Skip to main content

OPENING SALE: Save €10 every month on your membership – exclusively for the first 100 members. PROMO CODE: Train for free throughout October! Simply enter the code GYMOPENING100 at checkout.

Menu

Ask about a trial class

Legal

Privacy policy

Learn more about how we process your data on our website and the Kru Tiger Muay Thai app.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Kru Tiger Muay Thai GmbH Karl-Marx-Allee 3 10178 Berlin Germany Email: info@krutigermuaythai.de

Hereinafter referred to as “Kru Tiger Muay Thai”, “we”, “us” or “our”.

This Privacy Policy explains how we process personal data in connection with our website, the booking and membership management functions integrated into it, and the Kru Tiger Muay Thai App.

2. General Principles of Data Processing

We process personal data only insofar as this is necessary to provide our services, respond to enquiries, enter into or perform contracts, organise our studio and training operations, comply with legal obligations, or where another legal basis under data protection law applies.

Depending on the processing activity, we rely in particular on the following legal bases:

Art. 6(1)(b) GDPR – where processing is necessary to take steps prior to entering into a contract or to perform a contract;

Art. 6(1)(c) GDPR – where processing is necessary to comply with a legal obligation;

Art. 6(1)(f) GDPR – where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject;

Art. 6(1)(a) GDPR – where we obtain consent for a specific processing activity.

Where special categories of personal data, in particular health data, are processed in individual cases, such processing will only take place where the additional requirements of Art. 9 GDPR are met.

3. Requirement to Provide Certain Data

Certain personal data is required in order for us to enter into a contract with you or provide a service requested by you.

Mandatory information will be identified accordingly when the data is collected. If you do not provide this information, we may be unable to provide the relevant membership, booking, order or other service.

Voluntary information is treated as such and is generally not required in order to enter into a contract unless expressly stated otherwise in the individual case.

4. Data Processing on Our Website

4.1 Provision of the Website and Server Log Files

When you visit our website, technically necessary data may be processed in order to deliver the website to your device and to operate it securely.

This may include in particular:

  • IP address,
  • date and time of access,
  • page or file accessed,
  • browser type and browser version,
  • operating system and device information,
  • referrer URL, and
  • technical log and error data.

The processing is based in particular on our legitimate interest in providing a secure, stable and functional website pursuant to Art. 6(1)(f) GDPR.

4.2 Cookies and Similar Technologies

We do not use our own analytics, marketing or tracking cookies on our website, nor do we use our own technologies to create personal user profiles for advertising purposes.

However, our website integrates functions and widgets provided by our studio and membership management system BSPORT. These functions enable, in particular, the display of our training schedule, course bookings, the conclusion and management of memberships, access to the members’ area, the booking of Private Training sessions and access to shop functions.

When these functions are used, BSPORT or its technical service providers may use technically necessary cookies, local storage or similar technologies where required to provide the function requested by the user.

4.3 Contact Form and Contacting Us

If you contact us via our contact form, by email or by other means, we process the personal data you provide.

This may include in particular:

  • name,
  • email address,
  • telephone number,
  • subject,
  • content of your message, and
  • any other information you provide voluntarily.

The data is processed for the purpose of handling your enquiry.

Where your enquiry relates to steps prior to entering into a contract or to the performance of a contract, processing is based on Art. 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in processing and responding to enquiries pursuant to Art. 6(1)(f) GDPR.

The data will be deleted once the enquiry has been conclusively dealt with, unless statutory retention obligations or other legitimate reasons require further storage.

5. Studio, Membership and Course Management

5.1 Use of BSPORT

We use BSPORT (30–32 Boulevard de Sébastopol, 75004 Paris, registered with the Paris Trade and Companies Register under number 838 682 011) for essential parts of our studio, membership, contract and course management.

BSPORT provides us in particular with functions relating to:

  • member and customer management,
  • user accounts,
  • course and appointment scheduling,
  • course bookings and cancellations,
  • check-ins,
  • memberships and contract management,
  • the members’ area,
  • payment processing,
  • shop and product sales,
  • Private Training sessions,
  • questionnaires,
  • communication with members, and
  • the Kru Tiger Muay Thai App.

Certain BSPORT functions are integrated directly into our website as widgets.

Where BSPORT processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

For further information about BSPORT, its technical platform and the processing of personal data by BSPORT, please refer to the BSPORT Privacy Policy.

5.2 User Account and Member Profile

The creation of a personal user or member account may be required in order to use certain services.

The following data may be processed in particular:

  • first and last name,
  • address,
  • email address,
  • telephone number,
  • date of birth,
  • account and login data,
  • membership and contract data,
  • booked and attended courses,
  • check-ins,
  • payment and billing information,
  • communication data, and
  • other information required in connection with the relevant membership or service.

Processing is carried out for the purpose of entering into and performing the relevant contractual relationship pursuant to Art. 6(1)(b) GDPR.

5.3 Training Schedule, Course Bookings and Check-ins

You can view our training schedule and book courses and training services via our website and the Kru Tiger Muay Thai App.

