Legal

Privacy policy

This is a translation provided for convenience. The German version is the legally binding text.

1. General

The protection of your personal data is important to sports Zugerland AG. We process personal data confidentially and in accordance with the applicable data protection provisions, in particular the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the General Data Protection Regulation of the European Union (GDPR/DSGVO).

This privacy policy informs you which personal data we process when you use our website, our online services and our apps – in particular the Sporty app and the Member Pass –, for what purposes we do so, and what rights you are entitled to.

2. Data controller

The controller responsible for processing your personal data is:

sports Zugerland AG
Riedstrasse 10
6330 Cham
Switzerland

Phone: +41 41 748 34 00
Email: mail@sports-zugerland.ch
Website: https://www.sports-zugerland.ch

If you have any questions about data protection, you may contact the address given above at any time.

3. What data we process

When you visit our website, technical information required for the secure operation of the website is automatically collected.

This includes, in particular:

  • IP address
  • date and time of access
  • pages accessed
  • browser type and version
  • operating system used
  • language settings
  • referrer URL (the previously visited website)
  • volume of data transferred
  • access status (HTTP status code)

This information is used exclusively to ensure the website operates without disruption, for system security and for error analysis. This data is not combined with other personal data.

4. Contacting us

If you contact us by e-mail, telephone or via one of our online forms, we process the personal data that you voluntarily provide to us.

This may include, in particular:

  • first and last name
  • company
  • address
  • phone number
  • e-mail address
  • requested appointment
  • reservation or booking information
  • message or enquiry
  • other information voluntarily provided

This data is used exclusively to process your enquiry, to communicate with you and, where applicable, to initiate or perform contracts. Processing is based on our legitimate interest in efficient communication, or to carry out pre-contractual or contractual measures.

5. Bookings and reservations

Reservations, registrations or bookings for sports offerings, restaurant visits, events, and corporate and private functions can be made via our website and Eversports. In doing so, we process the data required to carry out your reservation or booking.

This includes, in particular:

  • Name
  • Contact details
  • Date and time
  • Number of people
  • Requested services
  • Remarks
  • Payment information (where required)

This data is used exclusively to carry out your booking, to communicate with you and to fulfil statutory retention obligations.

6. Online forms

Depending on the form, the following data may be processed, in particular:

  • first and last name
  • company
  • address
  • phone number
  • e-mail address
  • requested services
  • reservations
  • event details
  • individual messages

The data is used exclusively to process your enquiry and to perform the contract. We use two service providers to operate the forms:

Zoho Forms (Zoho Corporation) for fixed-slot (Fixplatz) enquiries. This form is provided directly by Zoho; your entries are transmitted to Zoho in encrypted form and stored there. Further information at zoho.com/privacy.html.

Brevo (Sendinblue GmbH) for all other forms — table reservations, event registrations, event enquiries, the contact form and newsletter sign-up. Your entries are delivered to us via Brevo by e-mail; for newsletter sign-ups, your e-mail address is additionally stored in our recipient list at Brevo until you unsubscribe. Further information at brevo.com/legal/privacypolicy.

7. Online reservations and Eversports

We use the booking system of Eversports (Eversports GmbH, Vienna, Austria) for the online reservation of sports courts and courses. When you make a booking, your details (in particular name, contact details, requested sport, date and time, and payment information) are transmitted directly to Eversports and processed there. Data processing by Eversports is carried out under the terms of Eversports' respective current privacy policy: eversports.com/privacy.

8. Sporty and customer account

Sporty is our web app for customers. You can use Sporty without signing in (see item 11) or sign in with a customer account.

For customer accounts and sign-in, we use Microsoft Entra External ID (Microsoft Ireland Operations Limited, Dublin, Ireland). Your customer account is maintained by Microsoft within the EU Data Boundary. You can sign in with your e-mail address and a one-time code that we send to you by e-mail from mail@sports-zugerland.ch, or with an existing Apple, Google or Microsoft account.

In particular, the following data is processed:

  • e-mail address
  • first and last name, which we ask for at registration
  • internal account identifier
  • sign-in times
  • technical sign-in details (in particular IP address, browser and operating system), which Microsoft logs for sign-in security

If you sign in with an Apple, Google or Microsoft account, we receive your e-mail address from the chosen provider and, if the provider transmits it, your name; the provider learns that you are signing in with us. With Apple you can hide your e-mail address (“hide my e-mail address”); we then receive an address generated by Apple, which Apple uses to forward our e-mails to you. Data processing by these providers is subject to their privacy policies.

The sign-in data (access keys) is stored in encrypted form in your browser's storage so that you remain signed in; it is removed when you select “Sign out”.

