Carlson Gracie Jiu-Jitsu Affoltern Logo

Privacy policy

This is a courtesy translation. Swiss law applies and the German version of this page is the legally binding one.

1. Introduction

Protecting your personal data matters to us. This privacy policy explains which personal data we process in connection with the use of our website and our services, for what purposes, and what rights you have.

We treat your personal data confidentially and in accordance with applicable Swiss data protection law and — where applicable — the General Data Protection Regulation of the European Union (GDPR).

2. Controller

The controller responsible for processing personal data is:

Company
BJJ Sports Life GmbH
Address
Zürichstrasse 128, 8910 Affoltern am Albis, Switzerland
Email
info@carlsongracie-affoltern.ch
Phone
+41 78 266 94 81

3. Scope

This privacy policy covers the processing of personal data in connection with our website and our services, in particular contact enquiries, trial classes, course registrations, memberships, seminars, events, holiday camps, online payments and our social media presence.

4. Applicable law

Personal data is processed primarily in accordance with the Swiss Federal Act on Data Protection (FADP / revFADP). Where the GDPR applies in an individual case, processing additionally follows its provisions. This website is aimed principally at users in Switzerland.

5. What data we process

Depending on how you use our website and services, we process in particular the following personal data:

  • Basic data (e.g. name, date of birth, gender, address)
  • Contact data (e.g. email address, telephone number)
  • Membership and course data (e.g. membership, booked courses, trial classes, attendance)
  • Communication data
  • Payment and invoicing data (card details are processed exclusively by our payment provider)
  • Technical data (e.g. IP address, browser type, operating system, device information and usage of our website)

6. How we obtain personal data

We receive personal data in particular when you visit our website, contact us, use our contact form, book a trial class or course, become a member, register for a seminar or holiday camp, make a payment, or communicate with us via social media.

7. Purposes of processing

We process personal data in particular to operate our website, organise our training programme, run trial classes, administer memberships, courses and events, communicate with prospective and existing members, issue invoices and process payments, improve our services, produce statistical analyses, ensure the security of our website, and comply with legal obligations. We process only the data required for the respective purpose.

8. Legal bases

Where the GDPR applies, processing is based in particular on your consent, on pre-contractual measures, on performance of a contract, on legal obligations, or on our legitimate interests. Our legitimate interests include the secure operation of our website, the organisation of our services, communication with our members and ensuring IT security.

9. Retention period

Personal data is stored only for as long as necessary for the respective purpose. Statutory retention obligations remain reserved. Once the relevant periods expire, personal data is deleted or anonymised.

10. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, manipulation and unauthorised access. The website is served exclusively over encrypted HTTPS.

11. Cookies

This website sets no tracking or marketing cookies. No cookies are used to recognise visitors. For that reason we require neither a cookie banner nor a consent management platform.

Only your language preference may be stored locally in your browser (local storage). That information never leaves your device and is not transmitted to us.

12. Hosting

Our website is hosted on Cloudflare Pages, operated by Cloudflare, Inc., and delivered via their global content delivery network. Hosting involves processing the data technically necessary to operate and secure the website.

Cloudflare may process personal data outside Switzerland and the European Economic Area. Such transfers are based on appropriate safeguards, in particular the standard contractual clauses approved by the European Commission.

13. Server log files

When you visit our website, technical information is recorded automatically. This includes in particular the IP address, date and time of access, browser type, operating system and information about the pages accessed. This data is processed solely to ensure technical operation, to analyse faults and to guarantee the security of our website. It is not combined with other data sources.

14. Audience measurement (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to analyse how our website is used. The service works without cookies and without fingerprinting. No profiles of individual visitors are created and no data is combined across different websites.

Only aggregated information is recorded, such as pages viewed, approximate region of origin, referring website and technical loading-performance metrics. This does not allow us to identify you.

15. BJJLINK

We use the BJJLINK platform to manage trial classes, memberships, courses and attendance. When you use our contact form or booking function you are directed to BJJLINK’s pages, and the data you enter there is processed by BJJLINK. Processing serves exclusively to run and administer our training operation.

16. Maps (OpenStreetMap)

Our contact page shows a preview map that is stored as an image file on our own server and was rendered from OpenStreetMap map data. Loading the page therefore establishes no connection to OpenStreetMap and transmits no data. Only when you activate the interactive map with a click is it loaded from OpenStreetMap’s servers, at which point your IP address is transmitted to OpenStreetMap.

17. Videos (YouTube)

Our media page shows a preview image that is stored as an image file on our own server. Loading the page establishes no connection to YouTube, transmits no data and sets no cookies. Only when you start the video with a click is it loaded through youtube-nocookie.com from servers operated by Google Ireland Limited, at which point your IP address and details of your device are transmitted to Google and cookies may be set. If you are signed in to Google at the time, the playback may be associated with your account.

18. International data transfers

Some of the services we use are operated by companies based in the USA or other countries outside Switzerland and the European Economic Area. Where personal data is transferred to such countries, this takes place on the basis of appropriate safeguards, in particular the standard contractual clauses or other mechanisms permitted under Swiss data protection law.

19. Your rights

Within the scope of applicable law, you have in particular the following rights:

  • Access to the personal data we process about you
  • Rectification of inaccurate data
  • Erasure of your data, unless a retention obligation applies
  • Restriction of processing
  • Data portability
  • Objection to processing
  • Withdrawal of consent with effect for the future

To exercise these rights, a message to info@carlsongracie-affoltern.ch is sufficient. You also have the right to lodge a complaint with the competent supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

20. Changes to this privacy policy

This privacy policy may be amended at any time. The version published on our website at the relevant time applies.

Last updated: 19 August 2026