PRIVACY POLICY
Last updated: 26 August 2026
- Controller
The person responsible for the processing of personal data on this website is:
Immanuel Knauer
NextGenerationGym – Project
Obere Schmiedstraße 5a
73433 Aalen
Germany
Email: manuel-k@gmx.de
Website: nextgenerationgym.com
NextGenerationGym is currently a fitness and wellness project in development for Dauis, Bohol, Philippines.
- General Information
We take the protection of personal data seriously.
This Privacy Policy explains what personal data may be processed when you visit this website, contact NextGenerationGym, join the Founding Member List or request information about the project.
Personal data means any information relating to an identified or identifiable individual.
We process personal data only where there is a legal basis to do so and only for the purposes described in this Privacy Policy.
- Website Hosting and Server Log Files
This website is hosted by:
Namecheap, Inc.
United States
The website currently uses Namecheap Shared Hosting with a server located in a United States data center.
When you access the website, technical information may automatically be recorded in server log files. This may include:
- IP address
- date and time of access
- requested page or file
- browser type and version
- operating system
- referrer information
- HTTP request and response information
- technical status and error information
This processing is necessary to deliver the website, maintain technical stability, detect errors and protect the website against misuse and attacks.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically correct operation of the website.
Namecheap acts as a hosting service provider and data processor. Because the hosting server is located in the United States, personal data may be processed outside the European Economic Area. Namecheap provides contractual safeguards for relevant international data transfers, including Standard Contractual Clauses where applicable.
Server log data is retained in accordance with the technical and security requirements of the hosting provider and deleted or rotated when it is no longer required for those purposes.
- Contact Form and Inquiries
The website uses Fluent Forms to provide the contact and membership inquiry form.
Depending on the information you provide, we may process:
- full name
- email address
- optional telephone number
- membership or inquiry category
- message content
- Founding Member interest
- consent or acknowledgement information
- source page
- technical submission information such as IP address, browser or device information
Form submissions are stored in the WordPress database hosted on our website server.
We use this information only to process and respond to your inquiry, provide requested information and manage legitimate pre-opening membership inquiries.
Where your inquiry concerns a possible future membership or other contractual relationship, processing is based on Article 6(1)(b) GDPR.
For general inquiries that do not relate to a potential contractual relationship, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to respond to communications relating to NextGenerationGym.
The required acknowledgement that you have read the Privacy Policy confirms that this information has been provided to you. It is not itself the legal basis for processing your inquiry.
- Founding Member List and Opening Updates
You may voluntarily choose to receive opening updates, membership news and information about the development of NextGenerationGym.
This requires a separate voluntary consent in the contact form.
If you provide this consent, we may use your name and email address to send you relevant NextGenerationGym information.
The legal basis is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by contacting:
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
If you do not select the optional update consent, your inquiry can still be processed, but your email address will not be used for general opening or membership marketing updates.
- Email Communication and GMX
Website emails and inquiries are currently transmitted using GMX.
GMX is a service of:
1&1 Mail & Media GmbH
Germany
When an email is sent or received, information such as the sender address, recipient address, date and time, subject, message content and technical delivery information may be processed by the email provider.
We use email processing to respond to inquiries, communicate with interested persons and manage project-related correspondence.
Depending on the nature of the communication, the legal basis is Article 6(1)(b), Article 6(1)(f) or, where applicable, Article 6(1)(a) GDPR.
- Email Delivery Logs
The website uses FluentSMTP to send WordPress emails through the configured GMX SMTP server.
FluentSMTP currently records outgoing email delivery logs for technical troubleshooting and delivery monitoring.
These logs may include information such as:
- recipient
- sender
- email subject
- delivery status
- email headers
- server response
- other technical delivery information
The email log retention period is currently configured to 14 days.
After this period, the logs are automatically deleted according to the current FluentSMTP configuration.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable email delivery, troubleshooting and protection against technical errors.
- Cookies and Consent Management
This website uses CookieAdmin to manage consent preferences.
Based on the current configuration, the website does not intentionally use analytical, advertising or marketing cookies.
No Google Analytics, Meta Pixel or comparable visitor tracking service is currently active.
The consent management mechanism may store a technically necessary preference in your browser in order to remember your consent selection.
Such technically necessary storage is used solely to provide the requested website and consent functionality.
If analytical, functional or advertising technologies are added in the future, they will not be intentionally activated without the required legal basis or consent, and this Privacy Policy will be updated accordingly.
- Security and Technical Protection
We use technical security measures to protect the website against unauthorized access, attacks and misuse.
Security systems may process technical information such as IP addresses and failed access attempts when this is necessary to detect or prevent attacks.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interest is the security and integrity of the website and its administrative systems.
