WHO WE ARE
This website is run by Health and Performance Solutions AG, Brandschenkestrasse 150, 8002 Zürich, Switzerland (UID CHE-313.029.411), which trades as VAULT. We are responsible for the personal data described in this policy.
For anything about your data, write to info@vaulttraining.ch or call +41 78 337 73 77.
This policy follows the Swiss Federal Act on Data Protection (FADP). If you visit us from the EU or the EEA, the General Data Protection Regulation (GDPR) may also apply, and you have the rights it gives you.
WHAT DATA WE COLLECT
When you visit the website. Technical data such as your IP address, browser, device, the pages you see and the time of your visit. Some of it is collected with cookies and similar tools, as explained in our cookies policy.
When you contact us or book a free trial. Your name, email address, phone number, your goal, the time you choose and anything you write to us. The same applies when you ask for one of our guides or send a question through the website, by email or on WhatsApp.
When you train with us. Your contact details, date of birth, the plan you buy, your bookings and payments, and what your coach writes down about your training.
Health data. To train you safely we ask about injuries, pain, medical conditions and medication. If you book a body composition scan or a VO₂max test, we process its results and the short health form that comes with it. Health data is sensitive data, so we only process it with your consent and only for your training and your tests.
Payments. Payments go through our booking system and its payment providers. We don't store your full card details.
WHY WE USE IT
- To answer you, book your free trial and organise your sessions.
- To train you, plan your sessions and show you your progress.
- To carry out the scans and tests you book. Every body composition scan needs an individual justification under the Swiss Radiation Protection Ordinance, so the physician responsible for the scans receives the information needed for that.
- To send you the guide or information you asked for.
- To bill you and keep our accounts, as the law requires.
- To understand how the website is used and how well our ads work, if you accept analytics and marketing cookies.
For visitors to whom the GDPR applies, we rely on the contract with you, your consent (for health data and cookies), our legal obligations and our legitimate interest in running and improving our studio.
WHO WE SHARE IT WITH
We don't sell your data. We share it only with service providers who work for us and only as far as they need it:
- Mindbody (booking, client records and payments), United States.
- Google (email and documents in Google Workspace, Google Analytics, Google Tag Manager and Google Ads), Ireland and United States.
- n8n (sends the forms on this website to our team and our booking system), Germany.
- Zoho Sign (electronic signature of the consent form for the body composition scan).
- Vimeo (client videos, only when you press play), United States.
- WhatsApp (Meta), if you choose to write to us there.
- Our website hosting provider, Switzerland.
- The physician responsible for the body composition scans, our accountants and, where the law requires it, the authorities.
DATA SENT ABROAD
Some of these providers are in the EU or the EEA, which Switzerland recognises as having adequate data protection. Others, such as Mindbody, Google and Vimeo, may process data in the United States. In that case we rely on the Swiss-U.S. Data Privacy Framework where the provider is certified, or on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
COOKIES AND ANALYTICS
We use Google Tag Manager and Google Analytics to see how the website is used, and Google Ads to measure whether our ads bring enquiries. When you arrive from a Google ad, we keep the click identifier to measure how the ad performed, and if you then send us a form, we share your email address and phone number with Google in encrypted (hashed) form to measure whether the ad led to an enquiry. When you first visit, a banner lets you accept or refuse these cookies, and you can change your choice at any time with the «Cookie settings» link at the bottom of every page. Details are in our cookies policy.
HOW LONG WE KEEP IT
We keep your data only as long as we need it for the purposes above. Client records and invoices are kept for ten years, as Swiss accounting law requires. Enquiries that don't lead to training with us are deleted when we no longer need them, at the latest after two years. Health data is deleted or anonymised when you stop training with us, unless the law requires us to keep it longer.
YOUR RIGHTS
You can ask us at any time which data we hold about you, ask us to correct or delete it, ask for a copy in a common format, withdraw a consent you gave us and object to how we use your data. Write to info@vaulttraining.ch. We may ask you to confirm your identity.
You can also complain to the Federal Data Protection and Information Commissioner (FDPIC) in Bern, or, if you live in the EU or the EEA, to the data protection authority of your country.
SECURITY
We protect your data with technical and organisational measures, such as access only for the people who need it, secure connections and providers bound by contract to protect it.
CHANGES AND GOVERNING LAW
We may update this policy when our services or the law change. The version on this page is the one that applies. Swiss law applies and the courts of Zürich have jurisdiction, unless the law says otherwise.
