Privacy Policy (English)

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the privacy policy set out below.

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section "Controller" of this privacy policy.

How do we collect your data?
Some data is collected when you provide it to us, for example when signing up for our newsletter or contacting us by email. Other data is collected automatically when you visit the website, in particular technical data (e.g. browser type, operating system, time of page access). Non-essential cookies and tracking technologies (e.g. Google Analytics, Meta Pixel) are only activated after you have given your consent via our cookie banner.

What rights do you have regarding your data?
You have the right to obtain information free of charge about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request the correction, blocking, or deletion of this data. Consent given can be withdrawn at any time with future effect. You also have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

This website is hosted by the following provider: Squarespace
The provider is Squarespace Ireland Ltd., 2nd Floor, The Chase Building, Carmanhall Road, Sandyford, Dublin 18, D18 W2P5, Ireland (parent company: Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA).

On our behalf, Squarespace processes personal data collected when you visit this website (including IP address, access data, technical metadata) as well as data collected via the shop integrated into the website. This processing takes place for the purpose of secure, fast, and efficient provision of our online services (Art. 6 (1) (f) GDPR) as well as to fulfill contracts with our shop customers (Art. 6 (1) (b) GDPR). As Squarespace, Inc. is based in the USA, data may be transferred there; this is based on the EU Commission's Standard Contractual Clauses or a certification under the EU-US Data Privacy Framework, where applicable. Further details can be found in Squarespace's privacy policy: https://www.squarespace.com/privacy

Domain Registration and Email
The domain is registered with the following provider, which also operates the email mailbox, while the website content is technically pointed to the Squarespace infrastructure (DNS connection): checkdomain GmbH, a dogado group company, Große Burgstraße 27/29, 23552 Lübeck, Germany. checkdomain handles the domain registration as well as email sending/receiving (e.g. hello@secretboxing.com); hosting of the website content itself is carried out via Squarespace (see above).

Data Processing Agreements
We have concluded data processing agreements (DPAs) or standard data protection clauses with the above-mentioned service providers, where required, ensuring that they process our website visitors' personal data only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. Please note that data transmission over the internet may be subject to security vulnerabilities; complete protection against third-party access is not possible.

Controller
The controller responsible for data processing on this website is:

SECRETBOXING Academy GmbH
Seidenstraße 20
70174 Stuttgart, Germany
Phone: +49 17670461201
Email: hello@secretboxing.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Storage Period
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies. If you make a legitimate request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for continued storage (e.g. statutory retention periods under tax or commercial law).

Legal Bases for Data Processing
If you have given your consent to data processing, we process your data on the basis of Art. 6 (1) (a) GDPR. If you have consented to the storage of cookies or comparable technologies, processing additionally takes place on the basis of § 25 (1) TDDDG (German Telecommunications-Digital-Services-Data-Protection Act); consent can be withdrawn at any time. If your data is required for the performance of a contract, we process it on the basis of Art. 6 (1) (b) GDPR. Where there is a legal obligation, processing takes place on the basis of Art. 6 (1) (c) GDPR. Otherwise, processing may be based on our legitimate interest under Art. 6 (1) (f) GDPR.

Your Rights
Under applicable law, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing, as well as, where applicable, the right to correction, deletion, or restriction of processing of this data. You may contact us at any time regarding these or any further questions.

SSL/TLS Encryption
For security reasons, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the lock icon in your browser bar.

Objection to Promotional Emails
We hereby object to the use of contact data published in the context of our legal notice obligation for sending promotional and informational materials not expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited promotional information being sent, such as spam emails.

4. Data Collection on This Website

Cookies
Our website uses cookies. Cookies are small data packages and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Technically necessary cookies (e.g. for shopping cart or security functions) are stored on the basis of Art. 6 (1) (f) GDPR, as we have a legitimate interest in the technically error-free provision of our services. Non-essential cookies (analytics and marketing cookies, see below) are only set after you have given your consent via our cookie banner (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG). This consent can be withdrawn at any time with future effect, e.g. via the cookie settings in the footer of this website.

Email Inquiries
If you contact us by email, your inquiry, including all resulting personal data (name, email address, content of the inquiry), will be stored and processed by us for the purpose of handling your request. We will not pass on this data without your consent. Processing is based on Art. 6 (1) (b) GDPR, if your inquiry is related to the performance of a contract, otherwise on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR). The data will remain with us until you request its deletion or the purpose for storing it no longer applies; mandatory statutory retention periods remain unaffected.

