Privacy Policy
for the Pilates studio “WeLovePilates”, a brand of M&M Holding Investment GmbH
1. Controller
M&M Holding Investment GmbH Brand: WeLovePilates Kolonnenstraße 54 10829 Berlin
Phone: 0176 56841078 Email: mhennig@bro-recruiting.de
Managing Director authorized to represent: [insert name]
2. Data Collected and Purposes
We process personal data when you
-
book classes, subscriptions, 10-class cards or personal training,
-
create a customer account,
-
unseren Newsletter abonnieren,
-
contact us by email, phone or in person,
-
visit our website.
Types of data processed include:
-
Stammdaten: Name, Anschrift, E-Mail, Telefonnummer, ggf. Geburtsdatum
-
Vertragsdaten: gebuchte Leistungen, Mitgliedschaft, Buchungshistorie
-
Payment data: e.g. payment method, transaction data (via Wix)
-
voluntary health information, insofar as necessary for safe training planning (e.g. injuries, pregnancy, restrictions)
-
technische Nutzungsdaten beim Websitebesuch (z. B. IP-Adresse, Browsertyp, Datum/Uhrzeit des Zugriffs, aufgerufene Seiten)
Purposes:
-
Initiation and performance of contracts (classes, subscriptions, personal training)
-
Class and appointment organization, customer management
-
Billing and payment processing
-
Communication with customers
-
Sending newsletters and information
-
Ensuring the technical operation of the website
-
Safeguarding legitimate interests (e.g. asserting/defending claims)
Legal bases: Art. 6 (1) (b), (c), (f) GDPR, where applicable Art. 6 (1) (a) GDPR (consent) and Art. 9 (2) GDPR for health data (explicit consent).
3. Use of Wix (Website, Booking, Payment, Newsletter)
For our website, online booking, customer management, payment processing and newsletter we use the service:
Wix.com Ltd. 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel
and affiliated companies (in particular in the EU).
Wix processes personal data on our behalf (data processing agreement) and provides us with, among other things, the following functions:
-
Website hosting and operation
-
Online booking system and customer accounts
-
Zahlungsabwicklung (verschiedene Zahlungsarten)
-
Sending newsletters and email communication
Wix may transfer data to third countries. According to Wix, this takes place on the basis of appropriate safeguards (e.g. standard contractual clauses). Further information:https://www.wix.com/about/privacy
4. Payment Processing via Wix
Payments within the scope of our online offerings are processed via the payment services provided by Wix. The information required for payment (e.g. payment method, amount, transaction data, partially masked card or account data) is transmitted to Wix or the connected payment service providers.
Legal basis: Art. 6 (1) (b) GDPR (performance of contract) and Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient payment processing).
5. Newsletter
If you subscribe to our newsletter, we use your email address and, where applicable, your name to regularly send information about classes, offers and news from WeLovePilates.
-
Rechtsgrundlage: Ihre Einwilligung (Art. 6 Abs. 1 lit. a DSGVO)
-
The newsletter is sent and managed via Wix.
You can revoke your consent at any time with effect for the future, e.g. via the unsubscribe link in the newsletter or by email tomhennig@bro-recruiting.de.
6. Disclosure of Data to Third Parties
Your data will only be disclosed if
-
this is necessary for the performance of the contract (e.g. payment service providers, tax advisors),
-
there is a legal obligation,
-
this is necessary to enforce legal claims (e.g. lawyer),
-
or you have expressly consented.
Your data will not be passed on to third parties for advertising purposes without your consent.
7. Storage Period
We store personal data
-
as long as this is necessary for the performance of the contractual relationship and customer support,
-
and beyond that within the framework of statutory retention periods (e.g. under commercial and tax law, generally up to 10 years).
We store health data only as long as it is necessary for safe training planning and then delete or anonymize it, unless legal obligations prevent this.
8. Your Rights
Within the framework of the statutory requirements, you have the following rights:
-
Information about the personal data processed (Art. 15 GDPR)
-
Berichtigung unrichtiger Daten (Art. 16 DSGVO)
-
Erasure (Art. 17 GDPR), insofar as no retention obligations prevent this
-
Restriction of processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Widerspruch gegen bestimmte Verarbeitungen (Art. 21 DSGVO)
-
Revocation of consent granted, with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, an informal message is sufficient:
mhennig@bro-recruiting.de or M&M Holding Investment GmbH, WeLovePilates, Kolonnenstraße 54, 10829 Berlin.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
9. Data Security
We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access. These measures are regularly reviewed and adapted to the state of the art.
10. Website, Cookies and Log Files
When you visit our website, data (e.g. IP address, date and time of access, pages accessed, browser type) may be automatically stored in server log files for technical reasons. This is done to ensure stable and secure operation of the website (Art. 6 (1) (f) GDPR).
Wix may use cookies and similar technologies on the website. For details (type, purpose and storage duration of the cookies as well as your settings options), please refer to the cookie or consent overview provided on the website (cookie banner / cookie policy).
11. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy if the legal situation, our data processing or our offering changes. The current version published on the website applies.
