Wir sind im Pre-Launch – der Verkauf startet bald. Sichere dir 15%.

Trag deine E-Mail ein und erhalte zum Launch 15% Rabatt – 72 Stunden gültig und exklusiv für alle, die sich jetzt vormerken lassen.

Mit deiner Anmeldung meldest du dich zum GYMMONKY Pre-Launch-Newsletter an. Du erhältst Informationen zum Launch, deinen 15%-Rabatt und ausgewählte GYMMONKY-News. Du kannst dich jederzeit über den Abmeldelink in jeder E-Mail abmelden. Details findest du in unserer Datenschutzerklärung .

Privacy policy

Stolvations GmbH – www.gymmonky.ch
Status: June 2026 | Version 1.0

Important note: This English version is provided for convenience only. In the event of any discrepancies, ambiguities or conflicts between the German version and this English translation, the German version shall prevail.

This Privacy Policy applies to our online shop at www.gymmonky.ch and to the processing of personal data of users in Switzerland. A separate Privacy Policy applies to users in the European Economic Area and/or the EU. Your personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP, SR 235.1) in the version applicable since September 1, 2023.

1. Controller

Stolvations GmbH
Rütistrasse 10
CH-8952 Schlieren
Switzerland
E-mail: support (at) gymmonky.com
UID: CHE-151.868.802

2. Principles of Data Processing

We process personal data in accordance with the principles set out in Art. 6 FADP: lawfully, in good faith, proportionately and transparently. Personal data is retained only for as long as necessary for the respective purpose or for as long as statutory retention obligations apply.

Your personal data is processed on the following bases:

  • Consent (Art. 6 para. 6 FADP): e.g. for marketing cookies and newsletters
  • Performance of a contract: e.g. for order processing, shipping and customer accounts
  • Legal obligation: e.g. retention obligations under tax and commercial law
  • Overriding legitimate interest: e.g. for website operation and security – the specific interest pursued is stated below for the respective processing activity.

Where cookies or similar technologies are stored on or read from your device, Art. 45c of the Swiss Telecommunications Act (TCA) applies.

3. Data Collection When Visiting Our Website

3.1 Server Log Files

When you access our website, technical access data is processed by our shop and hosting provider Shopify, in particular IP address, date and time of access, pages accessed, browser, operating system, referrer URL and status codes. This data is necessary to technically provide the website and ensure its security.

Purpose and basis of processing: Overriding legitimate interest in the technically error-free operation and security of the website.
Retention: Up to 7 days.

3.2 Consent Management (Consentmo)

We use Consentmo (Consentmo Ltd., Sofia, Bulgaria / EU) to manage cookie consents. Consentmo stores your consent decisions as well as technical log data, in particular consent ID, timestamp and consent status, for documentation purposes. Consentmo loads when the website is first accessed and does not itself require consent, as it is technically necessary for fulfilling our legal obligations.

Purpose and basis of processing: Legal obligation.
Consentmo Privacy Policy: consentmo.com/privacy-policy

3.3 Cookies

We use cookies and similar technologies in accordance with the FADP and Art. 45c TCA. Non-essential cookies are only set with your consent.

  • Technically necessary cookies: Required for shop operation, such as shopping cart, checkout and security. No consent is required.
  • Analytics cookies: Only with your consent.
  • Marketing cookies: Only with your consent.

You can adjust or withdraw your cookie consents at any time via our cookie banner.

4. Orders, Customer Account and Contract Processing

4.1 Order Data

To process your order, we collect: first and last name, delivery and billing address, e-mail address, payment information and order history. Without this information, we cannot perform the contract.

Purpose and basis of processing: Performance of a contract; statutory retention obligations.
Retention: 10 years (Art. 958f Swiss Code of Obligations).

4.2 Customer Account

If you create or use a customer account, we process the data required for this purpose, in particular name, e-mail address, addresses, order history and account settings. You may request deletion of your customer account at any time by e-mail to support (at) gymmonky.com. Statutory retention obligations for order and invoice data remain unaffected.

Purpose and basis of processing: Performance of a contract.
Retention: Until deletion or after 3 years of inactivity.

4.3 Shop System (Shopify)

Our online shop is operated via Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, Ireland. Shopify processes personal data on our behalf to provide the shop system, hosting, checkout and order management. Shopify may process personal and order data in Switzerland, the EEA, the United Kingdom and, through affiliated Shopify companies and subprocessors, also in other countries, in particular Canada, which has an adequate level of data protection according to a decision of the Swiss Federal Council, and the United States under the Swiss-U.S. Data Privacy Framework. We have entered into a data processing agreement with Shopify.

