Legal
Privacy Policy
1. Controller
The party responsible for data processing on this website is:
BWG, Body World Group GmbH
Landshuter Str. 55
84030 Ergolding
Germany
Represented by the Managing Director:
Dr. Carsten Reimann
Email: info@apolifit.de
Phone: +49 (0)871 66075830
2. General information on data processing
We process personal data exclusively within the framework of the legal provisions of the General Data Protection Regulation (GDPR).
Personal data is any data with which you can be personally identified.
Unless a more specific retention period is mentioned in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies or statutory retention obligations exist.
3. Access data (server log files)
When you visit our website, information is automatically transmitted by your browser to our servers.
This includes in particular:
- IP address
- Date and time of the request
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
Processing is based on Art. 6 (1) (f) GDPR to ensure stable and secure operation of the website.
4. Hosting and website provision
Our website is provided via Lovable.
Personal data is processed for the purpose of providing and technically delivering the website.
The legal basis is Art. 6 (1) (f) GDPR.
5. Use of Shopify (online shop)
We use Shopify to operate our online shop.
Provider:
Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4
Ireland
In the context of orders, Shopify processes in particular:
- Name
- Address
- Email address
- Payment data
- Order data
- IP address
Processing takes place for contract performance pursuant to Art. 6 (1) (b) GDPR.
More information: https://www.shopify.com/legal/privacy
6. Orders and contract processing
To process your order, we process:
- First and last name
- Billing and shipping address
- Email address
- Phone number (optional)
- Payment information
- Order data
Processing takes place pursuant to Art. 6 (1) (b) GDPR.
7. Payment processing
Payment is made via the payment methods offered at checkout.
These include in particular:
- Credit card (Visa, Mastercard, American Express)
- Apple Pay / Google Pay / Shop Pay
- PayPal
Payment processing takes place via Shopify Payments and/or the selected payment service providers.
Processing takes place for contract performance pursuant to Art. 6 (1) (b) GDPR.
8. Contact form and email contact
If you contact us, we process:
- Name
- Email address
- Message
Processing is based on:
- Art. 6 (1) (b) GDPR (for contractual enquiries)
- Art. 6 (1) (f) GDPR (for general enquiries)
9. Newsletter (Shopify Email)
If you subscribe to our newsletter, we use your email address to send information about our products and offers.
The newsletter is sent via Shopify Email.
The following data is processed:
- Email address
- Name (if applicable)
- Open and click behaviour
Processing takes place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.
You can unsubscribe at any time (link in the newsletter or email to info@apolifit.de).
10. Cookies and consent management
Our website uses cookies.
Technically necessary cookies:
→ required for the operation of the website
(Legal basis: Art. 6 (1) (f) GDPR)
Analytics and marketing cookies:
→ only with consent
(Legal basis: Art. 6 (1) (a) GDPR, § 25 TDDDG)
You can revoke your consent at any time via the cookie settings.
11. Google Analytics 4
If you have given your consent, we use Google Analytics 4.
Provider:
Google Ireland Limited, Dublin
Google processes:
- Usage behaviour
- Device data
- IP address
Data may be transferred to the USA.
Legal basis: Art. 6 (1) (a) GDPR
More information: https://business.safety.google/privacy/
12. Meta Pixel (Facebook)
If you have given your consent, we use Meta Pixel.
Provider:
Meta Platforms Ireland Ltd.
Purpose:
- Analytics
- Conversion tracking
- Advertising
Legal basis: Art. 6 (1) (a) GDPR
More information: https://www.facebook.com/policy.php
13. Recipients of data
Recipients may include:
- Shopify
- Payment providers
- Shipping service providers
- Technical service providers
- Analytics and marketing providers (with consent)
14. Transfer to third countries
Data may be transferred to countries outside the EU (e.g. USA).
The transfer takes place in accordance with the GDPR (e.g. adequacy decision or appropriate safeguards).
15. Storage period
We only store data for as long as necessary or required by law.
16. Your rights
You have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of your consent
17. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
18. Changes
We reserve the right to update this privacy policy.
Last updated: April 2026
