{{ $t("message.auch_inhaltssprache_aendern") }}

{{ $t("message.auch_oberflaechensprache_aendern") }}

Privacy Policy for the HYROX Academy App

HYROX World GmbH ("HYROX", “we”, “us”) takes the protection of your personal data very seriously. Personal data is any data that can be related to you personally, e.g., name, address, email addresses, user behavior.
This privacy policy describes how we collect and use your personal data when you use our mobile app (hereinafter referred to as "App") and the learning management system (hereinafter referred to as "LMS").
This privacy policy does not apply to visits to our websites or to the conclusion of contracts there, which is a prerequisite for using the content of the App and the LMS, see here.

1 Information about the processing of personal data

1.1 In addition to our online offering, we provide you with the App that you can download to your mobile device. Below, we provide information about the processing of personal data when using our App. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time comply with legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

1.2 The controller, pursuant to Art. 4 (7) GDPR is:

HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: dach@hyrox.com
Website: www.hyrox.com

1.3 The data protection officer of the controller is:

Maja Janzen
HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: datenschutzbeauftragter@hyrox.com.

1.4 When you contact us by email or via a contact form, the data you provide (your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context if the request is assigned to a contract after the expiry of the contract term. Otherwise, we will delete the data after it is no longer necessary for storage, at the latest three years after the data is created at the end of the general limitation period, or restrict processing if there are additional legal storage obligations.

1.5 If we use processors for individual functions of our offer or wish to use your data for advertising purposes, we will always select and monitor these processors carefully and inform you in detail about the respective processes below. We will also specify the criteria for the storage period. If our processors are based in a country outside the European Economic Area (EEA), we will inform you of the consequences in the description of the offer.

2 Your rights

2.1 You have the following rights with regard to a controller in relation to your personal data:

– Right to information
– Right to rectification or erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability
– Right to object to advertising and withdraw consent.

To exercise your rights, please contact us at datenschutzbeauftragter@hyrox.com using your account email address, first name, and last name.

2.2 You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

3 Processing of personal data when using our App and the LMS

3.1 When you download the App, the necessary information is transferred to the app store, in particular your username, email address, and customer number for your account, the time of download, payment information, and the individual device ID. In addition, the app store independently collects various data and provides you with analysis results. We have no influence on this data processing and are not responsible for it. We only process the data to the extent necessary for downloading the App to your mobile device.

3.2 When you use the App and LMS, we process the personal data described below to enable you to use the functions conveniently. If you wish to use our App, we process the following data, which is technically necessary for us to offer you the functions of our App and to ensure stability and security, so that it must be processed by us in order to offer you the functions of the APP and the LMS and to ensure the stability and security of the service: The legal basis is Art. 6 (1) (f) GDPR:

* IP address, date and time of the request
* Time zone difference from Greenwich Mean Time (GMT)
* Content of the request (specific page)
* Access status/HTTP status code
* Amount of data transferred
* Browser
* Operating system and its interface
* Language and version of the browser software.

3.3 If you have selected the appropriate settings on your device, we can send push notifications to your mobile device to inform you about updates to the App and other relevant news, such as when a course has started, is about to expire, or has been revised. You can manage push notifications on the "Options" or "Settings" page in the APP or in your device's settings.

3.4 The messages are also stored in anonymized form in our event tracking system for an indefinite period of time. We do not store your personal push notifications. To the best of our knowledge, messages may be stored by your mobile device provider.

3.5 You can turn off push notifications as follows:

Android:
Open Settings > Apps & Notifications > Notifications > App Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

iOS:
Open Settings > Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

4 Processing of data from your devices and marketing

4.1 The App does not use cookies. No marketing takes place with the data collected from the use of the App and the LMS.

5 External hosting, processors, and subcontractors

5.1 Our App is provided by an external service provider (Lemon Systems GmbH, Beim Alten Gaswerk 1, 22761 Hamburg), and therefore processor according to Art. 28 GDPR. We share your email address and first and last name with the external service provider for verification purposes so that you can log in to the App and the LMS. The legal basis for this is Art. 6 (1) lit. b and lit. f GDPR. In this case our legitimate interest is the technical provision of our service. The personal data collected by our App is stored on the servers of a subprocessor ("host") commissioned by the external service provider. The external service provider and the host will only process your data to the extent that this is technically necessary and thus necessary to fulfill the respective performance obligations and will follow our instructions regarding this data. To ensure data protection-compliant processing, we have concluded a contract for order processing with our external service provider, who in turn has concluded such a contract with the host.

