App privacy form

1. Controller

The controller for the processing of personal data on this website and in connection with Camp Dörfl's services is:

Email: dominik@campdoerfl.de

Phone: 015561562648

2. General notes on data processing

We process personal data only where necessary to provide our website, to communicate with prospective and existing clients, to deliver our coaching services, to arrange appointments, to perform contracts, or because the law requires it.

Personal data are any information by which a person can be identified directly or indirectly, for example name, email address, telephone number, IP address, training data, health data, or details from contact and registration forms.

Processing takes place in particular under Article 6(1)(a) GDPR where consent has been given, Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or for a contract, Article 6(1)(c) GDPR where legal obligations apply, and Article 6(1)(f) GDPR where there is a legitimate interest.

Where health data are processed, this happens only on the basis of explicit consent under Article 9(2)(a) GDPR, or where it is necessary and permitted for coaching services you have expressly requested.

3. Website access and server log files

When you visit our website, technically necessary data are processed so that the site can be displayed securely and reliably. These may include:

• IP address
• date and time of access
• the page requested
• browser type and version
• operating system
• referrer URL
• volume of data transferred

Processing takes place under Article 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, reliably and without errors.

4. Getting in touch

If you contact us by email, telephone, the contact form or any other channel, we process the details you provide, for example your name, email address, telephone number and the content of your message.

The data are processed to answer your enquiry, coordinate appointments or prepare possible cooperation. The legal basis is Article 6(1)(b) GDPR where pre-contractual or contractual communication is concerned, and Article 6(1)(f) GDPR for general enquiries.

5. Appointment booking and coaching enquiries

If you book an appointment or make a coaching enquiry, the following data may be processed depending on the form:

• Name
• contact details
• the service you want
• training goal
• starting situation
• preferred appointment
• voluntary details about fitness, nutrition, complaints or health

We use these data to prepare, deliver and administer the coaching. The legal basis is Article 6(1)(b) GDPR. Voluntary details about health, training, body measurements or complaints are processed only with your consent, under Article 9(2)(a) GDPR.

6. Processing health, training and progress data

Within our coaching services and digital member areas, health, training, nutrition and progress data may be processed voluntarily. These may include:

• body data such as weight, height, girths or progress photos
• training data
• nutrition data
• check-ins and progress notes
• sleep, activity or vital data, where you supply them voluntarily
• uploaded documents, for example blood counts or laboratory results

These data serve solely to improve the coaching, the training planning, the nutrition support and your individual care.

Providing such data is voluntary. You can withdraw consent at any time with effect for the future. Without certain data, some coaching features may only be usable to a limited extent.

Camp Dörfl does not replace medical diagnosis, treatment or advice. If you have health complaints or medical questions, you should seek advice from a doctor.

7. Member area, app and digital features

If you use a digital member area or the Camp Dörfl app, we process the data needed for registration, login, use, coaching features, progress tracking and communication.

These may include:

• account data
• login and session data
• training and nutrition plans
• check-ins
• chat messages
• uploads
• app usage data
• health data you choose to connect

Processing takes place to provide the digital services you have booked, under Article 6(1)(b) GDPR. Health data are processed only on the basis of your explicit consent.

8. AI-supported features

AI-supported features may be used to improve coaching support, for example to structure and interpret check-ins, progress data, nutrition entries or chat messages.

The AI serves as a supporting tool. No decision is taken solely by automated means with legal effect or similarly significant impact within the meaning of Article 22 GDPR.

Where personal data are transferred to technical service providers, this happens only to the extent necessary and on the basis of appropriate data protection agreements.

9. Payment processing and subscriptions

If paid services, memberships or digital subscriptions are used, payment and contract data may be processed. Depending on the payment method, payment data are processed by the respective payment or platform provider, for example the App Store, a payment service provider or a subscription provider.

As a rule we do not receive complete payment details such as full card numbers, only the information needed to administer the contract and the service.

10. Cookies and similar technologies

Our website may use technically necessary cookies or comparable technologies so that basic functions can be provided.

Where analytics, marketing or tracking technologies are used, this happens only with your consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time.

11. External service providers and processing on our behalf

External service providers may be used for operations, hosting, communication, app features, databases, sending email, payment processing or technical security.

These providers process personal data only to the extent necessary and, where the law requires it, under a data processing agreement pursuant to Article 28 GDPR.

Transfers to countries outside the EU or the EEA take place only where appropriate safeguards exist, for example EU standard contractual clauses, an adequacy decision or explicit consent.

12. Retention periods

We store personal data only for as long as necessary for the purposes concerned.

Data from enquiries are deleted once the enquiry has been dealt with, unless statutory retention obligations apply. Contract and invoice data are kept in line with statutory retention periods. Coaching, health and progress data are deleted once they are no longer needed for your care, once you withdraw consent, or once you request deletion, provided no legal obligation prevents it.

13. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Despite careful security measures, transmission over the internet can never be guaranteed entirely free of risk.

14. Your rights

Subject to the statutory conditions, you have the following rights:

• right of access under Article 15 GDPR
• right to rectification under Article 16 GDPR
• right to erasure under Article 17 GDPR
• right to restriction of processing under Article 18 GDPR
• right to data portability under Article 20 GDPR
• right to object under Article 21 GDPR
• right to withdraw consent under Article 7(3) GDPR
• right to lodge a complaint with a supervisory authority under Article 77 GDPR

If you wish to exercise any of your rights, you can contact us at any time: dominik@campdoerfl.de

15. Right to complain to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. For private companies in Bavaria this is normally:

Website: https://www.lda.bayern.de

16. Changes to this privacy policy

We reserve the right to amend this privacy policy if legal requirements, technical features or our services change. The version published on the website at the time applies.