Privacy policy

1. Introduction

Booking Board ApS ("Booking Board ApS", "we", "us" or "our") is committed to protecting the privacy, confidentiality, and integrity of our customers, suppliers, business partners, and employees' information, including personal information.

We are strongly committed to protecting personal data and work continuously to ensure ongoing compliance with data protection legislation, including the Data Protection Regulation.

For this Policy, we use the term 'personal data' broadly, meaning information related to an identified natural person or that could reasonably be used (by itself or in combination with other data reasonably available) to identify a natural person.

Through this Privacy Policy, we aim to inform you about the types of personal data we collect from users, the purposes for which we use the data, and the ways in which the data is handled. We also aim to satisfy the obligation of transparency under the EU General Data Protection Regulation 2016/679 ('GDPR') and national laws implementing GDPR.

We will ensure that the information you submit to us, or which we collect, via various channels (including our website, through written correspondence (including email), or through any of our offices or websites globally) is only used for the purposes intended.

When Booking Board ApS, in connection with the provision of our services, processes personal data from our customers' users/clients, the processing in these cases will take place according to our customers' instructions and on behalf of the customer.

In these cases, Booking Board ApS will act as the data processor. We ensure that we enter into a written Data Processor Agreement with our customer, containing instructions and terms for Booking Board ApS's processing of personal data. See the Data Processing Agreement for details.

2. Our Processing Activities

The collected personal information varies depending on the instructions we are given and will therefore depend upon the nature of the services provided. We may collect or obtain information that includes:

Contact details (e.g., name, address, email, telephone number, which may include third-party emergency contact information)
Personal details (e.g., date of birth, nationality)
Financial and transaction data (e.g., purchase history, account information, billing information, credit card information, etc.)
Other service-related data (e.g., customer requests, statistics, etc.)
Fitness and activity data (e.g., exercise results, workout logs, training program progress, class attendance records)
Geolocation data (e.g., geolocation data sent via a mobile device)
Online identifiers (e.g., IP address, device IDs, etc.)
Cookie-related data as described below

Our website uses cookies to improve your experience when navigating the website. Some cookies are necessary for basic usage and are stored within your browser.

Other cookies are third-party cookies that help us analyze and understand how you use our website. These cookies will be stored in your browser only with your consent. You have the option to opt out of these cookies, but opting out may affect your browsing experience and some functionalities may not work correctly.

3. Health and Fitness Data

Our application is used by fitness and wellness facilities and may collect and process fitness-related data as part of its core functionality. This section describes what fitness data we collect, how it is used, and how it is protected.

3.1 What Fitness Data We Collect

When you use our mobile application or services provided by your facility, we may collect the following fitness-related data on behalf of your facility operator (the data controller):

Class and activity attendance records (booking history, check-ins, class participation)
Exercise and workout data (exercise results, training logs, workout statistics recorded within the app)
Training program data (assigned programs, progress tracking, completed exercises)

We do not collect medical or clinical health data such as diagnoses, medications, or medical records.

3.2 How We Use Fitness Data

Fitness data is used exclusively to provide and improve the core services of the application:

To enable booking, check-in, and class management functionality
To display your workout history and exercise progress
To allow your facility to manage and deliver personalized training programs
To generate aggregated, anonymized usage statistics for facility operators

3.3 How Fitness Data Is Stored and Protected

Fitness data is stored on secure servers with encryption both in transit and at rest. Access to fitness data is restricted to authorized personnel and the facility operator acting as the data controller. We apply the same security standards to fitness data as to all other personal data described in Section 4 of this policy.

Fitness data is shared only with your facility operator, who acts as the data controller and determines the purposes of processing.

We do not sell, rent, or trade fitness data to any third party. Fitness data is not used for advertising, marketing, or profiling purposes. We do not share fitness data with data brokers, advertising platforms, or information resellers.

3.5 Retention and Deletion of Fitness Data

Fitness data is retained for the duration of your active membership with your facility. Upon account deletion or upon request, all associated fitness data is permanently removed from our systems.

You may request deletion of your fitness data at any time by contacting your facility directly or by emailing us at info@bookingboard.io.

4. Security

Information security is a high priority at Booking Board ApS. We work diligently and continuously with information security and base this work on internationally recognized security standards.

We have implemented security measures to ensure the protection of customer information, personal information, and other confidential information. We regularly conduct internal follow-ups on the adequacy and compliance of policies and measures.

5. Your Rights as a User

As a registrant, you have certain rights under GDPR legislation. If you are a member of a facility using Booking Board ApS, you should first contact your facility to learn what personal information is processed about you and to have any incorrect or incomplete information corrected.

You have the right to:

Request deletion of your personal data
Request that processing of your data be stopped
Exercise your right to data portability
Object to the processing of your personal data

To exercise these rights, please contact your facility directly.

6. Changes to This Privacy Policy

We recognize that transparency is an ongoing responsibility. We will therefore regularly review and update this data protection policy.

8. Complaint

If you wish to complain about our processing of personal data, please send an email with the details of your complaint to info@bookingboard.io.

You also have the right to complain to the relevant data protection authority regarding your rights and about your facility's or Booking Board ApS's processing of your personal data.

Sweden: Swedish Data Protection Authority (IMY)
Denmark: Danish Data Protection Agency (Datatilsynet)