6 Storage of your data, in particular learning progress

6.1 We store your personal data for as long and to the extent necessary for the purposes specified in the respective section of this privacy policy.

6.2 Once the data is no longer required for the purposes specified in the respective section, we will retain your personal data for the period during which you can assert claims against us or we can assert claims against you (statutory limitation period of three years, beginning at the end of the year in which the claim arose, e.g., at the end of the year of purchase).

6.3 In addition, we store your personal data for as long as and to the extent that we are legally obliged to do so. Corresponding documentation and retention obligations arise, among other things, from the German Commercial Code, the German Fiscal Code, and the Money Laundering Act. The retention obligations are up to ten years in accordance with these provisions.

6.4 If you use our services via APP or LMS, we store your learning progress and completed certificates in connection with your username in our database. We also make this data available to your regional contract partner, who is the owner of your customer account through which you booked your courses, within the scope of contract fulfillment. We store your learning progress until we receive a request from you to permanently delete your access to the APP and your account. To delete your account, please contact us using the contact details provided in Section 1.

7 Objection or revocation of the processing of your data

7.1 We process your personal data in accordance with the above sections, where applicable, on the basis of our legitimate interests, in particular to ensure IT security and the provision of content in our APP, to adapt our APP to your needs, for customer support, and to assert, enforce, and defend our legal interests (including in court, if necessary), and to carry out internal administration efficiently and in a manner that allows for the division of labor. Information about the balancing of interests carried out by HYROX can be found at datenschutzbeauftragter@hyrox.com .

7.2 Notwithstanding the options for objection described in the sections above, you have the right to object at any time, on personal grounds, to the processing of your personal data based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. To do so, please send your objection to datenschutzbeauftragter@hyrox.com. We will then no longer process your data for this purpose or these purposes, unless our legitimate interests outweigh your interests or the processing serves to assert, exercise or defend legal claims.

7.3 If you object to data processing, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (legal basis: Art. 6 (1) lit. c GDPR).

8 Revocation of consent

8.1 If you have given us consent to process your personal data, you can revoke this consent at any time. The revocation of your consent is effective for the future. The lawfulness of the processing of your personal data until the time of revocation remains unaffected.

8.2 Unless otherwise described in the sections above regarding data processing based on your consent, please send your revocation to datenschutzbeauftragter@hyrox.com .

8.3 If you withdraw your consent, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (Art. 6 (1) lit. c GDPR).

9 Changes to the privacy policy

9.1 The provisions of this privacy policy, including the cookie information on the HYROX 365 website, apply in the version valid at the time of use of the online shop.

9.2 We reserve the right to supplement and change the content of the privacy policy at any time. The updated privacy policy applies from the time it is published on our website. In the event of significant (material) changes to the privacy policy, in particular changes that affect the processing of your personal data already collected by us, we will inform you separately (e.g. by email).


Date: August 7th 2025

Privacy Policy for the HYROX Academy App

HYROX World GmbH ("HYROX", “we”, “us”) takes the protection of your personal data very seriously. Personal data is any data that can be related to you personally, e.g., name, address, email addresses, user behavior.
This privacy policy describes how we collect and use your personal data when you use our mobile app (hereinafter referred to as "App") and the learning management system (hereinafter referred to as "LMS").
This privacy policy does not apply to visits to our websites or to the conclusion of contracts there, which is a prerequisite for using the content of the App and the LMS, see here.

1 Information about the processing of personal data

1.1 In addition to our online offering, we provide you with the App that you can download to your mobile device. Below, we provide information about the processing of personal data when using our App. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time comply with legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

1.2 The controller, pursuant to Art. 4 (7) GDPR is:

HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: dach@hyrox.com
Website: www.hyrox.com

1.3 The data protection officer of the controller is:

Maja Janzen
HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: datenschutzbeauftragter@hyrox.com.

