Privacy Policy
Your data is safe with us!
Privacy Policy
How We Handle Your Personal Data
We respect your privacy and are committed to handling personal data transparently, securely and in accordance with applicable data protection laws.
This Privacy Policy explains what personal data we process when you visit ems-training.com, why we process it, which service providers may receive it and what rights may be available to you.
Depending on your location, the processing of your personal data may be governed by the EU General Data Protection Regulation, the United Kingdom General Data Protection Regulation, the UK Data Protection Act 2018, applicable United States privacy laws or other applicable legislation.
1. Controller
The controller responsible for the processing of personal data through this website is:
ems-training.de services GmbH
Siemensstr. 1
86368 Gersthofen
Germany
Represented by: Jürgen Decker
Email: service@ems-training.com
The controller determines the purposes and means of processing personal data through ems-training.com.
2. Representative in the United Kingdom
For matters relating to the processing of personal data under the UK GDPR, our representative in the United Kingdom is:
miha bodytec EMS UK Ltd.
Suite 1, 7th Floor
50 Broadway
London SW1H 0BL
United Kingdom
Company number: 10487467
Email: uk-info@miha-bodytec.com
The UK representative acts as a contact point for individuals in the United Kingdom and for the UK Information Commissioner’s Office.
The controller remains ems-training.de services GmbH in Germany.
3. Technical Data and Server Log Files
When you visit ems-training.com, technical information is collected automatically to deliver the website, maintain its security and identify technical problems.
This information may include:
* IP address
* date and time of access
* requested pages and files
* browser type and version
* operating system
* referring website or URL
* hostname of the accessing device
* information about whether the request was completed successfully
This information may be stored temporarily in server log files.
For users in the European Economic Area and the United Kingdom, the legal basis is our legitimate interest in providing a secure, reliable and technically functional website under Article 6(1)(f) EU GDPR or Article 6(1)(f) UK GDPR.
4. Hosting
Our website is hosted using services provided by Fly.io, Inc.
In connection with hosting, technical access and server data may be processed where necessary to operate, deliver, protect and maintain the website.
Depending on the infrastructure configuration, data may be processed in Germany, the United Kingdom, the United States or other locations used by Fly.io and its authorised subprocessors.
Where Fly.io processes personal data on our behalf, the processing is governed by appropriate contractual data protection arrangements.
For users in the European Economic Area and the United Kingdom, the legal basis is our legitimate interest in securely and reliably operating the website under Article 6(1)(f) EU GDPR or Article 6(1)(f) UK GDPR.
Information about international transfers is provided in Section 16.
5. Cookie Consent Management
We use Cookiebot by Usercentrics to obtain, store and manage your choices concerning cookies and similar technologies.
Cookiebot may process information such as:
* your consent selection
* date and time of the selection
* consent identifier
* browser and device information
* IP-related technical information
* the domain on which consent was provided
Strictly necessary technologies may be used without consent where they are required to operate the website or record your privacy choices.
Analytics, advertising and other optional technologies are activated only where the required consent has been provided.
For users in the European Economic Area and the United Kingdom, consent records are processed to comply with applicable legal requirements and to document your privacy choices.
You may change or withdraw your consent at any time by selecting **Cookie Settings** in the footer of ems-training.com. Withdrawing consent does not affect processing that took place before the withdrawal.
6. Cookies and Similar Technologies
Cookies are small files stored on your device. Similar technologies may include pixels, tags, local storage and online identifiers.
We distinguish between:
* strictly necessary technologies
* analytics technologies
* advertising and conversion technologies
* external media and map technologies
Strictly necessary technologies support functions such as website security and consent management.
Optional technologies are used only after the required consent has been provided where applicable law requires consent.
Further information about individual cookies, providers, purposes and storage periods is available through **Cookie Settings** on ems-training.com.
7. Google Analytics
With your consent, we use Google Analytics to understand how visitors use ems-training.com and to improve the website’s technical structure, content and usability.
The service is provided by Google. Depending on your location, the relevant Google entity may be Google Ireland Limited or Google LLC.
Google Analytics may process information such as:
* pages visited
* approximate location
* device and browser information
* session duration
* website interactions
* referrer information
* IP-related technical information
* pseudonymous online identifiers
We use available privacy settings, including IP-related protection measures. However, these measures do not necessarily prevent all processing of personal data.
