (Art. 6(1)(c) GDPR). Who referred you and which free sessions you received is stored in your customer account.

11. Google Maps

Our map comes from Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). It loads only when you click “Load map”; only then is data such as your IP address sent to Google, possibly also to the USA (EU-US Data Privacy Framework). Legal basis: your consent by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The “Get directions” and “View on Google” links open Google Maps in a new window.

12. Links to social networks

We link to Instagram, Facebook and WhatsApp (Meta Platforms Ireland Ltd.). No plugins are embedded; data is only shared when you click a link. If you write to us on WhatsApp, WhatsApp processes your message and phone number under its own privacy policy; we use them only to answer you (Art. 6(1)(b) or (f) GDPR).