1.4 When you contact us by email or via a contact form, the data you provide (your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context if the request is assigned to a contract after the expiry of the contract term. Otherwise, we will delete the data after it is no longer necessary for storage, at the latest three years after the data is created at the end of the general limitation period, or restrict processing if there are additional legal storage obligations.

1.5 If we use processors for individual functions of our offer or wish to use your data for advertising purposes, we will always select and monitor these processors carefully and inform you in detail about the respective processes below. We will also specify the criteria for the storage period. If our processors are based in a country outside the European Economic Area (EEA), we will inform you of the consequences in the description of the offer.

2 Your rights

2.1 You have the following rights with regard to a controller in relation to your personal data:

– Right to information
– Right to rectification or erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability
– Right to object to advertising and withdraw consent.

To exercise your rights, please contact us at datenschutzbeauftragter@hyrox.com using your account email address, first name, and last name.

2.2 You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

3 Processing of personal data when using our App and the LMS

3.1 When you download the App, the necessary information is transferred to the app store, in particular your username, email address, and customer number for your account, the time of download, payment information, and the individual device ID. In addition, the app store independently collects various data and provides you with analysis results. We have no influence on this data processing and are not responsible for it. We only process the data to the extent necessary for downloading the App to your mobile device.

3.2 When you use the App and LMS, we process the personal data described below to enable you to use the functions conveniently. If you wish to use our App, we process the following data, which is technically necessary for us to offer you the functions of our App and to ensure stability and security, so that it must be processed by us in order to offer you the functions of the APP and the LMS and to ensure the stability and security of the service: The legal basis is Art. 6 (1) (f) GDPR:

* IP address, date and time of the request
* Time zone difference from Greenwich Mean Time (GMT)
* Content of the request (specific page)
* Access status/HTTP status code
* Amount of data transferred
* Browser
* Operating system and its interface
* Language and version of the browser software.

3.3 If you have selected the appropriate settings on your device, we can send push notifications to your mobile device to inform you about updates to the App and other relevant news, such as when a course has started, is about to expire, or has been revised. You can manage push notifications on the "Options" or "Settings" page in the APP or in your device's settings.

3.4 The messages are also stored in anonymized form in our event tracking system for an indefinite period of time. We do not store your personal push notifications. To the best of our knowledge, messages may be stored by your mobile device provider.

3.5 You can turn off push notifications as follows:

Android:
Open Settings > Apps & Notifications > Notifications > App Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

iOS:
Open Settings > Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

4 Processing of data from your devices and marketing

4.1 The App does not use cookies. No marketing takes place with the data collected from the use of the App and the LMS.

5 External hosting, processors, and subcontractors

5.1 Our App is provided by an external service provider (Lemon Systems GmbH, Beim Alten Gaswerk 1, 22761 Hamburg), and therefore processor according to Art. 28 GDPR. We share your email address and first and last name with the external service provider for verification purposes so that you can log in to the App and the LMS. The legal basis for this is Art. 6 (1) lit. b and lit. f GDPR. In this case our legitimate interest is the technical provision of our service. The personal data collected by our App is stored on the servers of a subprocessor ("host") commissioned by the external service provider. The external service provider and the host will only process your data to the extent that this is technically necessary and thus necessary to fulfill the respective performance obligations and will follow our instructions regarding this data. To ensure data protection-compliant processing, we have concluded a contract for order processing with our external service provider, who in turn has concluded such a contract with the host.

6 Storage of your data, in particular learning progress

6.1 We store your personal data for as long and to the extent necessary for the purposes specified in the respective section of this privacy policy.

6.2 Once the data is no longer required for the purposes specified in the respective section, we will retain your personal data for the period during which you can assert claims against us or we can assert claims against you (statutory limitation period of three years, beginning at the end of the year in which the claim arose, e.g., at the end of the year of purchase).

6.3 In addition, we store your personal data for as long as and to the extent that we are legally obliged to do so. Corresponding documentation and retention obligations arise, among other things, from the German Commercial Code, the German Fiscal Code, and the Money Laundering Act. The retention obligations are up to ten years in accordance with these provisions.

