Zum Inhalt springen

Privacy policy

In short: Fair for Fitness works without an account and without profiling. We collect as little data as possible — statistics with Google Analytics only run if you explicitly consent.

1. Controller

NJ-Solutions, Owner: Noah Joel Hoffmann, Würzburger Straße 37, 09130 Chemnitz, email: info@fair-for-fitness.de (see legal notice).

2. Hosting and server log files

This website is operated by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When accessed, Vercel processes, as technically necessary, among other things the IP address, date/time, page requested and browser identifier (server logs). The legal basis is our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR). Data may be processed in the USA; the transfer is based on the EU-US Data Privacy Framework as well as EU standard contractual clauses (Art. 46 GDPR). Logs are deleted by the host after a short time.

Form data (price alert, reviews, studio submissions) and our anonymous page counter are stored in a database at Supabase (Supabase, Inc.). The data resides on servers in the EU (Frankfurt am Main region); processing takes place on the basis of a data processing agreement (Art. 28 GDPR).

To protect against abuse and spam (rate limiting of our form and counter endpoints) we process your IP address briefly on the basis of our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR). No permanent storage or profiling takes place in the process.

3. Own reach measurement (without cookies)

We count page views with our own anonymous counter: only the path of the page accessed is stored in aggregate — no IP address, no cookies, no device fingerprint, no user profiles. Legal basis: legitimate interest in improving the service (Art. 6(1)(f) GDPR).

4. Google Analytics 4 — only with your consent

If you consent in the banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG), we use Google Analytics 4 (Google Ireland Ltd.) to evaluate use of the site statistically. GA4 truncates IP addresses automatically. Data may be transferred to the USA (Google LLC; EU-US Data Privacy Framework). Without consent, Google Analytics is not loaded. You can change your consent here at any time with effect for the future:

Only after your consent does Google Analytics set cookies (including _ga and _ga_<ID>) with a lifetime of up to 2 years; you can delete them in your browser at any time. Retention of the usage data collected at Google is limited to up to 14 months.

Current status: no choice made yet

Note: Google cookies already set can additionally be deleted in your browser.

5. Map display (OpenStreetMap)

For the studio map we load map tiles from OpenStreetMap (OpenStreetMap Foundation, UK). Your IP address is transmitted to their server in the process — technically unavoidable in order to display the map (Art. 6(1)(f) GDPR; interest in a useful map display). The map only loads on the search-results view.

6. Location request

The studio search can optionally use your device location. The request is made exclusively via your browser's location permission (your decision); the coordinates are used only to calculate the search results and are not stored permanently.

7. Price alert (email)

If you sign up for the price alert, we store your email address and the associated details (e.g. studio/location) in order to inform you about price changes (Art. 6(1)(a) GDPR). You can unsubscribe at any time — via the link in every email or informally to the address given above; your data is then deleted.

8. Get involved: reviews and studio submissions

Content submitted via “Get involved” (review, studio suggestion, optional contact details) is stored by us for review and publication (Art. 6(1)(b) or (f) GDPR). Please do not provide any sensitive data. On request we will delete your submission — a short message is enough.

9. Studio data in the directory (third-party details)

Fair for Fitness is a studio and price directory. The master data of the listed studios — name, address, geo-coordinates, phone number, tariff/price details and the source link — come from publicly accessible sources (the studios' websites as well as public map/directory services). Insofar as individual details may relate to an identifiable natural person (for example with owner-run studios), we process them on the basis of our legitimate interest in a complete, neutral price comparison (Art. 6(1)(f) GDPR). This notice also serves as information pursuant to Art. 14 GDPR.

Data minimisation: we deliberately show no private email addresses of studio owners. For owner-run studios only the public phone number and the source link are shown; we only provide an email address if it is an impersonal chain/location address.

If you are affected as a studio or owner, you have the right to information, rectification, erasure and objection (Art. 21 GDPR). An informal message to the address given above is enough — we will correct or remove the relevant entry promptly.

10. Cancellation generator

The cancellation generator runs entirely in your browser: the data you enter (name, address, membership number …) is not transmitted to our servers and stored nowhere. PDF/Word/text files are generated locally on your device.

11. Local storage (localStorage)

We store your consent decision (and, where applicable, convenience settings such as the watchlist) in your browser's localStorage. This data does not leave your device and you can delete it at any time via your browser settings (§ 25(2) no. 2 TDDDG — technically necessary or expressly requested).

12. Contacting us

If you write to us by email, we process your details to answer the enquiry (Art. 6(1)(b)/(f) GDPR) and delete them as soon as they are no longer required.

13. Your rights

Under the GDPR you have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can withdraw consent given at any time with effect for the future. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

14. Status

This policy is dated June 2026 and will be updated if the service changes.