Privacy Policy

Privacy Legal GDPR

Last updated: Tuesday, August 12, 2025

This privacy statement explains how Box Planner (XF3 GmbH) collects, uses, maintains and discloses personal information of its users.

1. Data Controller

XF3 GmbH
Kirschstr. 18
80999 Munich, Germany
Email: office@box-planner.com
Phone: +49 (170) 4546193

2. Personal Information We Collect

We collect identification and contact data (e.g. name, email, phone), membership and contract data, training bookings and attendance records, and – where applicable – payment and invoice information.

3. Access to Your Data

All personal data related to your memberships, class bookings, payments and account are available to you at any time via our secure member portal:

www.box-planner.com

Providing access through the portal fulfils our transparency obligation under Article 15 GDPR.

4. Data Logs and Retention

System and access logs (e.g. login times, technical requests) are stored solely for security and system stability purposes and are automatically deleted after 30 days. At that point, they are no longer part of active processing and not subject to disclosure obligations.

If you wish to receive a formal copy of all personal data we currently store about you, you may contact us at office@box-planner.com. We will provide this within 30 days in a structured format (e.g. CSV or JSON). The first copy is free of charge. For repeated or excessive requests, an administrative fee may apply (Art. 12 (5) GDPR).

6. Purpose of Processing

Membership administration
Booking management
Payment processing
Service communication
Improvement of platform

7. Data Security

All data transmissions occur via SSL-encrypted connections. We employ appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration or disclosure.

8. Your Rights

Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority

9. Data Retention

Personal data are retained only as long as necessary to fulfil contractual or legal obligations. After expiry of statutory retention periods, data are deleted or anonymized.

10. Contact

For any questions or to exercise your rights, please contact our Data Protection Officer:

XF3 GmbH
Kirschstr. 18, 80999 München, Deutschland
Email: office@box-planner.com
Phone: +49 (170) 4546193