Last updated: 25 October 2026
1. Data controller
The controller responsible for processing your personal data is:
Rent A Gym Davos
Mattastrasse 2
7270 Davos Platz
Switzerland
Email: rentagymdavos@gmail.com
Phone: +41 79 790 72 70
2. General information
Protecting your personal data is important to us.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and other applicable data protection provisions.
This privacy policy applies to the Rent A Gym Davos website, the booking and access system, and the Rent A Gym app for iOS and Android.
It explains what personal data we process when you use our website, mobile app and services, the purposes of that processing, the external service providers we use and the rights of data subjects.
Personal data means any information relating to an identified or identifiable natural person.
3. Personal data we process
Depending on how you use our services, we may process the following personal data in particular:
First and last name
Email address
Phone number
Address details
Date of birth
User account and profile data
User ID
Login and authentication data
Booking data
Billing and payment information
Access data
Check-in and check-out data
Communication data
Training data
Exercise data
Technical device and usage data
IP address and technical log data
Video recordings in designated areas of the gym
As a rule, we process only data required for the relevant function, service or another lawful purpose, or data that users provide voluntarily.
4. Purposes of data processing
We process personal data for the following purposes in particular:
Providing and operating our website
Providing and operating our iOS and Android app
Creating and managing user accounts
User login and authentication
Managing customer profiles
Processing and managing bookings
Processing payments
Sending booking confirmations and access information
Providing and managing the electronic access system
Performing and documenting check-in and check-out
Storing and displaying personal training data
Creating training histories, statistics and progress analyses
Communicating with customers
Responding to requests
Technical provision, maintenance and improvement of our systems
Error analysis and ensuring system security
Ensuring safety in the gym
Preventing and investigating misuse, theft, property damage and other incidents
Enforcing our terms of use
Fulfilling statutory and regulatory obligations
5. Use of our website
Our website is operated using Wix.
When you visit our website, technical information may be processed automatically, including:
IP address
Browser type and version
Operating system
Device type
Date and time of access
Pages and content accessed
Origin of a request
Technical connection and log data
This data is needed in particular to provide the website technically, ensure its security and stability and detect errors.
6. Cookies and similar technologies
We use cookies and similar technologies such as local storage and session storage. Necessary storage enables login, security, bookings and saving your privacy choices.
We use technically necessary login and session cookies to sign you in and return you securely to our website. The protected wixSession cookie keeps you signed in on this device for up to 30 days after your last page visit, including when you close your browser. Visiting another page extends this period. Signing out or not visiting any pages for 30 days ends your session. If you delete cookies or the login service ends your session, you will need to sign in again. Other necessary security cookies support technical operation.
The session storage entries rag.card.purchase and rag.card.gift support the purchase or acceptance of multi-session passes respectively. They are removed when the relevant process is completed or discarded when the browser session ends.
Convenience features are optional: with your consent, we store the identifiers of stories you have already viewed under gymViewedStories.v3 on your device. Stories continue to work without consent; in that case, viewed status is retained only during the current page visit.
Statistics are optional: only with your consent do we allow Wix usage statistics and count story views. rentagymWebsiteCountedStories.v1 prevents repeated counting of the same story on this device. Stored story lists are each limited to 300 entries.
Optional categories are disabled by default. You can reject all optional functions, accept them or select them individually. Necessary login and booking remain available regardless of this choice. Advertising and third-party data sharing remain disabled.
We use the Silktide Consent Manager hosted locally on our website. Your choice is stored on your device under rag.consent.v1 and stcm.rentagym.* and synchronised with Wix consent management. After no more than 180 days, we ask again on your next page visit. If consent is withdrawn or expires, we remove optional story storage the next time we process your choice or the next time you visit a page. You can also delete browser data yourself.
You can change or withdraw your consent for the future at any time through Cookie settings in the footer. Processing already carried out lawfully remains unaffected. External payment pages and linked services are also subject to their respective providers' information and settings.
We store your language choice (German or English) as a necessary preference in the rag_language cookie and in local browser storage for one year. The language is included in the address when navigating between pages. No data is sent to a translation service for this purpose.
7. Wix and Wix Analytics
We use Wix services for hosting, customer management, login and booking functions. The technical data and customer data required for these services is processed for this purpose.
Optional Wix usage statistics are enabled on our website only after consent to the Statistics category. They help us understand how our services are used and how easy they are to use. Technically necessary operational and security logs are separate from these.
