Privacy Policy

1. Controller

MOMAX Pilates GmbH
Implerstraße 84
81371 Munich, Germany
Phone: +49 1525 9884732
Email: monica.gomis@momax-pilates.net
Represented by the Managing Director Monica Gomis Vicedo
Commercial register: HRB 305093, Local Court of Munich
VAT ID: DE457968169

2. Hosting and server log files

Our website is operated by OVH Hosting Inc. (Canada). When you access the website, technical access data are automatically recorded and stored in server log files, in particular IP address, date and time of access, the page requested and the browser type. This processing serves the secure and stable operation of the website. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). For Canada, an adequacy decision of the European Commission applies.

3. Consent and cookies

Our website uses cookies. Technically necessary cookies are required to operate the website. In addition, we use services that are only loaded after your explicit consent, in particular Google Analytics, Google Fonts and YouTube. You give your consent through our consent banner. You can withdraw your consent at any time with effect for the future and adjust your settings. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

4. Web analytics with Google Analytics

We use Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and collects information about your use of our website, in particular a shortened IP address, device and browser data and the pages viewed. This data helps us evaluate the reach and use of our offering. A transfer to Google LLC in the USA cannot be excluded. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time.

5. Google Fonts

To display fonts consistently, our website embeds Google Fonts, a service of Google Ireland Limited. When a page is opened, your browser loads the required fonts from Google servers. In doing so, your IP address is transmitted to Google. Legal basis: your consent (Art. 6(1)(a) GDPR).

6. YouTube

We embed videos from the YouTube platform, a service of Google Ireland Limited. When you play a video, a connection to YouTube servers is established and your IP address is transmitted to Google. A transfer to the USA may take place. Legal basis: your consent (Art. 6(1)(a) GDPR).

7. Instagram

We link to our profile on Instagram and embed Instagram content, a service of Meta Platforms Ireland Limited, Dublin, Ireland. When such content is accessed, a connection to Meta servers may be established. Legal basis: your consent or our legitimate interest in an appealing external presentation (Art. 6(1)(a) or (f) GDPR).

8. Class booking, newsletter and gift cards via Eversports

For class booking, sending our newsletter and selling gift cards, we use the Eversports platform of Eversports GmbH, Vienna, Austria. When you book a class, sign up for our newsletter or purchase a gift card, Eversports processes the data required for this on our behalf, in particular name, email address and booking and payment data. A data processing agreement is in place with Eversports. Legal basis: performance of the contract, or for the newsletter your consent (Art. 6(1)(b) or (a) GDPR). The Eversports privacy policy applies in addition.

9. Payment processing

To pay for gift cards, we use the following payment providers depending on your selection: Stripe Payments Europe Limited, Dublin, Ireland, and PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. The data required for payment are transmitted directly to the payment provider you select and processed there. Stripe also handles card, Google Pay and Apple Pay payments. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). The privacy terms of the respective provider apply in addition.

10. Contact form

When you use our contact form, we process the data you provide, in particular name, email address and your message, in order to handle your request. Legal basis: handling your request and our legitimate interest in responding (Art. 6(1)(b) and (f) GDPR). The data are deleted once your request has been fully handled and no statutory retention obligations apply.

11. Retention period

We store personal data only for as long as necessary for the stated purposes. After that, the data are deleted unless statutory retention obligations apply. Server log files are generally deleted within a few days. Data from bookings, gift card purchases and payments are subject to the statutory retention periods of six or ten years (Section 257 HGB, Section 147 AO).

12. Transfers to third countries

Some of the named services may transfer personal data to countries outside the European Union, in particular to the USA (Google Analytics, Google Fonts, YouTube). Where the providers are certified under the EU-U.S. Data Privacy Framework, an adequacy decision of the European Commission applies. In addition, we base transfers on the Standard Contractual Clauses of the European Commission (Art. 46 GDPR). Our hosting takes place in Canada, for which an adequacy decision applies.

13. Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). Where you have consented to processing, you can withdraw that consent at any time with effect for the future. An informal message to the contact details above is sufficient to exercise your rights.

14. Right to object

Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to that processing (Art. 21 GDPR).

15. Automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

16. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

17. Validity and changes to this privacy policy

This privacy policy is currently valid. As our website develops or due to changed legal requirements, it may become necessary to amend this privacy policy.

Last updated: July 2026