Privacy Policy

1. An Overview of Data Protection

General Information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” encompasses any information that can identify you personally. Detailed data protection information is available in the full Data Protection Declaration included with this policy.

Data Recording on This Website

Who is responsible for recording data?
The website operator processes data on this site. Contact details appear under “Information about the responsible party (referred to as the ‘controller’ in the GDPR).”

How is your data collected?
Data collection occurs when you actively provide information through contact forms, registration forms, or by logging workouts and race results. Additional data gets recorded automatically by IT systems or with your consent during site visits. This includes technical information like web browser type, operating system, and access times.

What are the purposes for using your data?
Some information ensures the website functions properly. Additional data helps analyze user patterns and deliver personalized training plans, workout recommendations, and HYROX-specific performance tracking.

What rights do you have?
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee. You can also request data correction or deletion. If you consented to processing, you can revoke that consent anytime. You have the right to restrict processing under certain circumstances and lodge complaints with supervisory agencies.

2. Hosting

External Hosting

This website uses external hosting. Personal data collected are stored on host servers, including IP addresses, contact requests, metadata, communications, contract information, names, web page access, fitness data, race results, workout logs, and other generated data.

External hosting fulfills contracts with customers (Art. 6(1)(b) GDPR) and supports secure, fast, efficient service delivery by professional providers (Art. 6(1)(f) GDPR).

Hosting providers used:

Vercel Inc. Service: Frontend hosting and application delivery. Data processed: User interface data, session information. Location: United States. Purpose: Hosts the web application frontend.

Supabase Inc. Service: Database hosting and storage. Data processed: User accounts, fitness data, race results, workout logs, training plans, performance metrics. Location: European servers. Purpose: Primary database for storing all application data.

3. General Information and Mandatory Information

Data Protection

The operators of this website and its pages take the protection of your personal data very seriously.

Information About the Responsible Party

The data processing controller is:

Zenon Technologies AG
Hinterbergstrasse 16
6312 Cham
Switzerland
Email: admin@roxbase.app

Storage Duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you request deletion or revoke consent, data gets deleted unless legal obligations require retention (tax or commercial law requirements).

SSL and/or TLS Encryption

The website uses SSL or TLS encryption to protect confidential content transmission. Encrypted connections display “https://” instead of “http://” with a lock icon in the browser.

4. Recording of Data on This Website

Cookies and Consent

Cookies are small data packages that do not cause any damage to your device. They are stored temporarily (session cookies) or permanently (permanent cookies). Cookies required for electronic communications, specific functions (login, workout tracking), or website optimization are stored under Art. 6(1)(f) GDPR.

When you first visit this website, a cookie consent banner asks whether you accept or reject non-essential cookies and tracking technologies. Your choice is stored in a cookie (roxbase_consent) and in your browser’s local storage for one year. No analytics or marketing scripts are loaded unless you actively consent. You can change your preference at any time via the “Cookie Settings” link in the website footer.

Contact Form

Contact form submissions get stored to handle inquiries and follow-up questions. Data processing is based on Art. 6(1)(b) GDPR if related to contract execution or pre-contractual measures. Otherwise, processing relies on legitimate interest in effective request handling (Art. 6(1)(f) GDPR).

Registration on This Website

Registration enables additional website functions. Entered data is used only for the registered service or offer. Registration data processes to implement the user relationship (Art. 6(1)(b) GDPR) and includes:

• Personal identification information (name, email address)
• Fitness assessment data you provide
• Race results and performance metrics
• Workout logs and training history
• Goal times and target race information
• Equipment availability preferences

5. Information We Collect and How We Use It

Fitness and Training Data

• Race Results: HYROX race times, splits, and performance data
• Fitness Assessment: Current fitness level, running pace, strength capabilities
• Workout Logs: Completed workout records, exercise performance, progress tracking
• Training Preferences: Available training days, equipment access, scheduling constraints
• Goal Information: Target race times, goal events, performance objectives

How We Use Your Data

• Provide and maintain training service
• Create personalized training plans based on fitness level and goals
• Track progress and adjust workouts
• Analyze performance and identify improvement areas
• Provide benchmark comparisons and performance insights
• Improve service and develop new features
• Communicate about training and service updates

Processing is based on Art. 6(1)(b) GDPR (contract fulfillment) and Art. 6(1)(f) GDPR (legitimate interest in effective training services).

6. Your Rights

Right to Access and Data Portability

You have the right to demand information about your archived personal data at any time. You can request data in a common, machine-readable format from us or a third party.

Right to Rectification and Erasure

You can request data correction or deletion. Contact us anytime with questions about personal data.

Right to Demand Processing Restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned.

7. Analysis Tools and Tracking

This website uses the following analysis and marketing tools, which are only activated after you give consent via the cookie banner. No data is transmitted to these providers until you click “Accept All.”

Google Tag Manager (GTM)

We use Google Tag Manager, a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). GTM is a tag management system that loads and manages other tracking scripts on the website. GTM itself does not set cookies or collect personal data, but it triggers other tags that may collect data. Use is based on Art. 6(1)(a) GDPR (your consent).

Google Analytics 4 (GA4)

This website uses Google Analytics 4, a web analytics service by Google. GA4 uses cookies and similar technologies to analyze how visitors use the website. Information generated about your use of the site (including your truncated IP address) is transmitted to Google servers. We use GA4 to evaluate website usage, compile activity reports, and improve our services. Data may be transferred to the United States; Google participates in the EU–U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR (your consent). You can revoke consent at any time via the “Cookie Settings” link in the footer.

8. Medical Disclaimer

The training plans and fitness advice provided by ROXBASE are for informational purposes only. Always consult with a qualified healthcare professional before starting any new exercise program. The company is not responsible for injuries or health issues from following training recommendations.

9. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. Material changes are communicated via email or through the service. Continued use constitutes acknowledgment of modifications.

10. Contact Us

For privacy policy questions, contact:

Zenon Technologies AG
Hinterbergstrasse 16
6312 Cham
Switzerland
Email: admin@roxbase.app