Google Maps and WhatsApp are provided as external links; the respective services are accessed only when the link is opened.
8. User account and customer profile
Certain functions of our website and the Rent A Gym app require a personal user account.
The same Rent A Gym user account is used for the website and app.
User and profile data is stored centrally in Wix CRM or its associated Wix systems.
The following data may be processed in particular:
First name
Last name
Email address
Phone number
Address
Date of birth
Login and profile data
Information about bookings and services
This information is used in particular for user management, login, booking processing and provision of our services.
9. Bookings
When you book a session, we process the information needed to complete the booking.
This may include in particular:
First and last name
Email address
Phone number
User account
Booked session or service
Date and time the booking was made
Date and time of the booked session
Booking status
Payment status
Vouchers or multi-session passes used
Other voluntarily submitted information
This data is used to process the booking, enable access to the gym and provide the booked service.
10. Payment processing
Payments are processed in particular through Wix Payments or payment service providers integrated by Wix.
To make a payment, the necessary payment and transaction data is transmitted to the relevant payment service provider.
This may include, for example:
Name
Billing information
Payment amount
Currency
Payment method
Transaction information
Technical payment information
Rent A Gym Davos generally does not receive complete credit card or bank account details where these are processed directly by the payment service provider.
Processing by the respective payment service provider is also subject to that provider's privacy policy.
11. Communication
If you contact us, for example by email, phone, contact form or other communication channels, we process the data you provide.
This may include in particular:
Name
Email address
Phone number
Message content
Date and time of communication
Other voluntarily provided information
We use this data to handle your request and communicate with you.
12. Electronic access system
We use an electronic access system for entry to the gym.
The following data may be processed in particular:
Associated booking
User or person making the booking
Time of booking
Booked session
Access code or internal allocation of the access code
Access code validity period
Time a door is opened
Technical status and log data from the access system
This data serves in particular:
Access control
Automated provision of gym access
Security
Prevention of misuse
Technical error analysis
Traceability of security incidents
For the access system, we use in particular TTLock systems or services and technical automations through Make.com.
13. Check-in and check-out
Where our system provides for check-in or check-out, the following information may be stored in particular:
User or booked person
Booked session
Check-in time
Check-out time
Technical status of check-in or check-out
This information is used in particular to organise gym operations, ensure safety and determine which people are or were in the gym as part of a booked session.
14. Video surveillance in the gym
Certain areas of the gym are monitored by video to protect people, facilities and property.
Video surveillance serves in particular:
User safety
Protection of facilities and property
Prevention of theft
Prevention of property damage
Investigation of specific incidents
Prevention and investigation of misuse of the access system
Enforcement of our terms of use in cases of serious breaches
Toilets, showers, changing rooms and other areas requiring a particularly high level of privacy are not monitored.
Video recordings are generally stored for a maximum of 14 days and then automatically deleted.
If a specific security incident is identified within that period, recordings required to investigate the incident may be retained longer.
They are deleted once no longer needed to investigate, enforce or defend claims, or for statutory purposes.
Only authorised persons have access to video recordings.
In the event of a specific security incident, video recordings may be compared with booking data, check-in and check-out data and access logs.
15. Scope of the Rent A Gym app
The Rent A Gym app is available for mobile devices running iOS and Android.
The app enables users in particular to record personal training data, access exercises and equipment, view training histories and use other training-related functions.
Certain functions require a personal user account.
16. User account in the app
The same user account as on our website is used for personalised functions in the Rent A Gym app.
User and profile data is managed centrally through Wix or Wix CRM.
The following information may be processed during registration and use in particular:
First name
Last name
Email address
Phone number
Address
Date of birth
User ID
Login and authentication information
Profile data
Registration time
Technical login information
No separate user account is created exclusively for the app.
Rent A Gym Davos does not store passwords in plain text.
17. Training data
The app enables users to record and analyse their workouts.
The following data may be stored in particular:
Exercises performed
Training equipment used
Date and time of training
Weight used
Number of repetitions
Number of sets
Individual training values
Training history
Personal notes
Other training information entered by the user
Statistics, comparisons and progress values calculated from training data
This data is associated with the respective user account.
It is used to save personal training progress, display previous workouts and provide statistics and training analyses.
We do not sell personal training data to third parties or use it to sell personalised advertising.
18. Custom exercises
Users can create their own or individual exercises in the app.
