Data protection at Pilates Inspired Practice
The protection of personal data is very important to Rainey, Rebecca and Martin Schiek GbR. This privacy policy gives you an overview of what data is collected and for what purpose it is processed.
Rainey, Rebecca und Martin Schiek GbR, which provides the website www.pilatesinspiredpractice.com, collects, processes and stores personal data of users only to the extent necessary for the provision of a functional website and the provision of services, the execution of a contract or to respond to an inquiry. If you have registered for the newsletter, the purpose also extends to use for advertising purposes.
I. Name and address of the responsible party
The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
Rainey, Rebecca and Schiek, Martin GbR
Lenbachstrasse 4
10245 Berlin
Germany
Email: martin@pilatesinspiredpractice.com
II. Legal basis for the processing of personal data
Insofar as the Rainey, Rebecca und Martin Schiek GbR obtains the consent of the data subject for processing operations involving personal data, Article 6 (1) lit a. of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary for the performance and implementation of contractual obligations to which the data subject is a party, Article 6 (1) lit. b EU GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, for example, for compliance with tax obligations, Art. 6 (1) lit. c of the EU-DSGVO serves as the legal basis.
If the processing of personal data is necessary for the protection of the legitimate interest of our company, Article 6 (1) lit. f of the EU-DSGVO serves as the legal basis for the processing.
III. Storage period and deletion of data
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in regulations, laws or other provisions, such as statutory retention periods for proper accounting and tax law requirements to which our company is subject.
IV. Server log files
1. Description and scope of data processing
Each time our website is called up, data and information (so-called log files) are automatically collected from the computer system of the calling computer. The following data is collected:
1. Date and time of access
2. Message about the successful retrieval
3. Information about the browser used and the user's operating system
4. The user's Internet service provider
5. The IP address of the user
The data is stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis
The legal basis for the temporary storage of the data and the log files is Article 6 (1) lit. f EU-DSGVO.
3. Purpose of the data processing
The storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the offer, for statistical evaluations, for the purpose of business operations and to ensure the security of the information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
4. Duration of data storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible.
5. Possibility of objection and elimination
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
V. USE OF COOKIES
1. Description and scope of data processing
Our website uses "cookies" to make our website user-friendly, to provide a feature-rich online service, and to verify your authorization to use the service offering. Cookies are data records that are stored by a web server on the user's computer. They are sent back to the cookie-setting web server upon reconnection with the aim of recognizing the user and his or her settings. It is a file created locally on the user's computer, which assigns the user a specific identity - consisting of numbers and letters.
2. Legal basis
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f EU-DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 (1) lit. a EU-DSGVO if the user has given his consent in this regard.
3. Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.
4. Duration of data storage
Cookies are stored on the user's computer and transmitted to our website by the user. Therefore, you as the user have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for this website, it may no longer be possible to use all functions of the website to their full extent.
VI. Registration and conclusion of contract
1. Description and scope of data processing
On the website www.pilatesinspiredpractice.com, Rainey, Rebecca und Martin Schiek GbR offers users the opportunity to register as members by providing personal data and to use additional content and services after registration with a login. When you register on our website, we process the data required for the conclusion, execution or termination of the contract with you.
This includes:
1. name and first name
2. e-mail address
3. date and time of registration
4. address
5. information about the chosen membership
Your payment information will be shared with our contracted payment service providers PayPal and Stripe, who will process the payment(s) on our behalf.
2. Legal basis
The legal basis for the processing of data is Article 6 (1) lit. a EU-DSGVO if the user has given his consent, and Article 6 (1) lit. b EU-DSGVO if the user is a party to a contract or for the performance of pre-contractual measures.
3. Purpose of data processing
Registration of the user is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures. Only registered users have access to all contents of the website.
4. Duration of data storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. We point out that even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.
5. Possibility of objection and elimination
As a user, you have the option to terminate the registration on our platform at any time. They can do this in their user account (via the link "Dashboard"). Premature deletion of data is only possible insofar as contractual or legal obligations do not prevent deletion.
VII. Newsletter
1. Description and scope of data processing
On our website you can subscribe to a regular, free newsletter and we are very pleased if you take up this offer. The newsletter is only sent on the basis of and after the user's registration. When registering for the newsletter, the data from the input mask is collected and transmitted to Rainey, Rebecca und Martin Schiek GbR and the third-party provider Mailchimp. This involves the following data:
1. First name and last name
2. Email address
3. The date and time of registration
4. The language of the user
5. The place where the registration was carried out
In order to verify that a registration is actually made by the owner of an email address, we use the "double-opt-in" procedure. This means that we will only send you newsletters if you confirm your registration after providing us with your e-mail address via an e-mail sent by us and a link contained therein.