6.4 If you use our services via APP or LMS, we store your learning progress and completed certificates in connection with your username in our database. We also make this data available to your regional contract partner, who is the owner of your customer account through which you booked your courses, within the scope of contract fulfillment. We store your learning progress until we receive a request from you to permanently delete your access to the APP and your account. To delete your account, please contact us using the contact details provided in Section 1.

7 Objection or revocation of the processing of your data

7.1 We process your personal data in accordance with the above sections, where applicable, on the basis of our legitimate interests, in particular to ensure IT security and the provision of content in our APP, to adapt our APP to your needs, for customer support, and to assert, enforce, and defend our legal interests (including in court, if necessary), and to carry out internal administration efficiently and in a manner that allows for the division of labor. Information about the balancing of interests carried out by HYROX can be found at datenschutzbeauftragter@hyrox.com .

7.2 Notwithstanding the options for objection described in the sections above, you have the right to object at any time, on personal grounds, to the processing of your personal data based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. To do so, please send your objection to datenschutzbeauftragter@hyrox.com. We will then no longer process your data for this purpose or these purposes, unless our legitimate interests outweigh your interests or the processing serves to assert, exercise or defend legal claims.

7.3 If you object to data processing, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (legal basis: Art. 6 (1) lit. c GDPR).

8 Revocation of consent

8.1 If you have given us consent to process your personal data, you can revoke this consent at any time. The revocation of your consent is effective for the future. The lawfulness of the processing of your personal data until the time of revocation remains unaffected.

8.2 Unless otherwise described in the sections above regarding data processing based on your consent, please send your revocation to datenschutzbeauftragter@hyrox.com .

8.3 If you withdraw your consent, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (Art. 6 (1) lit. c GDPR).

9 Changes to the privacy policy

9.1 The provisions of this privacy policy, including the cookie information on the HYROX 365 website, apply in the version valid at the time of use of the online shop.

9.2 We reserve the right to supplement and change the content of the privacy policy at any time. The updated privacy policy applies from the time it is published on our website. In the event of significant (material) changes to the privacy policy, in particular changes that affect the processing of your personal data already collected by us, we will inform you separately (e.g. by email).


Date: August 7th 2025

Privacy Policy for the HYROX Academy App

HYROX World GmbH ("HYROX", “we”, “us”) takes the protection of your personal data very seriously. Personal data is any data that can be related to you personally, e.g., name, address, email addresses, user behavior.
This privacy policy describes how we collect and use your personal data when you use our mobile app (hereinafter referred to as "App") and the learning management system (hereinafter referred to as "LMS").
This privacy policy does not apply to visits to our websites or to the conclusion of contracts there, which is a prerequisite for using the content of the App and the LMS, see here.

1 Information about the processing of personal data

1.1 In addition to our online offering, we provide you with the App that you can download to your mobile device. Below, we provide information about the processing of personal data when using our App. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time comply with legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

1.2 The controller, pursuant to Art. 4 (7) GDPR is:

HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: dach@hyrox.com
Website: www.hyrox.com

1.3 The data protection officer of the controller is:

Maja Janzen
HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: datenschutzbeauftragter@hyrox.com.

1.4 When you contact us by email or via a contact form, the data you provide (your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context if the request is assigned to a contract after the expiry of the contract term. Otherwise, we will delete the data after it is no longer necessary for storage, at the latest three years after the data is created at the end of the general limitation period, or restrict processing if there are additional legal storage obligations.

1.5 If we use processors for individual functions of our offer or wish to use your data for advertising purposes, we will always select and monitor these processors carefully and inform you in detail about the respective processes below. We will also specify the criteria for the storage period. If our processors are based in a country outside the European Economic Area (EEA), we will inform you of the consequences in the description of the offer.

2 Your rights

2.1 You have the following rights with regard to a controller in relation to your personal data:

– Right to information
– Right to rectification or erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability
– Right to object to advertising and withdraw consent.

To exercise your rights, please contact us at datenschutzbeauftragter@hyrox.com using your account email address, first name, and last name.

2.2 You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

3 Processing of personal data when using our App and the LMS

3.1 When you download the App, the necessary information is transferred to the app store, in particular your username, email address, and customer number for your account, the time of download, payment information, and the individual device ID. In addition, the app store independently collects various data and provides you with analysis results. We have no influence on this data processing and are not responsible for it. We only process the data to the extent necessary for downloading the App to your mobile device.

