This Privacy Policy explains how Body-Up EMS Training (Route des Tattes d'Oie 95, 1260 Nyon, Switzerland) collects, uses, stores and protects your personal data when you use the website body-up-ems.ch, book a session or otherwise interact with us.
We comply with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Personal Data We Collect
We may collect the following categories of personal data:
Identification data: First name, last name, date of birth or age range
Contact details: E-mail address, phone number, postal address
Booking and session data: Type of session, time and date, booking history, membership, preferred language, notes
Health-related data (limited): Information to ensure no contraindications to EMS (health questionnaire)
Payment data: Information for processing payments (Stripe, etc.). Full credit card details are not stored by Body-Up
Technical browsing data: IP address, browser type, pages visited, cookies
Reviews and testimonials: First name/initial, rating, public profile picture, review excerpt (Google Reviews)
3. Purposes of Processing
We process your personal data to:
Manage bookings and memberships (via Sportsnow)
Communicate with you (confirmations, reminders, practical information)
Adapt and secure training (health contraindications)
Manage invoicing and payments
Respond to your enquiries
Send e-mail newsletters (Mailchimp) and marketing messages (SMS/WhatsApp) if you have consented
Analyse and improve the website and our services
Display client reviews (Google Reviews)
Comply with our legal obligations
4. Legal Bases
Depending on the situation, processing is based on:
The performance of a contract (bookings, memberships, payments)
Your consent (newsletter subscriptions, certain health information, marketing)
Compliance with legal obligations
Our legitimate interests (service improvement, IT security)
5. Cookies and Analytics Tools
Our website may use cookies and audience measurement tools (Google Analytics) to:
Measure traffic and website performance
Improve content and navigation
Ensure technical security
You can configure your browser to refuse cookies, but this may limit some features.
6. Recipients of the Data
Your data may be shared with:
Our IT service providers (hosting, maintenance)
Our online booking provider (Sportsnow)
Our online payment provider (Stripe)
Our e-mail marketing provider (Mailchimp)
Analytics and advertising services (Google Analytics)
Our professional advisers and competent authorities when required by law
We do not sell your personal data to third parties.
7. Data Transfers and Hosting
Data may be hosted in Switzerland or within the European Economic Area (EEA) by providers offering adequate security guarantees.
If data needs to be transferred to a country without adequate protection, we implement appropriate safeguards (standard contractual clauses).
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described and to comply with our legal obligations (accounting and tax retention).
When data is no longer needed, it will be deleted or anonymised.
9. Data Security
We implement appropriate technical and organisational measures to protect your data against:
Loss
Unauthorised access
Alteration or unauthorised disclosure
These measures include access control, secure passwords, regular updates, secure hosting.
10. Your Rights
Subject to FADP and GDPR, you have the following rights:
Right to access your personal data
Right to rectify inaccurate or incomplete data
Right to request erasure of your data
Right to restrict certain types of processing
Right to object to certain processing
Right to withdraw your consent (newsletter, marketing)