Privacy Policy

‌Effective Date: July 24, 2026‌

Welcome to the privacy policy of FitnessKIT GmbH, the operator of the small fitness gear e-commerce website accessible at www.fitnesskitde.com. At FitnessKIT, we curate high-quality, practical compact fitness tools ranging from yoga blocks, resistance bands, massage balls and various portable workout accessories for users of all fitness levels, from beginner home workout enthusiasts to seasoned professional athletes. We take the protection of your personal data extremely seriously, and this Privacy Policy is designed to clearly explain how we collect, use, store, protect and share your personal information when you interact with our website, purchase our products, use our services and communicate with us. We are committed to fully complying with all applicable data protection regulations including the General Data Protection Regulation (GDPR) as implemented in the Federal Republic of Germany, as well as all other relevant local data protection laws that apply to our operations.

1. Data Controller Identity

The data controller responsible for processing your personal information as defined under applicable data protection laws is:
‌FitnessKIT GmbH‌
Hebelstraße 11, 76698 Ubstadt-Weiher, Germany
Contact Email: duskpz@fitnesskitde.com
Contact Phone: +49 7251 4410060

If you have any questions, concerns or requests related to your personal data processing activities covered by this policy, you can reach out to our dedicated data protection team at any time via the contact methods listed above during our official office hours, Monday to Friday from 8:00 a.m. to 5:00 p.m. CET.

2. Types of Personal Information We Collect

We only collect the minimum necessary personal information that is required to deliver our shopping services, improve your user experience, and fulfill our legal obligations. The categories of personal data we may collect include:

  • ‌Account and Registration Data‌: When you register for a user account on our website, we collect your username, email address, and password to create and manage your account credentials. This data allows you to access features such as saved shopping carts, order history tracking, and exclusive member offers for our fitness gear products.
  • ‌Order and Transaction Data‌: When you place an order for our yoga blocks, resistance bands, massage balls or other fitness tools, we collect your full name, shipping address, billing address, payment information (processed securely through certified payment processors), order details, and purchase records to process your order, arrange delivery, process payments and handle after-sales support including returns and exchanges in line with our published Refund and Returns Policy.
  • ‌Communication Data‌: When you contact our customer support team via email, phone or website contact forms, we collect the content of your messages, your contact details, and our response records to resolve your queries related to product specifications, shipping status, warranty claims or any other service concerns efficiently.
  • ‌Website Usage Data‌: When you browse www.fitnesskitde.com, we automatically collect non-identifiable or minimally identifiable data including your IP address, browser type, device information, browsing behavior, pages viewed, time spent on our site, and traffic source data, via first-party cookies and similar tracking technologies. This data helps us optimize our website loading speed, showcase more relevant product recommendations for your fitness needs, and fix technical issues to deliver a smoother shopping experience.
  • ‌Optional Voluntary Data‌: You may voluntarily provide us with additional information such as your fitness preferences, training goals or product feedback when you participate in our surveys, leave product reviews, or sign up for our newsletter to receive updates on new product launches, exclusive promotions for our small fitness tools and workout tips curated by our team.

We will never collect any sensitive personal data including racial origin, religious beliefs, health status unrelated to order processing or other special category data as defined by GDPR without your explicit, separate written consent.

3. Legal Bases and Purposes for Data Processing

We process your personal information strictly on valid legal bases permitted by applicable law, for the following specified purposes:

  • ‌Performance of Contract‌: Processing your order and account data is necessary to fulfill the sales contract we enter with you when you purchase our fitness products, including processing payments, arranging accurate and timely delivery to your designated address, sending order confirmation and shipping tracking notifications, and honoring our after-sales service commitments.
  • ‌Legitimate Interests‌: We process your website usage data and non-intrusive browsing information for our legitimate operational interests, which include optimizing our website functionality, improving our product selection to better match users’ fitness needs, preventing fraud and unauthorized access to our e-commerce platform, and sending you highly relevant non-intrusive product recommendations when you have not opted out of such communications. We always ensure that our legitimate interests do not override your fundamental data protection rights and freedoms.
  • ‌Legal Compliance‌: We process and retain your transaction data, billing records and communication archives to comply with our legal obligations under German commercial and tax laws, which require us to retain relevant commercial documents for specified statutory retention periods. We also process your data to respond to valid legal requests from competent public authorities when we are legally required to do so.
  • ‌Explicit Consent‌: For activities such as sending our marketing newsletter, processing any optional personalization features, or using non-essential cookies that are not strictly required for the website to operate, we will only do so after we obtain your clear, freely given, specific and revocable consent. You have the full right to withdraw any previously given consent at any time, at no cost to you.