For the processing of data, your consent is obtained during the registration process and reference is made to this privacy policy and the privacy policy of the third-party provider Mailchimp. No data will be collected without your consent. Your registration for the newsletter and the confirmation are logged in order to be able to legally prove the registration process.
2. Legal basis
The legal basis for the processing of data after registration for the newsletter by the user is Article 6 (1) lit. a EU-DSGVO if the user has given his consent.
3. Purpose of the data processing
The collection of the user's e-mail address serves to deliver our newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used, as well as to personalize the newsletter.
4. Duration of data storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Accordingly, the user's e-mail address will be stored as long as the subscription to the newsletter is active.
5. Possibility of objection and elimination
You can revoke your consent to the storage of your data and its use for sending the newsletter at any time with effect for the future. In each newsletter via email, you will find a corresponding link for this purpose or you can write us an email to martin@pilatesinspiredpractice.com.
VIII. Contact
1. Description and scope of data processing
On our website, we offer a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask is transmitted to Rainey, Rebecca und Martin Schiek GbR and stored. This involves the following data:
a) Name and first name of the user
b) Email address of the user
Alternatively, it is possible to contact us via the e-mail address info@pilatesinspiredpractice.com. In this case, the personal data of the user transmitted with the email will be stored.
2. Legal basis
The legal basis for the processing of the data is Art. 6 (1) lit. a DSGVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
3. Purpose of the data processing
The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation shall be deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.
5. Possibility of objection and elimination
The user has the possibility to revoke his consent to the processing of personal data at any time. To object to the storage of personal data at any time, please contact Martin Schiek by email at martin@pilatesinspiredpracitse.com. In such a case, the conversation cannot be continued, and the data will be deleted.
IX. Third-party supplier
1. General
In principle, the data you provide will not be made available to third parties. A transfer to authorities and state institutions entitled to receive information will only take place within the framework of the legal obligations to provide information and in the event of a court decision obligating us to do so. In these cases, Rainey, Rebecca und Martin Schiek GbR may provide information, e.g. for the assertion, exercise and defense of legal claims, enforcement of existing contracts, in the context of fraud allegations, security measures or generally legally applicable regulations. Personal data will not be disclosed outside the scope described here without express consent. Under no circumstances will Rainey, Rebecca und Martin Schiek GbR sell or rent personal data to third parties.
We use the following third-party services:
a) Uscreen,1875 Connecticut Ave 10th Floor, NW, Washington, District of Columbia 20009.
We use a service called Uscreen to host our website. Uscreen provides a video-on-demand platform through which we offer our content. Your data is stored on Uscreen's servers.
Every time you access the website, Uscreen collects server log files to ensure the functionality of the website and the security of the information technology systems. These include:
1. Date and time of access
2. Name of the accessed website
3. Message about successful retrieval
4. Information about the user's browser and operating system
5. The user's Internet service provider
6. The IP address of the user
When a user registers, Uscreen collects and processes data that is necessary to fulfill a contract with the user and to ensure individual access to the platform. During the payment process, data necessary for verification is processed to ensure the payment service, which is handled by Stripe and PayPal. The data collected by Uscreen in the registration and payment process are:
1. First name and surname
2. Country of residence
3. Email address
4. Information that serves to verify the payment. This includes - only if necessary: the last 4 digits of the credit card or the email address stored at PayPal.
When using videos, Uscreen collects and processes data in order to personalize the offer. This includes:
1. Video ID, of the video viewed
2. Time up to which the user has watched the video
3. Videos marked as favorites
Uscreen stores the data from the data subjects, up to 30 days after the user's account has been deleted. This can be done by the users themselves. The comments remain stored permanently - or until an objection by the member concerned, which is possible at any time. For such an objection, please contact martin@pilatesinspiredpractice.com.
For more information, please refer to Uscreen's privacy policy: https://www.uscreen.tv/privacy-policy#h-2-data-collection-use
b) CookiePro: OneTrust B.V., 82 St. John Street, Farringdon, London EC1M 4JN, United Kingdom.
To allow (or refuse) our users to use cookies and to document their consent, we use the CookiePro software from the provider OneTrust.
OneTrust sets a cookie in which the selected cookie settings of the respective user are stored so that a user does not have to select his or her settings again each time he or she visits our website. The use of the OneTrust cookie is mandatory for the above-mentioned purposes and thus serves both to fulfill legal requirements and to simplify the use of our offer. This is also our legitimate interests within the meaning of Art. 6 (1) lit. f DSGVO, which serves as the legal basis for our use of OneTrust. OneTrust is certified under the Privacy Shield agreement.
You can view the privacy policy of OneTrust here: https://www.onetrust.com/privacy/
c) Mailchimp: The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000. Atlanta, GA 30308 USA
We use the service of Mailchimp to send our newsletter. The newsletter is only sent after registration and user consent to Mailchimp's privacy policy and the privacy policy and Terms & Conditions of www.pilatesinspiredpractice.com. We have no influence on the data processing operations that may be triggered by the use of Mailchimp.
