This notice explains how we process data when you visit this marketing website or contact us about LUTZI GYM Tracker.
This notice applies to the LUTZI GYM Tracker marketing pages at lutzi-gym-tracker.de and, where these pages are provided there, prodara.de/gym/. The member app and studio portal have separate privacy notices supplied by the gym.
prodara GmbH, Steiler Weg 3, 57368 Lennestadt, Germany.
Represented by managing director Luca C. Lupo.
Phone: +49 2721 9839140
Email: info-website@prodara.de.
Further provider details are in our legal notice.
Subject to the statutory conditions, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Art. 21(1)). We then stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves legal claims. You may object to processing for direct marketing at any time (Art. 21(2)).
If processing is based on consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before it was withdrawn.
To exercise your rights, contact info-website@prodara.de. We normally provide information free of charge and respond without undue delay, at the latest within one month of receiving your request. Where necessary because of the complexity or number of requests, this period may be extended by two further months; we will inform you and explain why within the first month. The statutory exceptions in Art. 12 GDPR apply.
You may lodge a complaint with a supervisory authority, in particular where you live, work or believe an infringement occurred. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany: www.ldi.nrw.de.
Our website and email services are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers used for these services are in Germany. Hetzner processes data on our behalf under Art. 28 GDPR.
When you open a page, technical connection data is processed, including your IP address, access time, requested URL, response status and transferred data volume, as well as browser and operating-system information and the referring page where transmitted. Server logs help us deliver the website, investigate errors and detect misuse.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is secure and reliable website operation.
Retention: server logs are deleted after 30 days. If individual entries are needed to investigate a specific security incident or assert or defend legal claims, those entries may be retained until that purpose is fulfilled; the legal basis is Art. 6(1)(f) GDPR.
These marketing pages do not use cookies for analytics or advertising. When you select a light or dark theme, your browser stores that preference in local storage under gt-theme. On later visits, the page reads it to restore your chosen theme.
The value is light or dark, contains no personal identifier and is not sent to us. It remains until you change it or clear your browser’s website data. Storage and access serve the theme you requested and are based on § 25(2) no. 2 TDDDG.
The form collects your name and email address as required fields, an optional phone number and the language of the enquiry. We use these details to handle your request and arrange a demo. The name helps us address and assign your enquiry; we need a contact method to reply. You may also contact us directly by email or phone.
An additional field in the form is intended for automated spam detection. It is not intended for visitors to complete. The form contents and technical connection data may be processed to prevent misuse; this is based on Art. 6(1)(f) GDPR and our legitimate interest in protecting our contact channel.
Legal basis: where you enquire about a contract for yourself as a sole trader, Art. 6(1)(b) GDPR applies to pre-contractual steps at your request. If you act for a company or send another business enquiry, processing is based on Art. 6(1)(f) GDPR; our legitimate interest is handling business communications. No separate consent to this privacy notice is required to send an enquiry.
Retention: demo enquiries are deleted 30 days after receipt. Where particular documents are subject to a statutory retention obligation, we keep only those documents for the required period under Art. 6(1)(c) GDPR. Depending on the document, §§ 257 HGB and 147 AO generally require six years for business correspondence, eight years for accounting vouchers and ten years for books and annual accounts. The period generally starts at the end of the relevant calendar year; statutory extensions may apply. Such documents are not retained for marketing purposes.
We do not use your demo enquiry to subscribe you to newsletters or send unsolicited advertising. Providing data is neither a statutory nor a contractual obligation. Without contact details we cannot reply.
Email is not necessarily end-to-end encrypted. Please do not send health information or other particularly sensitive data with a demo enquiry.
These pages do not integrate advertising trackers, analytics services, third-party video players or social-media widgets. Fonts and screenshots are loaded from our own website. An external website is contacted if you follow a link to it; its own privacy notice then applies.
We do not make decisions about you based solely on automated processing with legal or similarly significant effects under Art. 22 GDPR.
Within our company, access is limited to people who need the data to handle enquiries or operate the website. Hetzner receives data as our hosting and email provider. Authorities, courts or professional advisers may receive information where a legal duty or the establishment, exercise or defence of legal claims requires it. The applicable legal basis is Art. 6(1)(c) or (f) GDPR.
We do not sell your data for advertising. We use the hosting and email infrastructure in Germany described above. If you ask us to reply to your email address, delivery also involves your chosen email provider.
Connections to the website use TLS encryption (HTTPS). We use technical and organisational safeguards to protect data from unauthorised access, loss and alteration. No transmission or storage system can guarantee absolute security.
The gym using the service is responsible for its member-data processing. Where prodara GmbH hosts or otherwise processes that data on its behalf, we act as a processor under Art. 28 GDPR. Each gym has a separate database. The gym’s privacy notice describes the purposes, legal bases, recipients, retention and optional functions actually used.
Members can find their gym’s privacy notice in the app under Profile → Privacy policy. Please address requests about studio training data to your gym; we can help you reach the right contact. The app’s local “without a gym” mode does not synchronise those workouts with a studio server.
We update this notice when processing or applicable requirements change.
This English version is provided for convenience. If the versions differ, the German wording is the reference version. Your statutory rights are unaffected.
Last updated: 7 September 2026 · Legal notice