Privacy Policy
This is a courtesy translation. The German version of this privacy policy (Datenschutzerklärung) is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Fitness-Studio Kerngesund Nehren
Owner: Simon Werner
Daimlerstraße 1
72147 Nehren
Germany
Phone: 07473 / 95 98 66
Email: info@kerngesund-nehren.de
2. General information on data processing
We process personal data only to the extent necessary to provide a functional website and our content and services (data minimisation).
Legal bases depending on the processing activity:
- Art. 6 (1) (a) GDPR — consent (e.g. loading the map)
- Art. 6 (1) (b) GDPR — contract or pre-contractual measures (e.g. enquiries about trial sessions or membership)
- Art. 6 (1) (f) GDPR — legitimate interest (e.g. secure and stable operation of the website)
Retention: Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations remain.
3. Hosting and server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, under a data processing agreement (Art. 28 GDPR).
When you visit the website, information is automatically stored in server log files: IP address, date and time of access, requested page, browser type and version, operating system and referrer URL. This data serves exclusively to ensure trouble-free operation and to improve security (Art. 6 (1) (f) GDPR). It is not merged with other data sources.
More information: Hetzner privacy policy
4. Contact form
If you send us an enquiry via the contact form, we process the data you provide to handle the enquiry and possible follow-up questions:
- name
- email address
- phone number (optional)
- message content
- interest in a trial session, if indicated
The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract (e.g. membership, trial session), otherwise Art. 6 (1) (f) GDPR (legitimate interest in handling your enquiry).
Cookie-free spam protection: To protect against automated requests we use a computational procedure ("proof of work") that runs entirely in your browser. No cookies are set, no device fingerprints are created and no data is transmitted to third parties.
5. Cookies
This website uses strictly necessary cookies only:
- language preference (DE/EN)
- display preference (theme)
- session cookie for the administration area (relevant only for logged-in administrators)
No tracking, analytics or advertising cookies are set. A cookie banner is therefore not required (§ 25 (2) TDDDG).
6. Email dispatch for contact enquiries
To send the confirmation email and deliver your enquiry to us, we use an email service provider with servers located in the European Union under a data processing agreement (Art. 28 GDPR). The data listed in section 4 is processed for this purpose.
7. Location map (OpenStreetMap)
For directions we embed map material from OpenStreetMap (OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom).
The map is only loaded after you actively click "Load map" (click-to-load). Before this click, no data whatsoever is transmitted to OpenStreetMap. After the click, your IP address is transmitted to servers of the OpenStreetMap Foundation (Art. 6 (1) (a) GDPR — consent given by the click). An EU adequacy decision is in place for the United Kingdom.
More information: OSM Foundation privacy policy
8. No analytics or tracking services
This website does not use web analytics services (e.g. Google Analytics), tracking pixels or social media plugins. Fonts are served locally from our own server — no connection to Google Fonts or other third parties is established.
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in your browser bar.
10. Your rights as a data subject
You have the following rights regarding your personal data:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
- withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
An informal email to info@kerngesund-nehren.de is sufficient to exercise your rights.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de
Last updated: 06/06/2026