The data is used to provide you with the customer account, to recognise you when you use Sporty and to link your account to your member record (see item 9). Processing is carried out to provide our services and on the basis of our legitimate interest in secure operation.

9. Member data and profile

When you sign in to Sporty for the first time and no member record exists yet for your e-mail address, one is created automatically. It is the same member record that we also keep for the Member Pass and our on-site offerings.

This includes, in particular:

  • e-mail address
  • first name and last name (requested at registration) as well as a nickname (voluntary); you can change all three in Sporty under “My profile”
  • time of your last sign-in to Sporty
  • an internal link to your customer account (the account identifier and the sign-in method, e.g. e-mail, Google, Apple or Microsoft)
  • other details recorded in the course of our services (e.g. bonus card)
  • a change log (when a record was changed, and by whom or by which system)

Member records are stored at Microsoft (Microsoft Azure DevOps) in data centres in Ireland. Only authorised employees have access; our apps access them via a dedicated identifier restricted to this purpose and change only what is necessary for the respective function.

The data is used to recognise you as a member, to issue your Member Pass and to provide our services. It is stored for as long as your member record or customer account exists; at your request we delete it (see item 23), insofar as no statutory retention obligations preclude this.

10. Member Pass and welcome e-mail

When a member record is created for you (at reception or on your first sign-in to Sporty), you receive a welcome e-mail with your personal Member Pass. The e-mail is sent from mail@sports-zugerland.ch via Microsoft 365; the mailbox is stored in Switzerland.

The Member Pass consists of:

  • a QR code that contains your e-mail address in encoded form and is scanned at reception
  • an Apple Wallet pass attached to the e-mail. It contains your e-mail address and the QR code and is created and signed by us. Only once you add it to Apple Wallet does Apple's privacy policy (apple.com/legal/privacy) additionally apply.
  • an “Add to Google Wallet” link. The link contains your e-mail address and the QR code; if you click it, these details are transmitted to Google so that the pass can be saved in your Google Wallet. Google's privacy policy (policies.google.com/privacy) applies.

Using Apple Wallet and Google Wallet is voluntary; the QR code in the e-mail is sufficient.

11. Use without signing in

If you use Sporty without signing in, Sporty stores a random device identifier in your browser's storage. It contains no information about you and serves only to limit the number of questions per day without signing in. For this purpose, we store the device identifier, the date and the number of questions on that day on our server. This information is deleted after 30 days. You can remove the device identifier at any time by clearing the website data in your browser.

12. Hosting of the apps

Our apps and the associated background services (including sign-in, Member Pass and e-mail dispatch) run on Microsoft Azure (Microsoft Ireland Operations Limited) in data centres in Switzerland; member records are stored in data centres in Ireland. The apps are delivered via Azure Front Door, a global Microsoft network; your request may be routed via a location near you.

Technical logs are kept for error analysis and security (in particular time, function called, result, technical error messages and, for signed-in persons, the e-mail address). These logs are stored in Switzerland and deleted after 90 days.

13. Hosting and website

Our website was built with Lovable and is operated on modern cloud infrastructure. When you access our website, technically necessary data is processed so that the website can be delivered securely, reliably and quickly.

This includes, in particular:

  • IP address
  • date and time
  • browser information
  • operating system
  • pages accessed
  • technical error messages
  • security logs

This data serves exclusively to provide, secure and maintain the stability of our website.

14. Google services

To improve our online offering, we use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on your use of our website, the following services may be used, in particular:

  • Google Maps
  • Google Fonts
  • Google reCAPTCHA (to protect against spam)
  • other technical Google services, insofar as required for the operation of our website

When corresponding content is accessed, technical information such as, in particular, your IP address, browser information and usage data may be transmitted to Google. Insofar as data is processed outside Switzerland or the European Economic Area, this is done on the basis of the statutory safeguards used by Google for international data transfers. Further information can be found at policies.google.com/privacy.

15. Payment service providers

For payments on site and — where offered — for online bookings, we use established payment service providers (cashless payment in particular via TWINT, debit and credit card, excluding American Express). The data required for payment processing is transmitted directly to the respective payment service provider and processed there in accordance with its privacy policy. We ourselves do not store any complete card data.

16. Cookies and browser storage

Our website does not use cookies for analytics, marketing or advertising purposes. In particular, no tracking cookies are used that track your browsing behaviour across different websites.

Our Sporty app uses only technically necessary storage in your browser:

  • a session cookie containing a key used to encrypt your sign-in data in the browser; it is deleted when you close the browser
  • the browser's local storage (localStorage) for your sign-in (see item 8) and for the device identifier when used without signing in (see item 11)

This storage is required to operate Sporty and is not used for analytics, marketing or advertising purposes. For this reason, no cookie banner is currently used. You can delete this data at any time by clearing the website data in your browser; you will then be signed out of Sporty.