For the management of bookings, the following data may be processed in particular:

  • name and user account,
  • booked course or appointment,
  • date and time,
  • booking and cancellation time,
  • membership or booking entitlement,
  • check-in or attendance, and
  • where applicable, available or used training credits.

We require this data to organise and operate our training services and to perform our contract with you. The legal basis is Art. 6(1)(b) GDPR.

5.4 Memberships and Contract Management

Memberships and other services may in particular be concluded and managed using the functions provided by BSPORT.

We process in particular:

  • master and contact data,
  • selected plan or membership,
  • start date and duration of the contract,
  • membership status,
  • booking and usage information,
  • billing information,
  • payment status, and
  • contract-related communications.

Processing is carried out for the purpose of entering into and performing the membership agreement pursuant to Art. 6(1)(b) GDPR.

5.5 Private Training and Other Appointment Bookings

When Private Training sessions or other individual services are booked, we process the information required to arrange, prepare and provide the relevant service.

This may include contact details, appointment and booking information and information provided in a questionnaire associated with the booking.

The legal basis is generally Art. 6(1)(b) GDPR.

5.6 Questionnaires

We may provide questionnaires in connection with a booking or membership.

This applies in particular to questionnaires relating to trial sessions, Private Training sessions and, where applicable, other member surveys.

Depending on the questionnaire, we may process information such as training goals, training experience, preferences, feedback or other information relevant to the training or membership.

Where processing is necessary to prepare or provide a booked service, it is based on Art. 6(1)(b) GDPR.

For voluntary surveys, the legal basis depends on the respective purpose. In particular, processing may be based on consent pursuant to Art. 6(1)(a) GDPR or our legitimate interests pursuant to Art. 6(1)(f) GDPR.

5.7 Shop and Orders

Goods and other Kru Tiger Muay Thai products may be purchased via the Kru Tiger Muay Thai website and app.

In connection with an order, the following data may be processed in particular:

  • name and contact details,
  • products ordered,
  • purchase price,
  • billing information,
  • delivery information, where applicable,
  • payment method, and
  • payment status.

Processing is carried out for the purpose of entering into and performing the purchase contract pursuant to Art. 6(1)(b) GDPR.

Where we are legally required to retain certain invoices or accounting data, further processing is based on Art. 6(1)(c) GDPR.

5.8 Payment Processing

Payments for memberships, courses, Private Training sessions, goods and other paid services may be processed using payment functions integrated into BSPORT.

The data required for the relevant payment is processed. Depending on the payment method selected, this may include:

  • name,
  • billing information,
  • payment amount,
  • payment method,
  • transaction information,
  • payment status, and
  • bank or card information.

The actual payment processing may be carried out by specialised payment service providers.

We do not necessarily receive complete bank account or card details, but in particular the transaction and status information required for contract and payment administration.

Processing is carried out for the performance of the relevant contract pursuant to Art. 6(1)(b) GDPR and, where statutory retention obligations apply, pursuant to Art. 6(1)(c) GDPR.

5.9 Health Data

If a questionnaire requests information about injuries, illnesses, health restrictions or other health information, this constitutes a special category of personal data.

We process such information only where an additional legal basis under Art. 9 GDPR applies, in particular where the data subject has expressly consented to the processing.

Any such consent may be withdrawn at any time with effect for the future.

6. Kru Tiger Muay Thai App

6.1 Use of the Kru Tiger Muay Thai App

In addition to our website, we provide the Kru Tiger Muay Thai App. The app is provided using the technical platform of BSPORT (30–32 Boulevard de Sébastopol, 75004 Paris, registered with the Paris Trade and Companies Register under number 838 682 011) and is used in particular for the digital access to and management of our studio services.

The app can be used in particular to:

  • manage user and member accounts,
  • view training and course schedules,
  • book and cancel courses and appointments,
  • manage check-ins and training credits,
  • view and manage memberships,
  • book Private Training sessions,
  • complete questionnaires,
  • receive information and notifications, and
  • use other studio services.

Kru Tiger Muay Thai GmbH is generally the controller for the processing of personal data in connection with our studio, membership and course management. BSPORT processes a substantial part of this data on our behalf as a technical service provider and processor.

The sections above concerning studio, membership and course management also apply to the processing of personal data in connection with the individual functions of the app.

For further information about BSPORT, its technical platform and the processing of personal data by BSPORT, please refer to the:

BSPORT Privacy Policy

6.2 Technical Data When Using the App

When you use the app, technically necessary data may be processed in order to provide, secure and maintain the functionality of the app.

This may include in particular:

  • IP address,
  • device information,
  • operating system and version,
  • app version,
  • language settings,
  • technical identifiers,
  • time of access, and
  • error and diagnostic data.

Where such processing is necessary for the secure and functional operation of the app, it is based on our legitimate interest in providing our digital services securely and reliably pursuant to Art. 6(1)(f) GDPR.