Mailchimp uses cookies to collect information about visitors. These are text files that are stored on your computer and enable an analysis of your use of the website. Information such as operating system, browser, IP address, referrer URL is collected. The information generated by the cookie about your use of the website will be transmitted to and stored by Mailchimp on servers in the United States You can prevent the storage of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Mailchimp operates under the Privacy Shield agreement. This means that the requirements of the Privacy Shield agreement are equal to the level of data protection in the European Union and that the data is treated accordingly.
You can view the privacy policy of Mailchimp here: https://mailchimp.com/legal/privacy
d) PayPal: PayPal S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you register with us and decide to pay with PayPal, your payment data (name, PayPal ID, mail address, invoice amount, currency and transaction number) will be forwarded to PayPal as part of the payment processing. The forwarding of the data takes place in accordance with Art. 6 (1) lit. b DSGVO and only insofar as this is necessary for the payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values.
You can view PayPal's privacy policy here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
e) Stripe: Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
If you register with us and decide to pay with Stripe, your payment data (name, credit card number, invoice amount, currency and transaction number) will be forwarded to Stripe as part of the payment processing. The data is forwarded in accordance with Art. 6 (1) lit. b DSGVO and only to the extent necessary for the payment processing.
You can view the privacy policy of Stripe here: https://stripe.com/en-de/privacy
f) Google Web Fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
For the uniform display of fonts, we use the Google Fonts service on our website. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
User data is not stored by us in the context of the use of Google Fonts. However, the integration of Google Fonts on our website enables Google to collect data. For this purpose, the browser you use must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address.
Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers, as a clear and reader-friendly presentation facilitates the transfer of information and knowledge. Since Google Fonts are optimized for the web, data volume can be saved and loading time accelerated, which improves the quality of our web presence. The legal basis for the processing of personal data is Art. 6 (1) lit. f DSGVO.
Information about the purpose and scope of data processing and the storage period on the part of Google can be found in the corresponding privacy policy at:
https://policies.google.com/privacy?hl=en-US
g) Google Forms: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
We use the Google Forms service for our contact form. If you do not wish to enter your data in the Google Form, you can simply write us an email.
For information about the purpose and scope of data processing as well as the storage period on the part of Google, please refer to the corresponding privacy policy at: https://policies.google.com/privacy?hl=en-US
h) Zoom: 55 Almaden Boulevard, Suite 600, San Jose, CA, 95113, United States.
If you use the "PiP Pro Membership" product or have purchased a live class in the "Pay for PiP" model, you get access to our online live group classes. We conduct these classes with the web conferencing tool Zoom. The streaming takes place either directly in your browser or you can download zoom to your phone, tablet, or computer.
You can view Zoom's privacy policy here: https://explore.zoom.us/en/privacy/
i) Instagram, a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We use a social media button from Instagram on our website to refer to our Instagram channel.
Direct contact between the social network and you is only established when you actively click on the button. Unless the social network button is clicked, no data is collected, activity is logged or a surfing profile is created. If the button is clicked, Instagram receives the information that you have accessed our website. This does not require a user account with the respective service, nor do you have to be logged in if you have a user account. If, on the other hand, you have a user account with Instagram and are logged in, this data is directly assigned to the account. This can be prevented by logging out of your user account of the respective service before clicking the button.
You can find the link to Facebook's privacy policy here: https://www.facebook.com/about/privacy/
X. Your rights
In connection with the processing of personal data by Rainey, Rebecca and Schiek, Martin GbR, you have the following data subject rights:
1. Right of revocation
If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data in accordance with Article 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation.
If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose.
If you would like to exercise your right of revocation or objection, please send us an e-mail to martin@pilatesinspiredpractice.com
2. Further rights
The applicable data protection law grants you comprehensive data subject rights with regard to the processing of your personal data, about which we inform you below:
The right to information about your personal data stored by us (Article 15 DSGVO). In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it was collected directly from you.
The right to have inaccurate data corrected or to have correct data completed (Article 16 DSGVO).
The right to have your data stored by us deleted (Article 17 DSGVO), insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us or is necessary for the assertion, exercise or defense of legal claims
The right to restrict the processing of your data (Article 18 DSGVO), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure; the controller no longer requires the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 DSGVO.
The right to data portability (Article 20 DSGVO), i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another controller.
The right to lodge a complaint with a supervisory authority (Art. 77 EU-DSGVO), i.e. the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates this Regulation. In the present case, the competent supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219
10969 Berlin
Telephone: 030/13 889-0
Fax: 030/215-5050
XI. Modification of the Privacy Policy
Rainey, Rebecca and Martin Schiek GbR reserves the right to change this privacy policy at any time. You are requested to inform yourself regularly about the content of the data protection declaration.
Status April 2021.