17. Instagram

Our website contains links to our Instagram presence. By clicking these links, you leave our website and reach the Instagram platform. Sole responsibility for the processing of personal data on Instagram lies with the respective platform operator. Further information at privacycenter.instagram.com/policy.

18. LinkedIn

Our website contains links to our company profile on LinkedIn. A connection to LinkedIn is only established once you click the respective link. LinkedIn alone is responsible for data processing on LinkedIn. Further information at linkedin.com/legal/privacy-policy.

19. Disclosure of personal data

We treat your personal data confidentially and, as a rule, do not disclose it to third parties unless required by law or necessary to perform a contract. Disclosure may occur, in particular, to the following categories of service providers:

  • Hosting and IT service providers
  • Providers of online forms and e-mail dispatch (e.g. Zoho, Brevo)
  • Booking platforms (e.g. Eversports)
  • Payment service providers (for online payments)
  • Microsoft (customer accounts and sign-in, operation of our apps, storage of member records, e-mail dispatch)
  • Google (Google Wallet pass, only if you use the “Add to Google Wallet” link)
  • Apple (Apple Wallet pass, only if you add the pass to Apple Wallet)
  • Providers of the sign-in method you choose (Apple, Google, Microsoft)
  • Authorities or courts, on the basis of statutory obligations
  • Other technical service providers that support the operation of our website or our services

All service providers we use receive only the data they need to provide their services.

20. Data transfers abroad

Some of the service providers we use may process personal data outside Switzerland or the European Economic Area (EEA). Insofar as personal data is transferred to countries without an adequate level of data protection, this is done exclusively in compliance with statutory requirements. This takes place, in particular, on the basis of recognised standard contractual clauses or other suitable safeguards under the applicable data protection laws.

Our apps are operated in data centres in Switzerland; customer accounts are maintained by Microsoft within the EU Data Boundary and member records are stored in Ireland. Microsoft, Google and Apple belong to groups headquartered in the USA; processing in the USA can therefore not be ruled out. Microsoft Corporation and Google LLC are certified under the Swiss-U.S. Data Privacy Framework; transfers to these companies are therefore subject to an adequate level of data protection. Apple bases transfers from Switzerland on standard contractual clauses; for persons in Europe and Switzerland, Apple Distribution International Limited (Ireland) is responsible for Apple Wallet.

21. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, manipulation or unauthorised access. This includes, in particular:

  • encrypted data transmission using SSL/TLS encryption
  • access restrictions
  • regular security updates
  • access authorisation concepts
  • data backups
  • protection against unauthorised access

Despite all security measures, data transmission over the internet can never be completely protected against risks.

22. Retention period

We process and store your personal data only for as long as necessary for the respective purpose or for as long as statutory retention obligations apply. In particular, we store data:

  • for as long as a business relationship exists,
  • for as long as necessary to process your enquiry,
  • for as long as statutory retention obligations apply,
  • for as long as legitimate interests require it.

The following periods apply to our apps in particular:

  • Member records and customer accounts: for as long as your member record or customer account exists
  • technical logs of our apps: 90 days
  • counters for questions without signing in: 30 days
  • sign-in logs of customer accounts at Microsoft: 7 days

Once the respective purpose no longer applies, the data is deleted or anonymised, unless statutory retention obligations preclude this.

23. Your rights

Under the applicable data protection laws, you have the right at any time

  • to request information about your personal data that we have stored,
  • to have inaccurate data corrected,
  • to request the deletion of your personal data, insofar as no statutory retention obligations preclude this,
  • to request the restriction of processing,
  • to object to the processing of data,
  • to withdraw consent given, at any time, with effect for the future,
  • to request the release or transfer of your personal data, insofar as a statutory claim exists.

To exercise your rights, a notification to the contact address given under item 2 is sufficient.

24. Links to external websites

Our website contains links to websites and online offerings of third parties. We accept no responsibility for the content, privacy policies or data processing of these external websites. Only the privacy policy of the respective provider applies.

25. Changes to this privacy policy

We reserve the right to amend this privacy policy at any time, should this become necessary due to technical developments, changes in the law or new services. The version published on our website at the time shall apply.

26. Contact

If you have any questions about the processing of your personal data or wish to exercise your data protection rights, you may contact us at any time:

sports Zugerland AG
Riedstrasse 10
6330 Cham
Switzerland

Phone: +41 41 748 34 00
Email: mail@sports-zugerland.ch
Website: https://www.sports-zugerland.ch

Last updated: 28 October 2026