6.3 Push Notifications

Where the Kru Tiger Muay Thai App supports push notifications, you may receive notifications on your device.

These may include, for example, information concerning bookings, course changes, appointments or other information relevant to the use of our services.

Push notifications can be enabled or disabled in your device settings.

Services provided by the relevant operating system or platform provider may be used for the technical delivery of push notifications.

6.4 App Permissions

Depending on the functionality of the app, access to certain functions or information on your device may be required.

Such access will only take place where necessary for the respective function and, where technically or legally required, after you have granted the relevant device permission.

Device permissions can be managed or withdrawn through your device settings.

7. Communication, Administration and Legal Obligations

7.1 Contract-related Communication

We may use the contact details stored with us to provide you with information relating to your membership, bookings and our services.

This may include, for example:

  • booking confirmations,
  • cancellation confirmations,
  • reminders,
  • changes to booked courses or appointments,
  • contract-related information,
  • payment information, and
  • important organisational information concerning studio operations.

Where such communication is necessary for the performance of the relevant contract, processing is based on Art. 6(1)(b) GDPR.

7.2 Newsletter and Information About Our Services

Where we use personal data for newsletters, advertising messages or comparable electronic direct marketing, we do so only in accordance with the applicable legal requirements.

Where consent is required, processing is based on Art. 6(1)(a) GDPR.

Consent may be withdrawn at any time with effect for the future. You may also object at any time to the processing of your personal data for direct marketing purposes.

7.3 Accounting and Statutory Retention Obligations

We also process contract, invoice, payment and business data for accounting purposes and to comply with commercial, tax and other statutory obligations.

The legal basis is in particular Art. 6(1)(c) GDPR.

7.4 Establishment, Exercise and Defence of Legal Claims

Where necessary, personal data may also be processed for the establishment, exercise or defence of legal claims.

Such processing is based in particular on our legitimate interest in protecting and enforcing our rights pursuant to Art. 6(1)(f) GDPR.

8. Recipients, Retention and International Data Transfers

8.1 Recipients and Categories of Recipients

Within Kru Tiger Muay Thai GmbH, personal data is accessible only to persons who require access for the performance of their respective duties.

In addition, personal data may be disclosed or made accessible, where necessary for the respective processing purposes, to the following categories of recipients in particular:

  • providers of studio, membership and course management software,
  • IT, hosting and technical service providers,
  • payment service providers and financial institutions,
  • communication and email service providers,
  • accounting, tax and other professional advisers,
  • shipping and logistics service providers, where required, and
  • public authorities, courts and other public bodies where required by law.

Where service providers process personal data exclusively on our instructions, they are engaged – where legally required – on the basis of a data processing agreement pursuant to Art. 28 GDPR.

8.2 Transfers Outside the EEA

When using BSPORT or other service providers engaged by us, personal data may, depending on the respective service, also be processed in countries outside the European Union or European Economic Area.

Any such transfer will take place only in accordance with the requirements of Art. 44 et seq. GDPR.

Where the European Commission has adopted an adequacy decision for the relevant third country, a transfer may be based on that decision. Otherwise, appropriate safeguards are used where required, in particular the Standard Contractual Clauses adopted by the European Commission.

Further information concerning the safeguards used for a particular transfer can be requested from us.

8.3 Retention Period

We retain personal data only for as long as necessary for the relevant purpose or for as long as statutory retention obligations apply.

In particular:

  • Contract and membership data is generally processed for the duration of the contractual relationship. After its termination, the data will be deleted unless it is still required due to statutory retention obligations, for the settlement of outstanding matters or for the establishment, exercise or defence of legal claims.
  • Booking and training data is retained only for as long as necessary for the organisation and documentation of our services or for other lawful purposes.
  • Contact enquiries are deleted once the enquiry has been conclusively dealt with and there are no statutory or other legitimate reasons for further retention.
  • Invoices, accounting records and tax-relevant documents are retained in accordance with the applicable statutory retention periods.
  • Where processing is based on consent, the relevant data is generally processed until consent is withdrawn or the relevant purpose ceases to apply, unless another legal basis permits or requires continued storage.

9. Your Rights

Subject to the applicable legal requirements, you have in particular the following rights:

  • right of access to the personal data we process about you pursuant to Art. 15 GDPR,
  • right to rectification of inaccurate or incomplete personal data pursuant to Art. 16 GDPR,
  • right to erasure pursuant to Art. 17 GDPR,
  • right to restriction of processing pursuant to Art. 18 GDPR,
  • right to data portability pursuant to Art. 20 GDPR, and
  • right to object to certain processing pursuant to Art. 21 GDPR.

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal is not affected.

To exercise your rights, you can contact us using the contact details provided in Section 1.

You also have the right under Art. 77 GDPR to lodge a complaint with a competent data protection supervisory authority.

10. Amendments to this Privacy Policy

We may amend this Privacy Policy if our services, the technical systems we use or the applicable legal requirements change.

The current version published on our website applies.

Last updated: September 2026