3.2 When you use the App and LMS, we process the personal data described below to enable you to use the functions conveniently. If you wish to use our App, we process the following data, which is technically necessary for us to offer you the functions of our App and to ensure stability and security, so that it must be processed by us in order to offer you the functions of the APP and the LMS and to ensure the stability and security of the service: The legal basis is Art. 6 (1) (f) GDPR:

* IP address, date and time of the request
* Time zone difference from Greenwich Mean Time (GMT)
* Content of the request (specific page)
* Access status/HTTP status code
* Amount of data transferred
* Browser
* Operating system and its interface
* Language and version of the browser software.

3.3 If you have selected the appropriate settings on your device, we can send push notifications to your mobile device to inform you about updates to the App and other relevant news, such as when a course has started, is about to expire, or has been revised. You can manage push notifications on the "Options" or "Settings" page in the APP or in your device's settings.

3.4 The messages are also stored in anonymized form in our event tracking system for an indefinite period of time. We do not store your personal push notifications. To the best of our knowledge, messages may be stored by your mobile device provider.

3.5 You can turn off push notifications as follows:

Android:
Open Settings > Apps & Notifications > Notifications > App Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

iOS:
Open Settings > Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

4 Processing of data from your devices and marketing

4.1 The App does not use cookies. No marketing takes place with the data collected from the use of the App and the LMS.

5 External hosting, processors, and subcontractors

5.1 Our App is provided by an external service provider (Lemon Systems GmbH, Beim Alten Gaswerk 1, 22761 Hamburg), and therefore processor according to Art. 28 GDPR. We share your email address and first and last name with the external service provider for verification purposes so that you can log in to the App and the LMS. The legal basis for this is Art. 6 (1) lit. b and lit. f GDPR. In this case our legitimate interest is the technical provision of our service. The personal data collected by our App is stored on the servers of a subprocessor ("host") commissioned by the external service provider. The external service provider and the host will only process your data to the extent that this is technically necessary and thus necessary to fulfill the respective performance obligations and will follow our instructions regarding this data. To ensure data protection-compliant processing, we have concluded a contract for order processing with our external service provider, who in turn has concluded such a contract with the host.

6 Storage of your data, in particular learning progress

6.1 We store your personal data for as long and to the extent necessary for the purposes specified in the respective section of this privacy policy.

6.2 Once the data is no longer required for the purposes specified in the respective section, we will retain your personal data for the period during which you can assert claims against us or we can assert claims against you (statutory limitation period of three years, beginning at the end of the year in which the claim arose, e.g., at the end of the year of purchase).

6.3 In addition, we store your personal data for as long as and to the extent that we are legally obliged to do so. Corresponding documentation and retention obligations arise, among other things, from the German Commercial Code, the German Fiscal Code, and the Money Laundering Act. The retention obligations are up to ten years in accordance with these provisions.

6.4 If you use our services via APP or LMS, we store your learning progress and completed certificates in connection with your username in our database. We also make this data available to your regional contract partner, who is the owner of your customer account through which you booked your courses, within the scope of contract fulfillment. We store your learning progress until we receive a request from you to permanently delete your access to the APP and your account. To delete your account, please contact us using the contact details provided in Section 1.

7 Objection or revocation of the processing of your data

7.1 We process your personal data in accordance with the above sections, where applicable, on the basis of our legitimate interests, in particular to ensure IT security and the provision of content in our APP, to adapt our APP to your needs, for customer support, and to assert, enforce, and defend our legal interests (including in court, if necessary), and to carry out internal administration efficiently and in a manner that allows for the division of labor. Information about the balancing of interests carried out by HYROX can be found at datenschutzbeauftragter@hyrox.com .

7.2 Notwithstanding the options for objection described in the sections above, you have the right to object at any time, on personal grounds, to the processing of your personal data based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. To do so, please send your objection to datenschutzbeauftragter@hyrox.com. We will then no longer process your data for this purpose or these purposes, unless our legitimate interests outweigh your interests or the processing serves to assert, exercise or defend legal claims.

7.3 If you object to data processing, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (legal basis: Art. 6 (1) lit. c GDPR).

