Legal

Privacy Policy

1. Controller

Pilacha GmbH, Reformer Pilates Studio
Bismarckstraße 42
70197 Stuttgart
Germany
Phone: +49 176 51207809
Email: info@pilacha.com

Represented by the Managing Director: Stefanie Mosebach, Wannenstraße 14, 70199 Stuttgart. Responsible within the meaning of the General Data Protection Regulation (GDPR).

2. General information on data processing

We take the protection of your personal data very seriously. Personal data is processed by us exclusively within the framework of the legal provisions of the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications-Telemedia Data Protection Act (TTDSG).

Use of our website is generally possible without providing personal data. If you contact us by email, telephone or via booking systems, your data will be used exclusively to process your request.

3. Collection and storage of personal data

We process personal data when you:

book courses, training or services with us,
contact us by email or via an online form,
create a user account in our booking system,
use payment services such as PayPal or Stripe,
contact us via social media (e.g. Instagram, TikTok).

Data processed may include in particular: name, address, telephone number, email address, payment information, booking data and communication content.

4. Purposes of data processing

We process your personal data for the following purposes:

to fulfil the contract (e.g. running Pilates classes, billing),
to communicate with you,
to manage bookings and memberships,
to process payments,
to comply with legal obligations (e.g. tax retention requirements).

5. Legal bases

Data processing is carried out on the basis of:

Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures,
Art. 6(1)(a) GDPR – consent (e.g. for the newsletter),
Art. 6(1)(c) GDPR – legal obligation,
Art. 6(1)(f) GDPR – legitimate interest (e.g. improving our services).

6. Booking system “bsport”

For course management and bookings we use the provider BSPORT SOLUTION, 14 rue Jules Vanzuppe, 94200 Ivry-sur-Seine, France. Use is based on Art. 6(1)(b) GDPR (performance of a contract). A data processing agreement (DPA) pursuant to Art. 28 GDPR exists with bsport.

Further information: https://www.bsport.io/privacy-policy

7. Cooperation with Wellpass

We work with Wellpass (Urban Sports Club / Wellpass GmbH) to enable members to participate via this platform. Personal data (e.g. name, member ID) is processed exclusively for course booking and attendance confirmation.

Wellpass privacy policy: https://www.wellpass.de/datenschutz

8. Payment providers

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. Privacy policy

Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Dublin 2, Ireland. Privacy policy

Payment data is processed exclusively via encrypted connections.

9. Social media

We operate the following social media profiles:
Instagram: @pilacha_sculpt
TikTok: @pilacha_sculpt

When visiting these pages, personal data may be processed by the respective platforms. We have no influence on the data processing of these providers. Further information can be found in the privacy policies of Instagram (Meta Platforms Ireland Ltd.) and TikTok Technology Limited.

10. Newsletter (future)

If you subscribe to our newsletter in the future, we will process your data on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time via a link in the newsletter.

11. Cookies & tracking (TTDSG)

When visiting our website, technically necessary cookies may be set. If optional cookies or tracking technologies (e.g. for reach measurement or marketing purposes) are used, this is done exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. You can withdraw your consent at any time via the cookie banner or in your browser settings.

11a. Google Ads (Conversion Tracking)

We use Google Ads conversion tracking, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to measure whether visitors who click on our Google ads later complete a booking on our website. The relevant cookies are only set after you give your consent via our cookie banner, pursuant to Art. 6(1)(a) GDPR in conjunction with \u00a7 25(1) TTDSG. You can withdraw your consent at any time via the "Cookie Settings" link in our website footer. Further information: Google Privacy Policy.

12. Storage period

We store personal data only for as long as is necessary to fulfil the respective purposes or as long as statutory retention obligations exist. The data is then deleted or anonymised.

13. Your rights

Under the GDPR you have the following rights:

right of access (Art. 15 GDPR)
right to rectification (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: info@pilacha.com. You also have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart.

14. Data security

We use technical and organisational security measures to protect your data against loss, manipulation, destruction or unauthorised access. Our security measures are regularly reviewed and adapted to the state of the art.

15. Validity and changes to this privacy policy

This privacy policy is currently valid. Further development of our website or legal changes may make adjustments necessary. The current version is always available on our website.

Last updated: 17 October 2025