Google Maps
This website uses the mapping service Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use Google Maps, it is necessary to store your IP address; this data is usually transmitted to Google's servers without your influence, including, in some cases, to servers in the USA. Use takes place in the interest of an appealing presentation of our location information (Art. 6 (1) (f) GDPR) or, where consent has been requested, on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG; consent can be withdrawn at any time. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

WhatsApp Business
We offer the option of contacting us via a WhatsApp Business link. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta Platforms Ireland Limited). If you use this link, the WhatsApp application will open on your device and communication will take place directly via WhatsApp; we will receive the messages you send via WhatsApp as well as your phone number. Data processing by WhatsApp is carried out independently in accordance with WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy. The legal basis for our processing of inquiries received via WhatsApp is Art. 6 (1) (b) or (f) GDPR (handling your inquiry or our legitimate interest in fast contact options).

5. Analytics Tools and Advertising

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies or comparable technologies that enable an analysis of the use of this website (e.g. pages visited, time spent, visitor origin). This information is transmitted to and stored on a Google server, potentially including servers in the USA. Google Analytics is used on this website exclusively with your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent at any time via our cookie banner. Further information: https://policies.google.com/privacy

Meta Pixel (Facebook/Instagram)
This website uses the Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This allows the behavior of users who have been redirected to our website by clicking on a Facebook or Instagram advertisement to be tracked, in order to evaluate the effectiveness of advertisements for statistical and market research purposes. The data collected is anonymous to us; we do not see any personal data of individual users. This data is stored and processed by Meta, which may enable a connection to be made to the respective user profile; data processing by Meta takes place within the framework of Meta's data use policy. The Meta Pixel is used on this website exclusively with your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent at any time via our cookie banner. Further information: https://www.facebook.com/privacy/policy/

6. Social Media (Links)
Our website only links to our profiles on Facebook and Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). No social media plugins are embedded; simply visiting our website therefore does not result in any data transfer to these providers. Only if you actively click on such a link will you leave our website, at which point the respective provider's privacy policy applies.

7. Newsletter

Newsletter Data
If you wish to subscribe to the newsletter offered on this website, we require an email address from you, as well as information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. As we ask for your consent before sending, the legal basis is Art. 6 (1) sentence 1 (a) GDPR. You can withdraw this consent at any time with future effect, e.g. via the unsubscribe link in the newsletter or by notifying us.

We use the service Mailchimp, provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA, for sending our newsletter. The data you enter when signing up for the newsletter is stored on Mailchimp's servers; this may involve a transfer of data to the USA, which is based on the EU Commission's Standard Contractual Clauses or a certification under the EU-US Data Privacy Framework. Further information: https://mailchimp.com/legal/privacy/

8. Booking System

Eversports
For booking our courses and trial sessions, we use the external service Eversports GmbH. If you make a booking via the corresponding link on our website, you will be redirected to Eversports, or an Eversports-embedded booking form will open. The data you enter (e.g. name, email address, and, where applicable, payment data) is processed directly by Eversports and is not collected or stored by us; the legal basis for processing by both Eversports and us is the performance of, or steps prior to entering into, a contract (Art. 6 (1) (b) GDPR). For further information on how Eversports handles your data, please refer to their privacy policy: https://www.eversports.de/p/datenschutz

9. Payment Providers in the Online Shop
For orders in our online shop (merchandise/equipment), we offer the following payment methods:

Squarespace Payments
Squarespace Payments is a payment service integrated into Squarespace, operated via the Squarespace infrastructure (see section "Hosting"). If you select this payment method, your payment data will be processed directly via Squarespace Payments. The legal basis is the performance of a contract (Art. 6 (1) (b) GDPR). Further information: https://www.squarespace.com/privacy

PayPal
We offer payment via PayPal. The provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. When paying via PayPal, your payment data will be transmitted to PayPal. The legal basis is our legitimate interest in offering a simple and secure payment process (Art. 6 (1) (f) GDPR) or the performance of a contract (Art. 6 (1) (b) GDPR), where you use a PayPal account to make the payment. Details can be found in PayPal's privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full