8 Revocation of consent

8.1 If you have given us consent to process your personal data, you can revoke this consent at any time. The revocation of your consent is effective for the future. The lawfulness of the processing of your personal data until the time of revocation remains unaffected.

8.2 Unless otherwise described in the sections above regarding data processing based on your consent, please send your revocation to datenschutzbeauftragter@hyrox.com .

8.3 If you withdraw your consent, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (Art. 6 (1) lit. c GDPR).

9 Changes to the privacy policy

9.1 The provisions of this privacy policy, including the cookie information on the HYROX 365 website, apply in the version valid at the time of use of the online shop.

9.2 We reserve the right to supplement and change the content of the privacy policy at any time. The updated privacy policy applies from the time it is published on our website. In the event of significant (material) changes to the privacy policy, in particular changes that affect the processing of your personal data already collected by us, we will inform you separately (e.g. by email).


Date: August 7th 2025

Privacy Policy for the HYROX Academy App

HYROX World GmbH ("HYROX", “we”, “us”) takes the protection of your personal data very seriously. Personal data is any data that can be related to you personally, e.g., name, address, email addresses, user behavior.
This privacy policy describes how we collect and use your personal data when you use our mobile app (hereinafter referred to as "App") and the learning management system (hereinafter referred to as "LMS").
This privacy policy does not apply to visits to our websites or to the conclusion of contracts there, which is a prerequisite for using the content of the App and the LMS, see here.

1 Information about the processing of personal data

1.1 In addition to our online offering, we provide you with the App that you can download to your mobile device. Below, we provide information about the processing of personal data when using our App. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time comply with legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

1.2 The controller, pursuant to Art. 4 (7) GDPR is:

HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: dach@hyrox.com
Website: www.hyrox.com

1.3 The data protection officer of the controller is:

Maja Janzen
HYROX World GmbH
Bahrenfelder Straße 322
22765 Hamburg
Email: datenschutzbeauftragter@hyrox.com.

1.4 When you contact us by email or via a contact form, the data you provide (your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context if the request is assigned to a contract after the expiry of the contract term. Otherwise, we will delete the data after it is no longer necessary for storage, at the latest three years after the data is created at the end of the general limitation period, or restrict processing if there are additional legal storage obligations.

1.5 If we use processors for individual functions of our offer or wish to use your data for advertising purposes, we will always select and monitor these processors carefully and inform you in detail about the respective processes below. We will also specify the criteria for the storage period. If our processors are based in a country outside the European Economic Area (EEA), we will inform you of the consequences in the description of the offer.

2 Your rights

2.1 You have the following rights with regard to a controller in relation to your personal data:

– Right to information
– Right to rectification or erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability
– Right to object to advertising and withdraw consent.

To exercise your rights, please contact us at datenschutzbeauftragter@hyrox.com using your account email address, first name, and last name.

2.2 You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

3 Processing of personal data when using our App and the LMS

3.1 When you download the App, the necessary information is transferred to the app store, in particular your username, email address, and customer number for your account, the time of download, payment information, and the individual device ID. In addition, the app store independently collects various data and provides you with analysis results. We have no influence on this data processing and are not responsible for it. We only process the data to the extent necessary for downloading the App to your mobile device.

3.2 When you use the App and LMS, we process the personal data described below to enable you to use the functions conveniently. If you wish to use our App, we process the following data, which is technically necessary for us to offer you the functions of our App and to ensure stability and security, so that it must be processed by us in order to offer you the functions of the APP and the LMS and to ensure the stability and security of the service: The legal basis is Art. 6 (1) (f) GDPR:

* IP address, date and time of the request
* Time zone difference from Greenwich Mean Time (GMT)
* Content of the request (specific page)
* Access status/HTTP status code
* Amount of data transferred
* Browser
* Operating system and its interface
* Language and version of the browser software.

3.3 If you have selected the appropriate settings on your device, we can send push notifications to your mobile device to inform you about updates to the App and other relevant news, such as when a course has started, is about to expire, or has been revised. You can manage push notifications on the "Options" or "Settings" page in the APP or in your device's settings.

3.4 The messages are also stored in anonymized form in our event tracking system for an indefinite period of time. We do not store your personal push notifications. To the best of our knowledge, messages may be stored by your mobile device provider.