For users in the European Economic Area and the United Kingdom, the legal basis is your consent under Article 6(1)(a) EU GDPR or Article 6(1)(a) UK GDPR.
Google may process personal data in the United States and other countries. Appropriate transfer mechanisms are used where required.
You may withdraw your consent at any time through **Cookie Settings**.
8. Google Ads
With your consent, we use Google Ads technologies, including conversion measurement, to assess the performance of advertising campaigns and understand whether advertisements lead to visits or interactions on ems-training.com.
Google Ads may process information such as:
* cookie and device identifiers
* IP-related technical information
* browser information
* pages visited
* advertising interactions
* conversion events
* approximate location information
The information may be used to measure campaign performance and support the delivery of relevant advertising.
For users in the European Economic Area and the United Kingdom, the legal basis is your consent under Article 6(1)(a) EU GDPR or Article 6(1)(a) UK GDPR.
Google may process personal data in the United States and other countries. Appropriate transfer mechanisms are used where required.
You may withdraw your consent through **Cookie Settings**.
9. Meta Pixel
With your consent, we use the Meta Pixel to measure the effectiveness of advertisements displayed through Facebook and Instagram.
Depending on your location, the relevant service provider may be Meta Platforms Ireland Limited or Meta Platforms, Inc.
The Meta Pixel may process information such as:
* IP-related technical information
* browser and device information
* website interactions
* pages visited
* advertising identifiers
* conversion and event data
* cookie information
Meta may associate this information with a Facebook or Instagram account in accordance with its own terms and privacy information.
For users in the European Economic Area and the United Kingdom, the legal basis is your consent under Article 6(1)(a) EU GDPR or Article 6(1)(a) UK GDPR.
Meta may process personal data in the United States and other countries. Appropriate transfer mechanisms are used where required.
You may withdraw your consent through **Cookie Settings**.
10. Maps and Location Services
We use maps and location-related services to display Whole-Body EMS providers and help users identify providers in a selected area.
Depending on the page and your privacy settings, we may use:
* Google Maps
* Leaflet
* OpenStreetMap-based map data or map tiles
Leaflet is a software library used to display interactive maps. When map tiles or other content are loaded from an external provider, that provider may receive technical information such as your IP address, device information and the requested map area.
Google Maps may transfer information to Google servers, including servers in the United States or other countries.
Where consent is legally required, external map services are loaded only after consent has been provided.
For users in the European Economic Area and the United Kingdom, the legal basis for optional external map services is your consent under Article 6(1)(a) EU GDPR or Article 6(1)(a) UK GDPR.
You may withdraw your consent through **Cookie Settings**.
11. Provider Profiles and Google Business Information
We maintain profiles of Whole-Body EMS providers to help users find and compare professional providers.
Provider profiles may be supplemented with information made available through Google Business Profile services, directly by the relevant provider or through other publicly accessible business sources.
This information may include:
* business name
* business address
* telephone number
* website
* opening hours
* business category
* images
* ratings and reviews
* location information
* other publicly available business details
Most provider information relates to a business rather than an individual. However, information concerning sole traders, named owners, employees or business representatives may constitute personal data.
We process this information to:
* maintain useful and accurate provider listings
* help users find Whole-Body EMS providers
* improve transparency about provider services
* keep location, opening-hour and contact information current
For users in the European Economic Area and the United Kingdom, the legal basis is our legitimate interest in operating an accurate and informative provider directory under Article 6(1)(f) EU GDPR or Article 6(1)(f) UK GDPR.
Providers and affected individuals may contact us to request the correction, updating or removal of information.
The inclusion of a provider profile does not constitute an endorsement, certification or guarantee by ems-training.com.
12. Contacting an EMS Provider
ems-training.com does not operate a contact form for inquiries to listed EMS providers.
When you select an email contact option, an email link opens in the email application configured on your device. You decide whether to compose and send the message.
The email is sent directly from you to the selected provider. ems-training.com does not receive or store the content of the email unless:
* you separately send the message to us;
* you include us as an additional recipient; or
* the provider subsequently shares the message with us under a separate legal basis.
The selected provider is independently responsible for processing the personal data contained in your email.
Your email provider and the recipient’s email provider process the message under their own terms and privacy policies.
