What we collect, why we collect it, who else sees it, and what you can ask us to do about it.
Version 2.0 · Last updated 6 October 2026 · Governed by Swiss law
Alexander Grabher Performance (trading as AG Performance), a sole proprietorship registered in Switzerland (UID CHE-352.501.392), Buchholzstrasse 13, 8053 Zurich. Email: letsgo@alexgrabher.com.
We are the controller for the personal data described here. This notice covers www.alexgrabher.com, the coaching app at coaching.alexgrabher.com, our newsletter, and the administration of lessons, camps and retreats.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP / revDSG, in force since 1 September 2023).
When you send a form — an application, a season registration, a camp or retreat booking — we receive your name, email address, telephone number, and the information you choose to give about your level, goals, availability and anything you tell us we should know. We use this to answer you, to place you in the right group, and to administer your booking.
If you subscribe, we store your email address and name, the language you chose, and which forms you submitted. You can unsubscribe from any email at any time, and withdrawal takes effect immediately.
To hold an account at coaching.alexgrabher.com we process your name, email address, password (stored only as a cryptographic hash, never readable by us), your bookings and session history, and the training content assigned to you.
We also record body measurements and performance test results — for example screening scores and physical diagnostics. Under Swiss law this is health data and therefore particularly sensitive personal data (Art. 5 lit. c FADP). We only record it with your explicit consent, which you give when you start, and which you can withdraw at any time without giving a reason. Withdrawing it does not end your coaching; it means we stop recording and delete what we hold.
Coaching is invoiced to you for payment by bank transfer, or paid by card or TWINT through Stripe. When you pay through Stripe, your card details go directly to Stripe and are never transmitted to or stored by us. We receive only confirmation of payment, the amount, the date and the last digits of the card. We keep invoices and payment records for ten years, as Swiss accounting law requires.
Our hosting provider records standard server logs — IP address, browser, pages requested, time — for security and to keep the site working. We use no analytics, no advertising pixel and no tracking cookies. Only the cookies strictly necessary for the site and the app to function are set.
Juniors may hold an app account. Where the account holder is under 16, it is opened by a parent or legal guardian, and consent for any body measurement or test result is given by that parent or guardian in writing. A parent can at any time ask to see everything we hold about their child, correct it, or have it deleted.
We do not knowingly collect data from a child under 16 without that consent. If you believe we have, write to us and we will delete it.
We do not sell personal data and we do not share it for anyone else’s marketing. We use the following service providers, each bound by a data processing agreement and permitted to use your data only on our instructions:
| Provider | What it does | Where |
|---|---|---|
| Vercel Inc. | Hosts this website | USA |
| Formspree Inc. | Delivers website form submissions to us | USA |
| Klaviyo Inc. | Sends the newsletter and records which forms you submitted | USA |
| Supabase | Database and login for the coaching app | Ireland (EU) |
| Stripe Inc. / Stripe Payments Europe | Processes card and TWINT payments | USA / Ireland |
| Google Ireland Ltd. | Serves the typefaces used on this site | EU / USA |
We may also disclose data where the law requires it, or to our accountant and, if necessary, our legal adviser, both bound by professional confidentiality.
The coaching app’s database is hosted in Ireland, inside the EU — so your account, bookings, measurements and test results do not leave the European Economic Area. Several of the other providers above are in the United States. Swiss law allows such transfers where an adequate level of protection is ensured. We rely on the Swiss–US Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses recognised by the Federal Data Protection and Information Commissioner, together with the additional safeguards he expects.
You can ask us for a copy of the safeguards that apply to any particular transfer.
| Data | Kept for |
|---|---|
| Enquiries that do not become a booking | 12 months, then deleted |
| Client records, bookings and training history | For the duration of coaching and 3 years afterwards |
| Body measurements and test results | For the duration of coaching, then deleted within 12 months — or immediately on request |
| Invoices and payment records | 10 years (Art. 958f Swiss Code of Obligations) |
| Newsletter subscription | Until you unsubscribe |
| Server logs | Up to 6 months |
You may at any time:
Write to letsgo@alexgrabher.com. We answer within 30 days and we do not charge for it. We may ask you to confirm your identity first, so that we do not hand your data to someone else.
If you are not satisfied you can complain to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.
Data is transmitted over encrypted connections (TLS) and stored on access-controlled systems. Passwords are hashed. Access to client records is limited to Alex Grabher and the coaches who need it to do their work, each bound to confidentiality. No system is perfectly secure, and we do not claim otherwise — but if a breach ever put your rights at serious risk, we would tell you and the FDPIC.
We will update this notice when what we do changes. The current version always applies, and the date below tells you when it last changed. If a change materially affects you, we will say so by email.