Shopify Privacy Policy: shopify.com/legal/privacy

4.4 Shipping (Swiss Post)

We use Swiss Post Labels (Die Schweizerische Post AG, Wankdorfallee 4, 3030 Bern) to ship our products. For this purpose, we transmit the customer’s name and delivery address to create shipping labels.

Purpose and basis of processing: Performance of a contract, namely delivery.

4.5 Payment Processing

Depending on the selected payment method, payment service providers process payment data partly as independent controllers. We do not receive complete card or bank details.

  • Credit card / Shop Pay / Apple Pay / Google Pay: Processing is carried out via Shopify Payments. Supported payment methods include Shop Pay, Visa, Mastercard, American Express, UnionPay, Apple Pay and Google Pay. Shopify companies and Stripe companies may be involved. Privacy Policy: stripe.com/privacy
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Privacy Policy: paypal.com/privacy
  • Advance payment / bank transfer: If you choose advance payment, you transfer the amount independently via your bank to our business account. We receive the information required to allocate the payment. Processing is carried out by the relevant payment or credit institution, which acts as an independent controller in this respect.

Purpose and basis of processing: Performance of a contract.

5. Newsletter and Marketing Communication (Klaviyo)

For sending newsletters, marketing and automated e-commerce e-mails, we use Klaviyo Inc., 125 Summer St, Floor 6, Boston, MA 02111, USA. Through Klaviyo, we send in particular newsletters, marketing e-mails, abandoned cart reminders, product recommendations, post-purchase e-mails, reactivation e-mails and other automated e-commerce communications. We also use Klaviyo for segmentation based on purchasing and usage behavior and for analyzing open and click rates.

Data transfers to the United States are carried out on the basis of the Swiss-U.S. Data Privacy Framework, where the respective U.S. recipient is certified accordingly, as well as Standard Contractual Clauses (SCCs) pursuant to Art. 16 para. 2 lit. d FADP. We have entered into a data processing agreement with Klaviyo.

We send promotional e-mails only with your consent using a double opt-in procedure. The registration is logged. You can withdraw your consent at any time via the unsubscribe link in our e-mails or by e-mail to support (at) gymmonky.com.

E-mail tracking: Our e-mails may contain pixels that tell us whether and when an e-mail was opened or a link was clicked. This only takes place with your consent.

Purpose and basis of processing: Consent (Art. 6 para. 6 FADP). We send promotional e-mails only with consent or within the scope of the existing customer exception pursuant to Art. 3 para. 1 lit. o of the Swiss Unfair Competition Act (UCA, SR 241), provided you have not objected to such use and an easy, free unsubscribe option is available.
Retention: Until you unsubscribe.
Klaviyo Privacy Policy: klaviyo.com/legal/privacy-policy

6. Product Reviews (Judge.me)

We use Judge.me (Judge.me Ltd, C/O Buckworths, 2nd Floor, 1-3 Worship Street, London EC2A 2AB, United Kingdom) to manage customer reviews. Judge.me may send review request e-mails on our behalf. We send promotional e-mails only with your consent or within the scope of an existing customer relationship for similar goods, provided you have not objected to such use.

You may object to the use of your e-mail address for review requests at any time by e-mail to support (at) gymmonky.com.

We have entered into a data processing agreement with Judge.me.

Purpose and basis – review requests: Consent or legitimate interest within the scope of the customer relationship.
Purpose and basis – display of reviews: Legitimate interest in the transparent presentation of customer experiences.
Judge.me Privacy Policy: judge.me/privacy

7. Contacting Us

If you contact us by e-mail or contact form, we process your information to handle your request.

Purpose and basis of processing: Performance of a contract or legitimate interest in handling customer inquiries.
Retention: 3 years.

8. Tracking and Advertising

The following tracking tools are activated exclusively after your express consent via our cookie banner (Art. 45c TCA, Art. 6 para. 6 FADP). You may withdraw your consent at any time via the cookie banner.

8.1 Google Analytics 4

Web analytics service provided by Google Ireland Limited, Dublin. IP anonymization is activated. Data is stored on Google servers in the United States. Google is certified under the Swiss-U.S. Data Privacy Framework.

Purpose and basis of processing: Art. 45c TCA, consent (Art. 6 para. 6 FADP).
Retention: 14 months.
Opt-out: tools.google.com/dlpage/gaoptout | Privacy Policy: policies.google.com/privacy

8.2 Google Ads (Conversion Tracking)

We use Google Ads to place advertisements and measure conversions (Google Ireland Limited, Dublin). Google is certified under the Swiss-U.S. Data Privacy Framework.

