Privacy Policy

Courtesy translation. The German Datenschutzerklärung is the legally binding version; in case of doubt the German text prevails.

Version: August 2026

1. Controller

M&M Holding Investment GmbH
Wilmersdorfer Straße 98–99, 10629 Berlin
Studio: WeLovePilates, Kolonnenstraße 54, 10829 Berlin

Managing directors: Mike Hennig, Miriam Hennig
Phone: 0176 56841078 · E-mail: info@welovepilates.de

2. Data processed and purposes

We process personal data when you book classes or cards, create a customer account, contact us or visit our website.

• Master data: name, address, e-mail address, phone number, date of birth
• Contract and booking data: booked classes, cards, credits, attendances
• Payment data: payment method and payment status. Card details are processed exclusively by the payment service provider; we do not store them.
• Website usage data: IP address, date and time of access, pages visited, browser used

Legal bases: performance of a contract (Art. 6 (1) (b) GDPR), legal obligations such as tax retention periods ((c)), legitimate interest in the secure operation of the website ((f)) and consent where given ((a)).

3. Hosting and server logs

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes the data generated when you visit the website on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place.

When you access our pages, server log data is recorded automatically: IP address, time of access, address accessed, amount of data transferred, browser type and operating system. This data serves the secure and trouble-free operation, is not merged with other data and is deleted after a short time. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR).

Transmission is encrypted via TLS. You can recognise this by the padlock symbol in your browser.

4. Cookies and consent

We use technically necessary storage so that the website works. This includes in particular storing your cookie decision itself.

Everything else – in particular audience measurement – is only loaded after you have consented. On your first visit a notice appears with two equivalent options: “Essential only” and “Accept”. As long as you do not consent, no measurement is loaded and no data is transmitted to Google.

You can change your decision at any time via the “Cookie settings” link at the bottom of every page. Withdrawal applies to the future; processing carried out until then remains lawful.

The legal basis for storing non-essential information on your device is § 25 (1) TDDDG, and for the subsequent processing your consent pursuant to Art. 6 (1) (a) GDPR.

5. Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: we want to understand how our website is used – which pages are visited, how visitors find us and whether they find their way to booking a class. We use this to improve what we offer.

Data collected: pages visited, dwell time, approximate location at city level, device and browser used, source of the visit and certain interactions – such as clicking the timetable, our phone number or our e-mail address. The IP address is truncated by Google and not stored permanently.

We do not create profiles of individual persons from this and do not merge the data with your booking data.

Transfer to third countries: processing in the USA by Google LLC cannot be excluded. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses are also in place. A level of protection fully equivalent to the European one can nevertheless not be guaranteed. With your consent you expressly agree to this transfer (Art. 49 (1) (a) GDPR).

Retention: usage data is retained in Google Analytics for a maximum of 14 months and then deleted automatically.

Legal basis: your consent (Art. 6 (1) (a) GDPR), revocable via “Cookie settings”.

Further information: policies.google.com/privacy

6. Google Ads

We advertise our studio via Google Ads. To recognise which ads lead to an enquiry, selected interactions mentioned in section 5 are transmitted from Google Analytics to our Google Ads account. This too happens only after your consent and on the same legal basis. Without consent no transmission takes place.

7. Booking system Eversports

For class booking, card management and payment processing we use the booking system of Eversports GmbH, Ungargasse 64–66, 1030 Vienna, Austria.

The Eversports timetable is embedded on our timetable page. When the page is loaded, a connection to Eversports servers is established and your IP address is transmitted. The legal basis is our legitimate interest in a functioning online booking and the initiation of a contract (Art. 6 (1) (b) and (f) GDPR).

When you select a class, you are redirected to the Eversports website. The actual booking, the creation of a customer account and payment take place there. From that point on, the Eversports privacy policy applies: eversports.de/datenschutz

8. Fonts, images and videos

We embed the font used locally from our own server. No request is made to Google Fonts.

Likewise, all images and videos are on our own server – including the recordings originally published on Instagram. When viewing our pages, no connection is established to Instagram, Meta or other social networks.

9. Contact

If you contact us by e-mail or phone, we process your details to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise our legitimate interest in responding ((f)). We delete the data as soon as the enquiry has been finally dealt with and no retention obligations stand in the way.

10. Recipients

Data is only passed on where necessary for the performance of the contract – for example to Eversports and the payment service provider –, where we are legally obliged to do so or where you have consented. Data is not sold.

11. Retention period

We store personal data only for as long as necessary for the stated purposes. We retain accounting-relevant documents in accordance with commercial and tax law periods of up to ten years.

12. Health-related information

If you voluntarily provide us with information about your state of health – for example previous illnesses, pregnancy or injuries –, we process it exclusively for the purpose of your safe participation in training and only on the basis of your express consent pursuant to Art. 9 (2) (a) GDPR. We do not collect health data via our website.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You may withdraw any consent given at any time with effect for the future.

A message to the contact details above is sufficient to exercise these rights.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

15. Changes

We adapt this policy when our website or the legal situation changes. The version published here applies in each case.