DE EN FR
Legal

Privacy policy

How we handle your data, what we collect and what rights you have.

1. Controller

Boulderhalle Basel AG ELYS Boulderloft
Elsässerstrasse 215a
4056 Basel
Switzerland

For questions about data protection you can reach us at elys@boulderloft.ch.

2. Principles

Under article 13 of the Swiss Federal Constitution, everyone has the right to privacy and to protection against the misuse of their personal data. We comply with the Swiss Data Protection Act (DSG) and, where applicable, with the General Data Protection Regulation (GDPR).

We collect and process personal data only to the extent necessary to provide our services, to run the gym and to meet our legal obligations.

3. What data we process

When you visit the gym

  • Name and contact details when registering at the front desk
  • Details of subscriptions, entries and vouchers
  • For minors: details of the parent, legal guardian or supervising adult
  • Status of the bouldering licence in your customer account

For bookings and registrations

  • Details from course, camp and group enquiries
  • Bookings of the movement playground and of rooms
  • Payment data processed through our payment service provider

When you visit this website

  • Server log files: IP address, date and time, page accessed, browser type and operating system
  • Cookies and comparable technologies (see section 5)
  • Details from contact and enquiry forms
  • E-mail address when signing up for the newsletter

4. Purpose of processing

We process your data in order to fulfil contracts (entries, subscriptions, courses, bookings), to communicate with you, to improve our offering and this website, to ensure safety in the gym, and to comply with statutory retention and disclosure obligations.

Data is passed on to third parties only where this is necessary to provide our services, where you have consented, or where we are required to do so by law.

5. Cookies

This website uses cookies – small text files that are stored on your device. There are exactly two:

  • Session cookie – set only when you submit a form or log in to the administration area. It secures the process technically and is deleted when you close your browser.
  • bl_vid – contains a randomly generated identifier with no personal reference. It helps us tell whether a page view comes from a new or a returning visit. The cookie is deleted after 365 days.

We do not set advertising, tracking or analytics cookies from third parties. There is no cross-device tracking and no sharing with advertising networks.

You can restrict or switch off the storage of cookies in your browser settings. Without the session cookie the forms on this website can no longer be submitted; everything else remains usable.

6. Services we use

We use the following services to run this website and our offering:

  • Vertical Life (Vertical-Life GmbH, Italy) – ticketing, subscriptions and vouchers. Name, contact details and subscription data are processed.
  • Google Maps (Google Ireland Ltd., Ireland) – map display on the contact page. When the map loads, your IP address is transmitted to Google.
  • Listmonk and Amazon SES – sending the newsletter. Listmonk runs on our own server and the address list does not leave our system. For technical delivery we use Amazon Simple Email Service (Amazon Web Services); in doing so the recipient address and the message content are processed. You can unsubscribe at any time using the link in every newsletter e-mail.
  • Our own audience measurement – statistics without third-party services. What is stored is the path accessed, the domain of the referring page, the language selected and a salted short checksum of the cookie value. Neither IP addresses nor full browser identifiers enter this evaluation. The data does not leave our server.
  • Our own server – running the website and storing the server log files. We operate the server ourselves; there is no external hosting provider and no content delivery network. Server location: Switzerland.

We have corresponding data processing agreements in place with all service providers that process personal data on our behalf.

7. Retention

We retain personal data for as long as is necessary for the respective purpose or as long as statutory retention periods require. After that the data is deleted or anonymised.

8. Data security

For security reasons and to protect confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar starting with “https://” and by the padlock symbol appearing.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss and misuse.

9. Your rights

  • Information about the personal data we process
  • Correction of inaccurate data
  • Deletion or restriction of processing
  • Objection to certain processing
  • Release or transfer of your data
  • Withdrawal of consent given, with effect for the future

A message to the following address is enough to exercise these rights: elys@boulderloft.ch. You may also turn to the Federal Data Protection and Information Commissioner (FDPIC).

10. Changes

We may adapt this privacy policy at any time. The version published on this page is the one that applies.

11. Downloads

Last updated: August 2026