Purpose and basis of processing: Art. 45c TCA, consent (Art. 6 para. 6 FADP).
Privacy Policy: policies.google.com/privacy

8.3 Meta Pixel (Facebook/Instagram)

Service provided by Meta Platforms Ireland Limited, Dublin. It enables conversion tracking and retargeting. Meta is certified under the Swiss-U.S. Data Privacy Framework. For further transfers, SCCs pursuant to Art. 16 para. 2 lit. d FADP apply.

For certain processing activities, Meta and we act as joint controllers. You may exercise your data subject rights both against us and directly against Meta.

Purpose and basis of processing: Art. 45c TCA, consent (Art. 6 para. 6 FADP).
Retention: Up to 180 days.
Meta Privacy Policy: facebook.com/privacy/policy

8.4 TikTok Pixel

Service provided by TikTok Technology Limited, Dublin. It enables conversion tracking and retargeting. Data transfers to third countries are carried out on the basis of SCCs pursuant to Art. 16 para. 2 lit. d FADP.

For certain processing activities, TikTok and we act as joint controllers.

Purpose and basis of processing: Art. 45c TCA, consent (Art. 6 para. 6 FADP).
Retention: Up to 13 months.
TikTok Privacy Policy: tiktok.com/legal/privacy-policy

9. Social Media Presence and User Generated Content

We maintain profiles on the following social networks. The platform operators process your data in accordance with their own privacy policies.

Purpose and basis of processing: Legitimate interest in brand presentation and customer communication.

User Generated Content (UGC): If we republish customer content on our channels or on our website, we obtain express consent beforehand. In this context, we process the public username, the content of the post and the documentation of the consent. Consent may be withdrawn at any time; content already published will be removed without undue delay.

Purpose and basis – UGC: Consent (Art. 6 para. 6 FADP).

10. “HangWithGYMMONKY” Challenge

As part of our “HangWithGYMMONKY” Challenge, we process: public social media username, submitted posts/videos, communication data and, in the event of winning, name, contact details and payment details (TWINT or PayPal) for prize processing.

Purpose and basis of processing: Performance of a contract, namely the terms and conditions of participation, as well as consent to use the submitted post on our channels.
Retention: Data of participants who are not selected will be deleted after completion of the Challenge. Winner data will be retained in accordance with statutory retention obligations for 10 years.

Full terms and conditions of participation: Terms and Conditions HangWithGYMMONKY

11. Disclosure of Data and International Transfers

We disclose personal data only to:

  • shipping service providers, such as name and address, for delivery
  • payment service providers for payment processing
  • technical service providers acting as processors
  • authorities, where required by law

We do not sell personal data to third parties.

International transfers: Some service providers are located outside Switzerland. Transfers are made only on the basis of appropriate safeguards:

  • adequacy decision of the Swiss Federal Council, e.g. EU/EEA, Canada
  • Swiss-U.S. Data Privacy Framework, where the respective U.S. recipient is certified accordingly, for the United States
  • Standard Contractual Clauses (SCCs) pursuant to Art. 16 para. 2 lit. d FADP

12. Retention Periods

  • Order, invoice and payment data: 10 years (Art. 958f Swiss Code of Obligations)
  • Customer account: Until deletion or after 3 years of inactivity
  • Newsletter data: Until you unsubscribe
  • Support inquiries: 3 years
  • Analytics and marketing cookies: According to the information provided by the respective service provider
  • Server log files: Up to 7 days

13. Automated Decision-Making

We do not use automated decision-making processes that have legal or similarly significant effects on you (Art. 21 FADP).

14. Data Security

We take appropriate technical and organizational measures to protect your personal data in accordance with Art. 8 FADP, in particular SSL/TLS encryption, recognizable by “https”, access controls and regular security checks.

15. Your Rights

Under the FADP, you have the following rights:

Within the scope of applicable data protection law, you have in particular the following rights:

  • Access (Art. 25 FADP): Access to your stored personal data, purposes, recipients and origin.
  • Rectification: Correction of inaccurate data or completion of incomplete data.
  • Deletion/destruction: Deletion of your data, unless statutory retention obligations prevent this.
  • Restriction or prohibition of certain processing activities.
  • Data disclosure/portability (Art. 28 FADP): Disclosure in a commonly used electronic format.
  • Withdrawal of consent: At any time with effect for the future, without affecting the lawfulness of processing carried out prior to withdrawal.

We usually respond to requests within 30 days free of charge.
Contact: support (at) gymmonky.com

16. Right to Lodge a Complaint

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):
Feldeggweg 1, CH-3003 Bern
www.edoeb.admin.ch

17. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy where necessary. The date of the last update and the version number are stated above.

© 2026 Stolvations GmbH – All rights reserved
Status: June 2026 | Version 1.0