4. Sharing of Your Personal Information

We will never sell, rent or lease your personal information to any third parties for their independent marketing purposes without your explicit separate consent. We may only share your limited necessary personal data with the following categories of trusted third parties, strictly for the purposes outlined in this Privacy Policy:

  • ‌Authorized Service Providers‌: We share only the necessary shipping information with our contracted logistics and delivery partners, solely for the purpose of delivering your ordered fitness gear to the address you provided. We share relevant payment data with our PCI-DSS certified payment processors, to complete secure transaction processing without storing your full sensitive payment card information on our own servers. All our service providers are bound by strict data processing agreements that require them to protect your personal data in full compliance with GDPR, and they are not permitted to process your data for any purposes other than the explicit tasks we have contracted them to perform.
  • ‌Legal and Regulatory Authorities‌: We may disclose your personal information if we are legally obligated to do so, in response to a valid court order, official request from a competent government authority, or to comply with applicable laws, regulations or legal proceedings. We may also disclose your data to enforce our website terms of service, protect the rights, property and safety of FitnessKIT GmbH, our customers, our employees and the general public.
  • ‌Business Successor‌: In the event of a merger, acquisition, full or partial asset transfer of FitnessKIT GmbH, your stored personal data may be transferred to the relevant succeeding entity. We will require the new entity to continue to honor the terms of this Privacy Policy, and we will provide you with advance notice if any material changes to your data rights will occur after the transfer.

5. Data Storage and Security Protection

All your personal information is stored on secure, encrypted servers located within the territory of the European Union, in full compliance with GDPR data localization and cross-border transfer requirements. We implement multi-layered industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration or misuse: these measures include end-to-end SSL encryption for all data transmitted between your browser and our website, regular security patch updates for all our server systems, role-based strict access control that limits access to your personal data only to authorized FitnessKIT team members who need the data to perform their job duties, regular independent security audits, and routine data backup procedures to prevent accidental data loss.

We will only retain your personal data for as long as it is strictly necessary to fulfill the purposes for which we originally collected it: we retain order and transaction data for the full statutory period required by German commercial and tax laws, we retain your account data for as long as you keep your account active, and we delete or anonymize your personal information securely and irreversibly once it is no longer required for the stated purposes, unless we are legally obligated to retain specific data for longer mandatory retention periods.

6. Your Data Protection Rights

Under the GDPR and applicable German data protection laws, you hold a comprehensive set of rights over your personal data. You can exercise any of these rights at any time by contacting us via the contact details provided at the start of this policy, and we will respond to your request within one month as required by law:

  • ‌Right of Access‌: You have the right to request a free copy of all personal information we hold about you, and to obtain clear information about how we process your data.
  • ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate or incomplete, you have the right to request immediate correction or completion of that data.
  • ‌Right to Erasure‌: You have the right to request the deletion of your personal information, when the data is no longer necessary for the purposes we collected it for, when you withdraw your relevant consent, or when there is no other valid legal basis for us to continue processing your data.
  • ‌Right to Restriction of Processing‌: You have the right to request that we suspend the processing of your personal data in scenarios including when you contest the accuracy of the data, when the processing is unlawful, or when we no longer need the data but you require it for the establishment, exercise or defense of legal claims.
  • ‌Right to Data Portability‌: You have the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, or to request that we transmit this data directly to another data controller where technically feasible.
  • ‌Right to Object‌: You have the right to object to our processing of your personal data that is based on our legitimate interests, at any time for reasons related to your specific situation. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes, and we will immediately stop all relevant marketing communications once you submit such a request.
  • ‌Right to Withdraw Consent‌: You can withdraw any consent you previously provided to us for specific data processing activities at any time, without affecting the lawfulness of processing we carried out before you withdrew your consent.
  • ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection laws, you have the right to submit a formal complaint to the competent data protection supervisory authority in the German federal state where you reside or where our registered office is located.

7. Cookies and Similar Technologies

Our website www.fitnesskitde.com uses different categories of cookies to improve your browsing and shopping experience. Strictly necessary cookies are always enabled, as they are essential to allow you to browse our website, use core features such as the shopping cart and checkout process, and ensure the normal operation of our e-commerce platform. We also use performance cookies to collect anonymous aggregate data about how visitors use our website, to help us analyze website traffic, optimize page loading speed and fix technical bugs. Functional cookies allow us to remember your preferences such as selected language and saved cart contents, to provide you with more customized convenient features. Marketing cookies may be used to show you relevant advertisements for our fitness products on third-party platforms, only after you have given your explicit consent.

You can freely manage and adjust your cookie preferences at any time via the cookie consent banner on our website, or modify the relevant settings in your own web browser. Please note that disabling strictly necessary cookies may affect the normal functionality of some core shopping features on our website.

8. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy to reflect changes in our business operations, new legal regulatory requirements, or new features we introduce to our website for our fitness product services. When we make material changes to this policy, we will update the “Effective Date” at the top of this page, and publish the revised version on our official website. We will also take appropriate measures such as posting a prominent notice on our website homepage to inform all registered users of the important changes before they take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

By continuing to use our website, create an account, or place orders for our fitness products after the revised Privacy Policy comes into effect, you confirm that you have read, understood and agree to be bound by the terms of the updated policy. If you do not agree with the terms of this Privacy Policy at any time, please do not access or continue to use our website and related services.

For any questions, clarifications or requests regarding this Privacy Policy, please feel free to contact FitnessKIT GmbH at any time via:

  • Postal Address: Hebelstraße 11, 76698 Ubstadt-Weiher, Germany
  • Email: duskpz@fitnesskitde.com
  • Phone: +49 7251 4410060
    Our team will get back to you as quickly as possible within our official working hours.