PRIVACY POLICY
1. GENERAL INFORMATION
The protection of your personal data is a matter of particular concern to us. We therefore process your data exclusively on the basis of statutory provisions (GDPR, TKG 2021).
The controller within the meaning of the GDPR is: Reflex Club e.U., Erzherzog-Karl-Straße 9/4, 1220 Vienna, E-mail: hello@reflexclub.at
For any questions regarding the processing of personal data, you may contact us directly by e-mail or via the "Reflex Club" mobile app.
In this Privacy Policy, we inform you about the key aspects of data processing — both in connection with our website and in connection with the operation of our sports studio.
2. VISITING THE WEBSITE
When you visit our website, your IP address as well as the start and end of the session are recorded for the duration of that session. This is technically necessary and constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Unless otherwise specified below, this data is not further processed by us.
3. HOSTING
Our website is operated via the Tilda Publishing platform. The provider processes technical access data (server logs) as well as data submitted via the contact form on our behalf.
4. CONTACTING US (CONTACT FORM)
If you contact us via the form on the website or by e-mail, the data you provide is stored by us for six months for the purpose of processing your inquiry and in case of follow-up questions. We do not disclose this data to third parties without your consent.
5. COOKIES
Our website uses so-called cookies. These are small text files that are stored on your device by your browser. They cause no damage. We use cookies to make our offering user-friendly. Some cookies remain stored on your device until you delete them — they enable us to recognize your browser on your next visit.
If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are disabled, the functionality of our website may be limited.
Non-essential cookies (in particular analytics and marketing cookies, see point 6) are only activated after your explicit consent via the corresponding cookie banner on the website.
6. WEB ANALYTICS AND TRACKING
Our website uses functions of the web analytics service Google Analytics — an online service of the US company Google Inc., which is used to analyze website traffic. Cookies are used for this purpose, enabling analysis of visitors' use of the website. The information generated is transmitted to and stored on the provider's server, which may include the transfer of data to third countries outside the EEA, including the United States.
In addition, our website uses the Meta Pixel of Meta Platforms Ireland Ltd. (Ireland). This involves collecting information about your behavior on the website and transmitting it to Meta, which may likewise include a transfer to third countries outside the EEA, in particular the United States. The Meta Pixel is used to measure the effectiveness of advertising measures and to optimize advertisements.
You can prevent this by setting up your browser so that no cookies are stored, or by rejecting non-essential cookies via the cookie banner on the website. Corresponding data processing agreements have been concluded with the respective providers.
7. REGISTRATION AND CONCLUSION OF CONTRACT
When registering for a sports program (online or at reception), we collect: the participant's full name, date of birth, address, telephone number, e-mail address, and an emergency contact.
This data is processed for the purpose of concluding and performing the contract (Art. 6(1)(b) GDPR) and is stored in the CRM software Magicline.
8. LEGAL REPRESENTATIVES AND MINOR PARTICIPANTS
If the participant is not yet 18 years old, their legal representative concludes the contract — either independently during online registration or in person at reception. The legal representative becomes the contracting party and party liable for payment; all communication from the studio regarding the contract is conducted exclusively with them.
In this case, both the legal representative's data (contact and payment data) and the child's data required for the provision of the service (name, date of birth, attendance data) are processed.
9. PAYMENT DATA
The processing of payment data differs depending on the type of service:
Subscriptions (SEPA direct debit): processed by the payment service provider Finion Capital GmbH (Germany), Creditor ID DE28ZZZ00000361663.
Individual services (trial training, personal training): processed by the payment service providers Adyen and PayPal.
Each of these providers is an independent controller with respect to the processing of the respective payment; details can be found in the respective privacy policies of these providers. Reflex Club e.U. does not store full credit card data or other payment data — their processing takes place directly with the providers named above.
10. ATTENDANCE AND USE OF THE APP
When booking training sessions, checking in via QR code at reception, and using the "Reflex Club" mobile app, data on attendance, booking history, and use of app functions is processed. This data is processed in Magicline for the purpose of contract performance and ensuring safety.
11. PHOTO AND VIDEO MATERIAL
Photo and video recordings made in the course of the classes, as well as their use for advertising purposes (website, social media, print materials), are subject to separate, voluntary, and revocable consent from the legal representative (for minor participants) or the participant themselves (for adult participants), obtained separately from the contract.
This Privacy Policy does not replace this separate consent; details on the purpose, specific channels of use, and withdrawal of consent can be found in the corresponding Consent to Photo and Video Usage.
