1. Controller within the meaning of GDPR
The controller responsible for data processing on this website is:
Halime Aydin-Darbas
BSR Pilates
Pfützenstrasse 91, 64347 Griesheim
Email: bsrpilates@gmail.com
2. Access data & server log files
When you visit this website, our hosting provider (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus) automatically collects information that your browser transmits. This includes in particular:
- IP address (shortened)
- Date and time of access
- Page or file requested
- Volume of data transferred
- Referrer URL
- Browser, operating system & language
Processing takes place on the basis of Art. 6 (1) lit. f GDPR to ensure stable and secure operation of the website. Log files are deleted after a maximum of 14 days, unless security-related incidents require longer storage.
3. Cookies
This website uses strictly necessary cookies (e.g. to store your language preference). The legal basis is § 25 (2) TTDSG in conjunction with Art. 6 (1) lit. f GDPR. Optional cookies (e.g. for analytics) are only set on the basis of your consent according to Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. You can withdraw your consent at any time via the cookie settings.
4. Google Analytics 4
If you have consented, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyse the use of the website. The information generated is generally transferred to a Google server in the USA and stored there. The IP address is anonymised before storage (IP masking).
The legal basis is Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG (consent). Data transfer to the USA is based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. You can withdraw your consent at any time with effect for the future by adjusting your cookie settings. You can also install the Google Analytics browser opt-out add-on: tools.google.com/dlpage/gaoptout.
Further information: policies.google.com/privacy
5. Instagram embeds
On individual pages we embed content from Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). When an embed is loaded, data (incl. IP address, browser information) is transmitted to Meta, and Meta may set cookies.
Instagram embeds are loaded only after your consent via the cookie banner (category "Third-party content"). Legal basis: Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. You can withdraw your consent at any time via the cookie settings in the footer.
Meta privacy policy: privacycenter.instagram.com/policy
6. Google Maps
On individual pages (e.g. to display our studio location) we embed Google Maps. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map loads, data (incl. IP address, browser, location if applicable) is transmitted to Google, and Google may set cookies.
Google Maps is loaded only after your consent via the cookie banner (category "Third-party content"). Legal basis: Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. Data transfer to the USA is based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
Google privacy policy: policies.google.com/privacy
7. Contact form & email
When you contact us via the contact form or by email, your details (name, email address, phone number if provided and the content of your message) are processed for the purpose of handling your enquiry. The data is sent to bsrpilates@gmail.com and stored there.
The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures) and Art. 6 (1) lit. f GDPR (legitimate interest in responding to your request). We delete your enquiry once it has been finally processed, provided there are no legal retention obligations.
8. Booking system (bsport)
For class bookings, memberships and payments we use the bsport platform (bsport SAS, 11 rue Saint-Florentin, 75008 Paris, France). When you click a booking button or use the booking widget on our website, data is transferred to bsport (incl. name, email, selected class, payment data). This processing is based on Art. 6 (1) lit. b GDPR (performance of contract).
bsport privacy policy: bsport.io/privacy-policy
9. Instagram & WhatsApp (external links)
Our website includes links to Instagram (Meta Platforms Ireland Ltd.) and WhatsApp (WhatsApp Ireland Ltd.). Data is only transmitted to these providers when you click on the links. We have no influence on which data is collected there or how it is processed. Please refer to the respective privacy policies:
- Instagram / Meta: privacycenter.instagram.com/policy
- WhatsApp: whatsapp.com/legal/privacy-policy-eea
10. Your rights
You have the right at any time to:
- Information (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 (3) GDPR)
For this, contact us informally at: bsrpilates@gmail.com
11. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden
datenschutz.hessen.de
12. Status & changes
This privacy policy is currently valid and was last updated in April 2026. Due to further development of the website or amended legal requirements, it may become necessary to revise this declaration.