13. Contacting Us
When you contact us by email, we process the information you provide, which may include:
* your name
* email address
* company or organisation
* subject of the inquiry
* message content
* attached documents
* other information you voluntarily provide
We process this information to respond to your inquiry and handle the matter you have raised.
For users in the European Economic Area and the United Kingdom, the legal basis may be:
* Article 6(1)(b) EU GDPR or UK GDPR where the inquiry relates to a contract or steps requested before entering into a contract;
* Article 6(1)(f) EU GDPR or UK GDPR where processing is necessary to respond to a general inquiry; or
* Article 6(1)(c) EU GDPR or UK GDPR where processing is required to comply with a legal obligation.
Emails are retained only for as long as necessary to handle the inquiry and comply with applicable legal retention requirements.
Please do not send health information or other sensitive personal data unless it is necessary for your inquiry.
14. Social Media Links
ems-training.com may contain links to our profiles on Facebook, Instagram and other social media services.
These are standard external links. Merely visiting ems-training.com does not cause data to be transmitted through these links to the relevant social media platform.
When you select a link and visit an external platform, that platform may process personal data under its own privacy policy. We do not control how the external platform processes that information.
## 15. Recipients of Personal Data
Depending on the services you use and your privacy choices, personal data may be processed by or disclosed to:
* hosting and infrastructure providers
* consent-management providers
* analytics providers
* advertising and conversion-measurement providers
* map and location-service providers
* IT support and security providers
* professional advisers
* public authorities where disclosure is legally required
* other recipients where you have requested or consented to the disclosure
Service providers acting on our behalf receive only the information required to perform the relevant service and are required to process it in accordance with applicable data protection requirements.
Some analytics, advertising and platform providers may process data as independent controllers or, depending on the processing activity, together with us as joint controllers.
16. International Data Transfers
Some service providers or their affiliated companies may process personal data outside Germany, the European Economic Area or the United Kingdom, including in the United States.
Where applicable law requires a transfer mechanism, transfers may be based on:
* an adequacy decision issued by the European Commission or the UK government;
* participation by the recipient in the EU-US Data Privacy Framework or its UK Extension, where applicable;
* standard contractual clauses approved by the European Commission;
* the UK International Data Transfer Agreement or UK Addendum;
* binding corporate rules; or
* another legally recognised safeguard or exception.
Where reliance is placed on an adequacy decision or certification framework, this applies only if the relevant recipient and processing activity are covered by that mechanism.
You may contact us for further information about the safeguards used for a particular transfer.
17. Storage and Retention
We retain personal data only for as long as necessary for the relevant purpose or as required by law.
The applicable retention period depends on:
* the purpose for which the information was collected
* the type and sensitivity of the information
* technical and security requirements
* contractual requirements
* applicable limitation periods
* tax, commercial or regulatory retention obligations
* whether the information is needed to establish, exercise or defend legal claims
Server logs are deleted or anonymised when they are no longer needed for operation, security or abuse prevention.
Consent records may be retained for as long as necessary to demonstrate compliance with privacy and cookie requirements.
Analytics and advertising data is retained according to the settings configured in the relevant service and your consent choices. The current retention periods of cookies and similar technologies are shown in **Cookie Settings**.
Provider information is retained while the listing remains relevant, unless correction or deletion is required.
18. Data Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.
These measures may include:
* encrypted transmission
* access restrictions
* authentication controls
* security updates
* backups
* technical monitoring
* contractual controls for service providers
No method of internet transmission or electronic storage can be guaranteed to be completely secure.
19. Automated Decision-Making and Profiling
We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects for website visitors.
Analytics and advertising technologies may be used to create audience segments, measure advertising performance or support the delivery of relevant advertising.
For users in the European Economic Area and the United Kingdom, these optional technologies are used only after the required consent has been provided.
20. Rights of Users in the EEA and United Kingdom
Subject to applicable legal requirements and exceptions, users in the European Economic Area and the United Kingdom may have the right to:
* request information about the processing of their personal data;
* request access to their personal data;
* request correction of inaccurate or incomplete information;
* request erasure of personal data;
* request restriction of processing;
* receive certain personal data in a structured, commonly used and machine-readable format;
* object to processing based on legitimate interests;
* withdraw consent at any time;
* object to direct marketing;
* request information about international transfer safeguards;
* lodge a complaint with a competent supervisory authority.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Object
Where we process personal data on the basis of legitimate interests, you have the right to object to that processing on grounds relating to your particular situation.