- Website Performance and Caching
The website uses technical caching and performance optimization to improve loading speed, stability and efficient delivery of website content.
These functions are used for technical website operation and are not intentionally used to create visitor profiles or for advertising purposes.
- No Analytics or Advertising Tracking
At the time of the latest review, NextGenerationGym does not use:
- Google Analytics
- Google Ads tracking
- Meta/Facebook Pixel
- advertising profiling
- behavioural advertising tracking
- other comparable analytics or advertising systems
If this changes in the future, this Privacy Policy and the consent configuration will be updated before such technologies are intentionally used where required.
- Fonts
The website currently uses system fonts provided by the visitor’s operating system or device.
No externally selected Google Font is currently required for the normal display of the website.
This means that the website is not intentionally configured to contact Google Fonts servers simply to display its standard typography.
- External Media and Embedded Services
The website currently does not intentionally embed Google Maps, YouTube videos, Instagram feeds, Facebook feeds or comparable external media services.
If such services are introduced in the future, this Privacy Policy and the consent configuration will be updated where required.
- No Online Payments
The website currently does not process online payments.
Membership prices, Founding Member information and Day Pass information are provided for informational and pre-opening purposes.
No credit card, bank account or other payment information is currently collected through this website.
- No Automated Decision-Making or Profiling
We do not use personal data collected through this website for automated decision-making or profiling within the meaning of Article 22 GDPR.
- Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected.
The following criteria apply:
Contact and membership inquiries are retained for as long as necessary to process the inquiry, maintain relevant pre-opening communication or manage a legitimate prospective membership relationship.
Founding Member and opening update information is retained until consent is withdrawn or the purpose for which the information was collected no longer exists.
FluentSMTP email delivery logs are currently automatically deleted after 14 days.
Hosting and security logs are retained according to technical, security and hosting requirements.
Data may be retained for a longer period where required by law or where necessary to establish, exercise or defend legal claims.
When the respective purpose and any applicable retention requirements cease to apply, the data will be deleted.
- Recipients of Personal Data
Personal data is not sold.
Where necessary for the operation of the website and communication, information may be processed by service providers including:
Namecheap, Inc., as website hosting provider and data processor;
1&1 Mail & Media GmbH / GMX, as email service provider;
and technical service providers where their involvement is necessary for secure website operation.
Data is disclosed to authorities or other third parties only where required by law or where another lawful basis exists.
- International Data Transfers
The current website hosting infrastructure is located in the United States.
This means that certain website and technical data may be processed in the United States.
Where required under European data protection law, appropriate safeguards for international transfers are used, including contractual safeguards such as Standard Contractual Clauses.
The project is intended for future operation in the Philippines. If the location, legal entity, service providers or regular processing arrangements change as NextGenerationGym moves toward opening in the Philippines, this Privacy Policy will be updated accordingly.
- Your Rights Under the GDPR
Where the GDPR applies, you have the right to:
- request information about personal data processed about you
- request correction of inaccurate personal data
- request deletion of personal data where the legal requirements are met
- request restriction of processing
- receive personal data in a portable format where the legal requirements are met
- object to processing based on legitimate interests
- withdraw consent at any time with effect for the future
- lodge a complaint with a competent data protection supervisory authority
To exercise your rights, contact:
We may need to request reasonable information to verify your identity before fulfilling a request.
- Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing for reasons arising from your particular situation.
If personal data is processed for direct marketing purposes on the basis of your consent, you may withdraw your consent at any time.
- Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for our current location in Baden-Württemberg is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
Email: poststelle@lfdi.bwl.de
- Data Protection Rights in the Philippines
Where the Philippine Data Privacy Act of 2012 and related regulations apply, individuals may also have rights under Philippine data protection law.
These may include rights to be informed, access personal data, object to processing, correct inaccurate data, request erasure or blocking where legally applicable, exercise data portability rights and lodge a complaint with the National Privacy Commission of the Philippines.
We will take applicable Philippine data protection requirements into account as the NextGenerationGym project develops and operations move toward the Philippines.
- Data Security
We use reasonable technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.
However, internet-based data transmission can never be guaranteed to be completely secure.
- Changes to This Privacy Policy
This Privacy Policy reflects the current development stage and technical configuration of the NextGenerationGym website.
The policy may be updated if:
- new website functions are introduced
- analytics or advertising services are added
- payment functions are introduced
- external media or social media services are embedded
- hosting or email providers change
- NextGenerationGym begins regular operations in the Philippines
- the responsible business entity or address changes
- legal requirements change
The current version will always be published on this website.
Last updated: 26 August 2026