3.5 You can turn off push notifications as follows:

Android:
Open Settings > Apps & Notifications > Notifications > App Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

iOS:
Open Settings > Notifications > Name of the app. On this screen, you can control whether and how push notifications are displayed.

4 Processing of data from your devices and marketing

4.1 The App does not use cookies. No marketing takes place with the data collected from the use of the App and the LMS.

5 External hosting, processors, and subcontractors

5.1 Our App is provided by an external service provider (Lemon Systems GmbH, Beim Alten Gaswerk 1, 22761 Hamburg), and therefore processor according to Art. 28 GDPR. We share your email address and first and last name with the external service provider for verification purposes so that you can log in to the App and the LMS. The legal basis for this is Art. 6 (1) lit. b and lit. f GDPR. In this case our legitimate interest is the technical provision of our service. The personal data collected by our App is stored on the servers of a subprocessor ("host") commissioned by the external service provider. The external service provider and the host will only process your data to the extent that this is technically necessary and thus necessary to fulfill the respective performance obligations and will follow our instructions regarding this data. To ensure data protection-compliant processing, we have concluded a contract for order processing with our external service provider, who in turn has concluded such a contract with the host.

6 Storage of your data, in particular learning progress

6.1 We store your personal data for as long and to the extent necessary for the purposes specified in the respective section of this privacy policy.

6.2 Once the data is no longer required for the purposes specified in the respective section, we will retain your personal data for the period during which you can assert claims against us or we can assert claims against you (statutory limitation period of three years, beginning at the end of the year in which the claim arose, e.g., at the end of the year of purchase).

6.3 In addition, we store your personal data for as long as and to the extent that we are legally obliged to do so. Corresponding documentation and retention obligations arise, among other things, from the German Commercial Code, the German Fiscal Code, and the Money Laundering Act. The retention obligations are up to ten years in accordance with these provisions.

6.4 If you use our services via APP or LMS, we store your learning progress and completed certificates in connection with your username in our database. We also make this data available to your regional contract partner, who is the owner of your customer account through which you booked your courses, within the scope of contract fulfillment. We store your learning progress until we receive a request from you to permanently delete your access to the APP and your account. To delete your account, please contact us using the contact details provided in Section 1.

7 Objection or revocation of the processing of your data

7.1 We process your personal data in accordance with the above sections, where applicable, on the basis of our legitimate interests, in particular to ensure IT security and the provision of content in our APP, to adapt our APP to your needs, for customer support, and to assert, enforce, and defend our legal interests (including in court, if necessary), and to carry out internal administration efficiently and in a manner that allows for the division of labor. Information about the balancing of interests carried out by HYROX can be found at datenschutzbeauftragter@hyrox.com .

7.2 Notwithstanding the options for objection described in the sections above, you have the right to object at any time, on personal grounds, to the processing of your personal data based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. To do so, please send your objection to datenschutzbeauftragter@hyrox.com. We will then no longer process your data for this purpose or these purposes, unless our legitimate interests outweigh your interests or the processing serves to assert, exercise or defend legal claims.

7.3 If you object to data processing, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (legal basis: Art. 6 (1) lit. c GDPR).

8 Revocation of consent

8.1 If you have given us consent to process your personal data, you can revoke this consent at any time. The revocation of your consent is effective for the future. The lawfulness of the processing of your personal data until the time of revocation remains unaffected.

8.2 Unless otherwise described in the sections above regarding data processing based on your consent, please send your revocation to datenschutzbeauftragter@hyrox.com .

8.3 If you withdraw your consent, we will process your personal data collected in this context to respond to your request. This data processing is necessary to fulfill a legal obligation (Art. 6 (1) lit. c GDPR).

9 Changes to the privacy policy

9.1 The provisions of this privacy policy, including the cookie information on the HYROX 365 website, apply in the version valid at the time of use of the online shop.

9.2 We reserve the right to supplement and change the content of the privacy policy at any time. The updated privacy policy applies from the time it is published on our website. In the event of significant (material) changes to the privacy policy, in particular changes that affect the processing of your personal data already collected by us, we will inform you separately (e.g. by email).


Date: August 7th 2025