The following information may be stored, for example:
Exercise name
Exercise type
Muscle group
Equipment or training aid used
Other exercise properties selected by the user
Associated training values
This information is used to make custom exercises available in the user account and to record and analyse training with them.
19. QR codes and camera
The app may use the smartphone's camera to recognise QR codes on training equipment or other training facilities.
Scanning a QR code can, for example, open the corresponding training equipment or associated exercise directly in the app.
The camera is accessed only if users grant the app the relevant permission through their device's operating system.
The QR code function does not store photos or video recordings of the user as part of their training account.
If camera permission is denied, functions requiring a QR code scan may be unavailable or limited.
20. Supabase
We use Supabase for certain technical functions of our app.
Supabase may be used for the following functions in particular:
Storing training data
Storing exercise data
Storing personal app settings
Associating training data with a user account
Technical database functions
The core user and profile data is managed centrally through Wix or Wix CRM.
Only data required for the relevant app function is transferred to or stored in Supabase.
Supabase and its subcontractors may process data as part of the technical provision of services.
21. Technical data and app logs
When you use our app, certain data may be processed for technical reasons.
This may include in particular:
IP address
Time of a server request
Operating system used
App version
Device and technical connection information
Technical errors
Server and security logs
This data is needed in particular for:
Technical provision of the app
Communication between the app and server
Error analysis
Ensuring security
Detecting misuse
Improving technical stability
22. Device permissions
Certain app functions may require access to functions of the mobile device being used.
This includes in particular camera access for scanning QR codes.
Such access occurs only within the relevant function and in accordance with operating system permissions.
Users can generally revoke granted permissions in their device's system settings.
This may limit individual app functions.
23. Apple App Store and Google Play Store
The Rent A Gym app is offered through the Apple App Store and Google Play Store.
When the app is downloaded, installed or updated, Apple or Google may process data under their own responsibility.
This may include, for example:
Apple ID or Google account
IP address
Device information
Download and installation information
Store usage information
Payment information for paid store offers
Diagnostic and usage information in accordance with the relevant settings and provisions
Data processing by Apple or Google is generally carried out under their own responsibility and subject to their respective privacy policies.
24. Shared Rent A Gym user account
The same Rent A Gym user account is used for our website and the Rent A Gym app.
Core user and profile data is managed through Wix or Wix CRM.
Other personal data, particularly training and exercise data, may be stored in additional technical systems and associated with the same Rent A Gym user account via a user ID.
There are therefore not two separate user accounts for the website and app.
25. Deleting your user account
Users can request deletion of their Rent A Gym user account and the associated personal data.
As the same user account is used for the website and app, complete account deletion generally affects access to both the website and the Rent A Gym app.
Deletion can be initiated through the designated function within the Rent A Gym app or through the account deletion or deletion-request option provided on our website.
Complete account deletion generally deletes the personal information associated with the user account in our systems.
This may include in particular:
Wix user or member account
Profile data in Wix CRM
Login and authentication data
Personal training data
Training history
Saved sets
Personal exercises
Personal app settings
Other personal data required exclusively for the user account
Data stored in other technical systems such as Supabase and associated with the user account is also deleted as part of account deletion, unless statutory or other lawful retention grounds apply.
When complete deletion is requested, the user account is not merely deactivated.
26. Data that must be retained after account deletion
Deleting a user account does not necessarily mean that all information ever processed in connection with the person can be deleted immediately.
Certain data may or must continue to be stored if:
A statutory retention obligation applies
The data is required for accounting or tax purposes
Ongoing contractual relationships or outstanding claims exist
The data is required to establish, exercise or defend legal claims
The data is still needed due to a security incident or to prevent misuse
This may concern booking, billing, payment, contract and certain security data in particular.
Where possible, such data is separated from an active user account and no longer used for other purposes.
27. Disclosure of personal data and service providers
We do not sell personal data.
Personal data is disclosed to third parties only where necessary to provide our services, another lawful purpose exists, consent has been given or we are legally obliged to do so.
The service providers we use include in particular:
Wix.com Ltd. – website, user and member management, Wix CRM, booking system, analytics functions and technical website services
Wix Payments or integrated payment service providers – payment processing
Supabase – technical database and storage of app, training and exercise data
Make.com – automation of technical processes and data exchange between the systems used
TTLock – electronic access system
Apple – provision of the iOS app through the App Store
Google – provision of the Android app through Google Play
Other IT, hosting, maintenance or support providers where necessary
Authorities, courts or other public bodies where a legal obligation applies
Service providers generally receive only the data required to fulfil their respective tasks.
