Last updated: April 12, 2026
[DRAFT - to be reviewed by a legal professional]
TOTEM Indoor SA
TOTEM Indoor SA ("we", "TOTEM") is responsible for processing personal data collected through our website (totem.ch) and reservation services.
Some data is transferred to the United States or other countries:
You have the following rights under GDPR and Swiss nFADP:
To exercise these rights, contact: privacy@totem.ch
You can manage your cookie preferences in several ways:
We may update this privacy policy at any time. The date of last update is shown at the top of this page. We encourage you to review this policy regularly.
For any questions about this privacy policy, please contact us:
When you use our contact form, we collect: first name, last name, email address, phone number, inquiry type, and message. This data is sent by email to the relevant gym staff and logged in Google Sheets for follow-up. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: 2 years after last contact.
If you apply through our job application form, we collect: first name, last name, email, phone, CV, and cover letter (uploaded files). This data is sent by email to HR and logged in Google Sheets. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR). Retention: 2 years after last contact, unless otherwise agreed.
When you subscribe to our newsletter, we collect your email address and preferred gym. We may track open and click-through rates to improve our communications. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the unsubscribe link. Retention: until you unsubscribe.
Our hosting provider (Vercel) automatically collects technical data: IP address, requested URL, timestamp, HTTP response code, and user agent. This data is used for security, abuse detection, and diagnostics. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: 30 days (Vercel retention policy).
Through our analytics tools (subject to your consent), we collect: browser type, operating system, screen resolution, preferred language, and device type. This data is anonymized and used to optimize user experience. Retention: 14 months (analytics retention period).
Functional cookies (totem_consent, preferred-gym): 13 months / 1 year. Analytics cookies (GA4): 14 months. Marketing cookies (Meta Pixel): per platform retention policy. Camp reservation data: camp duration + 1 year. Contact / job application data: 2 years after last contact. Newsletter data: until unsubscribe. Server logs: 30 days. Authentication sessions: 8 hours (1 hour for admin impersonation sessions).
We use Sentry to detect and diagnose technical errors on the site. Sentry may collect: page URL, error message, stack trace, browser type, operating system, and IP address (anonymized). No cookies are used. Session Replay recordings are disabled. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Provider: Functional Software, Inc. (USA), subject to EU Standard Contractual Clauses.
Transactional emails (camp confirmations, contact form responses, job application notifications) are sent via Resend, an email delivery service. Resend processes the recipient's email address and message content. Legal basis: contract performance (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR). Provider: Resend, Inc. (USA).
We use Vercel Analytics and Speed Insights to measure site performance and page load times. These tools do not use cookies and do not collect any personally identifiable information. Data is aggregated and anonymous. No consent required. Provider: Vercel Inc. (USA).