Privacy Policy

1. Controller

BALLET barre München, proprietor Marta Lucarelli, Pfeuferstr. 2, 81373 München, Germany, info@ballet-barre.com, phone 0152 08 49 29 29.

2. What we process and why

Account and sign-in: your name, email address and the language you have chosen. We need this to manage your bookings and to know who is attending a class.

Bookings: which class you booked, when, and whether you attended.

Credit and payments: your credit movements, your customer reference, payments received and amounts due.

Invoices: the particulars required by law.

Declarations: the version and the time of the declarations you have confirmed.

Emails: we send you confirmations relating to bookings, credit, payments and invoices.

We do not collect health information. The Participation and Health Declaration in Annex 1 to the Terms and Conditions of Participation is a confirmation and contains no information about your health. If you tell the instructor about a limitation before a class, that information is not stored.

3. Legal bases

Processing for your account, bookings, credit, payments and the related emails is carried out to perform our contract with you (Art. 6(1)(b) GDPR).

Invoices are retained to comply with our legal obligations (Art. 6(1)(c) GDPR).

Sign-in records are kept to protect your account against unauthorised access (Art. 6(1)(f) GDPR).

We send marketing emails only with your consent (Art. 6(1)(a) GDPR).

4. Signing in with a code

You sign in using a code we send to your verified email address. We store the time of sign-in and failed attempts.

5. Partner platforms

If you book through a partner platform such as ClassPass, Wellpass or Urban Sports Club, your contract is with that platform. Your name and the platform you stated appear on the class participant list so that your attendance can be recorded at check-in. We do not transmit any information about you to the platform. Your relationship with the platform is governed by its terms and its privacy policy.

6. Recipients

We use carefully selected service providers who work for us and on our instructions (Art. 28 GDPR):

Website and database hosting: domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany. The servers are located in Germany.

Email dispatch: Microsoft Ireland Operations Ltd., Dublin, Ireland. Under its contractual terms, Microsoft may use sub-processors outside the European Union. Such transfers are covered by the European Commission's standard contractual clauses.

Beyond this we disclose your data only where we are legally obliged to do so, for example to the tax authorities.

7. Cookies and storage on your device

We use two cookies that are technically necessary for signing in: “bb_member” for your sign-in as a participant, valid for 365 days, and “bb_admin” for the studio team's sign-in, valid for 30 days.

Your chosen language and the light or dark appearance are stored in your browser's local storage and are not transmitted to us.

We use no analytics or tracking services, embed no third-party content and pass no data to advertising networks. Consent is therefore not required; all storage is strictly necessary for the service you have requested (§ 25 (2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act).

8. How long we keep your data

We keep account data for as long as your account exists. If you delete your account, we delete this data.

Invoices and the related particulars must be retained under tax and commercial law. They are excluded from the deletion of your account and are deleted only once the statutory retention periods have expired. Your invoices stay available in your account for at least three years; in addition we send you every invoice by email when it is issued. We recommend that you download your invoices before deleting your account.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).

You may withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

For all of these matters, please contact info@ballet-barre.com.

10. Automated decisions

No automated decision-making, including profiling, takes place.

11. Changes

We update this policy when our processing changes. The version published on the website applies.

This English version is a translation. The German version is the authoritative one (Section 15 (3)).