28. Data processing abroad
Some of our service providers are located outside Switzerland or use subcontractors or technical infrastructure abroad.
Personal data may therefore also be processed outside Switzerland.
Where personal data is transferred to countries without a recognised adequate level of data protection, we take appropriate safeguards to the extent required by law.
These may include contractual data protection guarantees or recognised standard contractual clauses in particular.
Certain technical services may use different server regions. The actual place of processing may therefore depend on the service used and the technical configuration chosen.
29. Data security
We take appropriate technical and organisational measures to protect personal data in particular against:
Unauthorised access
Loss
Misuse
Unlawful alteration
Unauthorised disclosure
Unlawful processing
These measures are intended to protect your data.
Depending on the system, these include in particular:
User authentication
Access restrictions
Technical permission frameworks
Encrypted data transmission
Security mechanisms of the service providers used
Logging of security-related processes
Regular technical updates
Despite appropriate security measures, absolute security cannot be guaranteed for electronic data transmission and storage.
30. Retention periods
As a rule, we retain personal data only as long as needed for the respective purpose or where statutory, contractual or other lawful grounds justify continued retention.
Video recordings are generally deleted after no more than 14 days unless a specific incident requires longer retention.
User and profile data is generally retained for as long as the user account exists or it is needed to provide our services.
Personal training data is generally retained for as long as the user account exists or until removed by the user or as part of account deletion.
Booking, contract, billing and payment data may continue to be retained after a user account or customer relationship ends due to statutory retention and evidence obligations.
Technical logs are retained only for as long as needed for security, operation, error analysis or other lawful technical purposes.
At the end of the relevant retention period, data is deleted or anonymised unless further lawful retention is required.
31. Your data protection rights
Under applicable data protection law, data subjects may have the following rights in particular:
Information about the personal data we process about them
Rectification of inaccurate or incomplete personal data
Deletion of personal data where no statutory or other lawful grounds for further processing exist
Objection to certain data processing
Restriction or cessation of certain processing where the statutory requirements are met
Release of certain personal data or data portability in a commonly used electronic format where the statutory requirements are met
Withdrawal of consent for future data processing where processing is based on that consent
You can contact us to exercise your rights:
Rent A Gym Davos
Mattastrasse 2
7270 Davos Platz
Switzerland
Email: rentagymdavos@gmail.com
We may request appropriate proof of identity to prevent unauthorised disclosure, alteration or deletion of personal data.
32. Complaints
If you believe your personal data is not being processed in accordance with data protection requirements, you can contact us at any time.
You may also contact the competent data protection supervisory authority, subject to the statutory requirements.
In Switzerland, this is in particular the Federal Data Protection and Information Commissioner (FDPIC).
33. Children and young people
Our services are generally not specifically directed at children.
Where use of certain services requires a minimum age, parental or guardian consent or another condition, the corresponding statutory and contractual provisions apply.
34. Links and external services
Our website or app may contain links to third-party websites, services or offers.
The respective providers are generally responsible for data processing on external websites and services.
Their own privacy policies apply.
35. Changes to this privacy policy
We may amend this privacy policy at any time if our services, technical systems, service providers or legal requirements change.
The current version published on our website applies.
In the event of significant changes, we may additionally inform users in an appropriate manner.
36. Coaching and supporting evidence
For coach applications and profiles, we process the profile, contact and qualification data provided. On each publication, we document express acceptance of the Terms with the member identifier, time, Terms version and profile version as evidence. The public coach selection displays the designated profile data and offers, not the record of acceptance.
For coaching requests, the selected coach receives the contact details, message and requested session to process the request and deliver the coaching. The coach processes this data under their own responsibility for their coaching services and direct billing.
Medical certificates for the voucher exception are used only to assess cancellation and, where applicable, a related dispute. Health data requires particular protection. Please do not submit a diagnosis or medical history; only customer identification, the date concerned and medical confirmation of inability to attend are needed. Coaches may pass on the evidence only with the affected customer's express consent. Access is limited to the persons responsible for handling the matter. Evidence is deleted once the assessment and any disputes are concluded and no statutory retention obligations prevent deletion. Necessary booking, voucher and business records may be retained in accordance with the applicable statutory obligations.