12. EMERGENCY CONTACTS AND HEALTH DATA
The studio does not collect systematic or pre-emptively obtained data on participants' state of health (allergies, medical restrictions, etc.) as part of registration or conclusion of the contract.
The participant, or their legal representative, is obliged to inform the trainer immediately before or during training of any injury, deterioration in health, or medical restrictions, insofar as these could affect the safety of participation. This information is used exclusively on a situational basis to ensure the participant's safety and is not permanently stored as a separate, pre-emptively collected category of data.
The contact details of the emergency contact person are stored in Magicline and used exclusively in the event that contact is required in an emergency situation.
13. ADVERTISING COMMUNICATION
The use of contact data for communications about further studio offers (e-mail, SMS, push notifications) takes place exclusively on the basis of separate, non-pre-selected, voluntary consent and is not a prerequisite for concluding the contract. This consent may be withdrawn at any time without giving reasons and without any effect on the continued existence of the contract.
Separately from this, when booking a trial training session or other individual offer, the participant may give consent to be contacted by the studio regarding this specific offer (booking confirmation, reminders, etc.). This consent is operational, not advertising, in nature and is governed separately.
14. YOUR RIGHTS
With regard to your personal data stored by us, you have the following rights: the right to information (Art. 15 GDPR) the right to rectification of inaccurate data (Art. 16 GDPR) the right to erasure (Art. 17 GDPR) the right to restriction of processing (Art. 18 GDPR) the right to data portability (Art. 20 GDPR) the right to object to processing (Art. 21 GDPR)
To exercise any of these rights, please contact us using the contact details given in point 1.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the competent supervisory authority. In Austria, this is the Datenschutzbehörde (www.dsb.gv.at).
15. STORAGE PERIOD
Personal data related to the performance of the contract is stored for the duration of the contract and for the statutory retention periods thereafter — generally up to 7 years, in accordance with Austrian tax and commercial law provisions (Bundesabgabenordnung, Unternehmensgesetzbuch) for documents related to accounting.
Data submitted via the website's contact form is stored for 6 months.
Upon expiry of the respective retention periods, the data is deleted or anonymized.
16. CONTACT FOR DATA PROTECTION MATTERS
Reflex Club e.U.
E-mail: hello@reflexclub.at
"Reflex Club" mobile app
The protection of your personal data is a matter of particular concern to us. We therefore process your data exclusively on the basis of statutory provisions (GDPR, TKG 2021).
The controller within the meaning of the GDPR is: Reflex Club e.U., Erzherzog-Karl-Straße 9/4, 1220 Vienna, E-mail: hello@reflexclub.at
For any questions regarding the processing of personal data, you may contact us directly by e-mail or via the "Reflex Club" mobile app.
In this Privacy Policy, we inform you about the key aspects of data processing — both in connection with our website and in connection with the operation of our sports studio.
2. VISITING THE WEBSITE
When you visit our website, your IP address as well as the start and end of the session are recorded for the duration of that session. This is technically necessary and constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Unless otherwise specified below, this data is not further processed by us.
3. HOSTING
Our website is operated via the Tilda Publishing platform. The provider processes technical access data (server logs) as well as data submitted via the contact form on our behalf.
4. CONTACTING US (CONTACT FORM)
If you contact us via the form on the website or by e-mail, the data you provide is stored by us for six months for the purpose of processing your inquiry and in case of follow-up questions. We do not disclose this data to third parties without your consent.
5. COOKIES
Our website uses so-called cookies. These are small text files that are stored on your device by your browser. They cause no damage. We use cookies to make our offering user-friendly. Some cookies remain stored on your device until you delete them — they enable us to recognize your browser on your next visit.
If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are disabled, the functionality of our website may be limited.
Non-essential cookies (in particular analytics and marketing cookies, see point 6) are only activated after your explicit consent via the corresponding cookie banner on the website.
6. WEB ANALYTICS AND TRACKING
Our website uses functions of the web analytics service Google Analytics — an online service of the US company Google Inc., which is used to analyze website traffic. Cookies are used for this purpose, enabling analysis of visitors' use of the website. The information generated is transmitted to and stored on the provider's server, which may include the transfer of data to third countries outside the EEA, including the United States.
In addition, our website uses the Meta Pixel of Meta Platforms Ireland Ltd. (Ireland). This involves collecting information about your behavior on the website and transmitting it to Meta, which may likewise include a transfer to third countries outside the EEA, in particular the United States. The Meta Pixel is used to measure the effectiveness of advertising measures and to optimize advertisements.
You can prevent this by setting up your browser so that no cookies are stored, or by rejecting non-essential cookies via the cookie banner on the website. Corresponding data processing agreements have been concluded with the respective providers.
