Privacy policy

Relaxed cactus figure with headband and a small dumbbell

Version: October 2026. Controller: Sculpt Lab GmbH (FN 642443w), Zelinkagasse 10/10, 1010 Vienna · Studio: Liechtensteinstraße 38, 1090 Vienna ("CRUSH.") · office@letscrush-it.com

1. General

The use of personal data by Sculpt Lab GmbH, based in Vienna with its business address at Liechtensteinstraße 38, 1090 Vienna ("CRUSH."), is governed by the applicable statutory provisions and the consent given by the user to the use of their data.

CRUSH. is a Lagree studio. Various services in the field of sport and leisure as well as products (together the "sports offering") can be booked, reserved or purchased via CRUSH. The services are provided by CRUSH. directly. The subject of the contract is the use of CRUSH.'s services by users (the "user").

CRUSH. is aware that the protection and careful handling of users' personal data is very important and strictly complies with the statutory provisions applicable in Austria (GDPR, DSG, TKG).

2. Data collection

CRUSH. records and stores all information the user provides on the Eversports platform ("Eversports") and which is transmitted to CRUSH. in the course of an online booking, or which the user provides to CRUSH. in any other way, for example on site. CRUSH. uses the user's personal data to the extent permitted by law and otherwise only with the user's consent. Where consent is given electronically as part of an online booking via Eversports, Eversports fulfils the statutory information duties and logs this consent by means of appropriate technical systems.

CRUSH. uses the following personal data: name, e-mail address, phone number, gender, date of birth, place of residence, booking data, existing products.

3. Purpose of processing

We process your data in the context of contract fulfilment for the following purposes: to carry out reservations and store open products, to issue invoices, to create a booking history and — with your consent — for marketing purposes.

4. Data security

For reasons of data security, personal data is stored in a closed system (Eversports) and protected by password. Eversports is a processor for CRUSH. and has taken appropriate measures to ensure data security (see eversports.at/h/security). Should CRUSH. become aware that a user's data has been used unlawfully in a systematic and serious manner and the user is at risk of harm, CRUSH. will inform the user without delay.

5. Your rights

You have the rights to access, rectification, erasure, restriction, data portability and objection. To exercise them, contact us by post at Zelinkagasse 10/10, 1010 Vienna, or by e-mail at office@letscrush-it.com. Contacts for data protection: Lea Schimel and Sabrina Neumaerker.

If you believe that the processing of your data violates data protection law or that your rights have otherwise been infringed, you can contact us. If we cannot resolve your case to your satisfaction, you have the right to lodge a complaint with the supervisory authority at any time. In Austria this is the Datenschutzbehörde (dsb.gv.at).

6. This website

Hosting. The website is hosted by Cloudflare, Inc. (San Francisco, USA) via Cloudflare Pages and delivered via a global network of servers. When you visit, Cloudflare processes technically necessary data (IP address, time, page requested, browser) in server logs. Legal basis: legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place.

Fonts. All fonts are served locally from our server. No connection to Google Fonts or other font providers is made.

Cookies and local storage. The website sets no tracking cookies. Your choice in the cookie banner is stored locally in your browser (localStorage, "crush-consent") so we do not have to ask again. You can change it at any time via "Cookie settings" in the footer.

7. Statistics (Plausible)

Only with your consent do we use Plausible Analytics (Plausible Insights OÜ, Estonia, EU) for anonymous audience measurement. Plausible sets no cookies and stores no personal data; IP addresses are not stored. Legal basis: consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie settings.

8. Google Maps

The map on the home and contact pages is only loaded once you actively confirm. On loading, data (including your IP address) is transmitted to Google Ireland Limited or Google LLC (USA). Legal basis: consent (Art. 6(1)(a) GDPR). Details: policies.google.com/privacy.

9. Contact and enquiry forms

The forms (contact, private & corporate, newsletter) are received on Cloudflare servers and delivered to us by e-mail via Brevo (Sendinblue GmbH, Berlin). Your details (name, e-mail address, where applicable company, group size, preferred date, message) are transmitted to us and used solely to handle your enquiry. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR) or legitimate interest. The data is deleted once the enquiry is closed and no statutory retention obligations apply.

10. Newsletter

We use the double opt-in procedure for the newsletter: after signing up you receive an e-mail with a confirmation link; the sign-up only takes effect once you click it. We store your e-mail address, the time of sign-up and confirmation and your IP address as proof of consent. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail. Sending provider: [to be added — suggestion Brevo, France].

11. External links

Booking, prices and vouchers run via Eversports (Eversports GmbH, Vienna). When you click such links you leave our website and Eversports' privacy policy applies. The same applies to Instagram (Meta Platforms Ireland Ltd.).