Spicy Pilates Club

LEGAL

Privacy Policy

1. Data controller

The data controller is Spicy Pilates Club, [FILL IN — exact registered company name], Company ID: [FILL IN], registered seat: [FILL IN], studio at Hálkova 392/1A, 831 03 Bratislava. Contact for data protection matters: spicypilatesclub@gmail.com.

2. What we collect

Name, optionally last name, e-mail address, phone number, day and month of birth (optional — no year), your consents (newsletter, WhatsApp) and the date you gave them, the registration source (web, registration form, front desk, QR code), and technical consent records (timestamp, IP address) needed to prove consent was actually given.

3. What we use it for

To send our newsletter and information about classes, events and offers, for a personal birthday greeting and gift (if we turn that feature on), and to manage your registration if you signed up at the front desk or via the in-studio QR code.

4. Legal basis

Your voluntary consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time and without giving a reason — via the unsubscribe link in every e-mail, or by writing to spicypilatesclub@gmail.com. Withdrawing consent doesn't affect the lawfulness of processing before the withdrawal.

5. How long we keep it

For as long as your consent stands — until you unsubscribe or ask us to delete it. After unsubscribing or a deletion request we permanently delete the personal data; our consent log keeps only an indirect, non-personal record (a hash of the e-mail address) that consent was given and when it was withdrawn, as proof in case of an audit.

6. Who processes it

These providers process your data on our behalf, all based in or bound by EU standard contractual clauses:

  • Supabase — database (Frankfurt, EU region)
  • Resend — email delivery
  • Google — admin login and an internal Google Sheets mirror of the client list (studio-internal only, never shared with third parties)
  • Vercel — website hosting

We never sell or share your data with third parties for marketing purposes.

7. Your rights

You have the right to access, correct, delete, restrict the processing of, port, and object to the processing of your data. If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).

8. Contact

For any question or request (including deletion), reach us at spicypilatesclub@gmail.com.