7. REGISTRATION AND CONCLUSION OF CONTRACT
When registering for a sports program (online or at reception), we collect: the participant's full name, date of birth, address, telephone number, e-mail address, and an emergency contact.
This data is processed for the purpose of concluding and performing the contract (Art. 6(1)(b) GDPR) and is stored in the CRM software Magicline.
8. LEGAL REPRESENTATIVES AND MINOR PARTICIPANTS
If the participant is not yet 18 years old, their legal representative concludes the contract — either independently during online registration or in person at reception. The legal representative becomes the contracting party and party liable for payment; all communication from the studio regarding the contract is conducted exclusively with them.
In this case, both the legal representative's data (contact and payment data) and the child's data required for the provision of the service (name, date of birth, attendance data) are processed.
9. PAYMENT DATA
The processing of payment data differs depending on the type of service:
Subscriptions (SEPA direct debit): processed by the payment service provider Finion Capital GmbH (Germany), Creditor ID DE28ZZZ00000361663.
Individual services (trial training, personal training): processed by the payment service providers Adyen and PayPal.
Each of these providers is an independent controller with respect to the processing of the respective payment; details can be found in the respective privacy policies of these providers. Reflex Club e.U. does not store full credit card data or other payment data — their processing takes place directly with the providers named above.
10. ATTENDANCE AND USE OF THE APP
When booking training sessions, checking in via QR code at reception, and using the "Reflex Club" mobile app, data on attendance, booking history, and use of app functions is processed. This data is processed in Magicline for the purpose of contract performance and ensuring safety.
11. PHOTO AND VIDEO MATERIAL
Photo and video recordings made in the course of the classes, as well as their use for advertising purposes (website, social media, print materials), are subject to separate, voluntary, and revocable consent from the legal representative (for minor participants) or the participant themselves (for adult participants), obtained separately from the contract.
This Privacy Policy does not replace this separate consent; details on the purpose, specific channels of use, and withdrawal of consent can be found in the corresponding Consent to Photo and Video Usage.
12. EMERGENCY CONTACTS AND HEALTH DATA
The studio does not collect systematic or pre-emptively obtained data on participants' state of health (allergies, medical restrictions, etc.) as part of registration or conclusion of the contract.
The participant, or their legal representative, is obliged to inform the trainer immediately before or during training of any injury, deterioration in health, or medical restrictions, insofar as these could affect the safety of participation. This information is used exclusively on a situational basis to ensure the participant's safety and is not permanently stored as a separate, pre-emptively collected category of data.
The contact details of the emergency contact person are stored in Magicline and used exclusively in the event that contact is required in an emergency situation.
13. ADVERTISING COMMUNICATION
The use of contact data for communications about further studio offers (e-mail, SMS, push notifications) takes place exclusively on the basis of separate, non-pre-selected, voluntary consent and is not a prerequisite for concluding the contract. This consent may be withdrawn at any time without giving reasons and without any effect on the continued existence of the contract.
Separately from this, when booking a trial training session or other individual offer, the participant may give consent to be contacted by the studio regarding this specific offer (booking confirmation, reminders, etc.). This consent is operational, not advertising, in nature and is governed separately.
14. YOUR RIGHTS
With regard to your personal data stored by us, you have the following rights: the right to information (Art. 15 GDPR) the right to rectification of inaccurate data (Art. 16 GDPR) the right to erasure (Art. 17 GDPR) the right to restriction of processing (Art. 18 GDPR) the right to data portability (Art. 20 GDPR) the right to object to processing (Art. 21 GDPR)
To exercise any of these rights, please contact us using the contact details given in point 1.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the competent supervisory authority. In Austria, this is the Datenschutzbehörde (www.dsb.gv.at).
15. STORAGE PERIOD
Personal data related to the performance of the contract is stored for the duration of the contract and for the statutory retention periods thereafter — generally up to 7 years, in accordance with Austrian tax and commercial law provisions (Bundesabgabenordnung, Unternehmensgesetzbuch) for documents related to accounting.
Data submitted via the website's contact form is stored for 6 months.
Upon expiry of the respective retention periods, the data is deleted or anonymized.
16. CONTACT FOR DATA PROTECTION MATTERS
Reflex Club e.U.
E-mail: hello@reflexclub.at
"Reflex Club" mobile app
Stand: 15. Juli 2026
Work schedule
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Sunday
14:00 – 19:00
14:00 – 19:00
14:00 – 19:00
14:00 – 19:00
14:00 – 20:00
10:00 – 20:00
10:00 – 19:00