We will stop processing the information unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required to establish, exercise or defend legal claims.
Where personal data is processed for direct marketing purposes, you may object at any time.
Complaints in the United Kingdom
Users in the United Kingdom may odge a complaint with:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
You may also contact our UK representative using the details provided in Section 2.
Complaints in the European Economic Area
Users in the European Economic Area may contact the supervisory authority responsible for their place of residence, place of work or the location of the alleged infringement.
21. Privacy Information for United States Residents
Privacy rights in the United States vary by state and may apply only where the relevant law and its statutory requirements apply to us and to the relevant processing activity.
Where applicable, residents of certain US states may have rights to:
* confirm whether we process their personal data;
* access personal data held about them;
* request correction of inaccurate information;
* request deletion of personal data;
* obtain a portable copy of certain personal data;
* opt out of the sale of personal data;
* opt out of sharing for cross-context behavioural advertising;
* opt out of targeted advertising;
* opt out of certain profiling activities;
* appeal a decision concerning a privacy request;
* receive equal service and not be unlawfully discriminated against for exercising privacy rights.
Categories of Personal Data
Depending on your use of the website and your privacy choices, we may process the following categories of personal data:
* online identifiers, including IP addresses and cookie identifiers;
* internet or electronic network activity, including pages viewed and interactions;
* approximate location derived from technical information;
* device and browser information;
* business contact information contained in provider profiles;
* information you voluntarily provide when contacting us.
We process these categories for the purposes described in this Privacy Policy, including website operation, security, analytics, advertising measurement, provider search and communication.
Sale, Sharing and Targeted Advertising
We do not sell personal data in exchange for money.
Our use of Google Ads, Google Analytics and Meta technologies may be considered a sale, sharing, cross-context behavioural advertising or targeted advertising under certain US state privacy laws, even where no money is exchanged for the data.
You may reject or disable optional analytics and advertising technologies through **Cookie Settings** on ems-training.com.
Where an applicable US state law requires additional opt-out methods, we will provide and implement those methods as required.
Sensitive Personal Data
ems-training.com does not operate a provider contact form and does not ask visitors to submit medical diagnoses or health information through the provider finder.
Provider inquiries are sent directly through the user’s own email application to the selected provider.
Please avoid sending sensitive personal data, including detailed health information, directly to us unless it is necessary for a specific inquiry.
Exercising US Privacy Rights
Where an applicable US privacy law grants you a relevant right, you may submit a privacy request using the following contact details:
Email: [service@ems-training.com](mailto:service@ems-training.com)
Postal address:
ems-training.de services GmbH
Siemensstr. 1
86368 Gersthofen
Germany
Please describe your request and identify the US state in which you reside.
We may need to verify your identity before completing certain requests. Information provided for verification will be used only to process and document the request.
Where permitted by law, an authorised agent may submit a request on your behalf. We may require evidence of the agent’s authority and may ask you to confirm the request directly.
Where applicable law provides a right to appeal a denied request, you may submit the appeal using the same contact details and clearly mark it as a privacy appeal.
22. Children’s Privacy
ems-training.com is a general information platform intended for adults interested in professional Whole-Body EMS Training. It is not directed to children under the age of 13.
We do not knowingly collect personal data directly from children under 13 through registration forms, customer accounts or provider contact forms.
Parents or legal guardians who believe that a child has provided personal data directly to us may contact us at [service@ems-training.com](mailto:service@ems-training.com).
23. Changes to This Privacy Policy
We may update this Privacy Policy when:
* website functions change;
* service providers change;
* data-processing activities change;
* legal or regulatory requirements change;
* new technologies or services are introduced.
The current version will be published on ems-training.com with an updated revision date.
Where required by law, we will provide additional notice before making material changes to how previously collected personal data is used.
24. Privacy Contact
For questions, correction requests, objections or other privacy-related inquiries, please contact:
ems-training.de services GmbH
Siemensstr. 1
86368 Gersthofen
Germany
Email: service@ems-training.com
Users in the United Kingdom may also contact:
miha bodytec EMS UK Ltd.
Suite 1, 7th Floor
50 Broadway
London SW1H 0BL
United Kingdom
Company number: 10487467
Email: uk-info@miha-bodytec.com
Last updated: August 2026
©2026 www.ems-training.com
Made with ❤️ in Gersthofen