Privacy Policy
This English version is provided for convenience only. In the event of any discrepancy, the German version shall prevail.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Uta Weber, Augustenstraße 85a, 80798 Munich, Germany, email: info@muenchenpilates.com
2. General information on data processing
As a matter of principle, I process personal data of users of this website only to the extent necessary to provide a functional website and my content and services. Processing takes place only with consent or on another legal basis under Article 6 GDPR. Personal data is erased or its processing restricted as soon as the purpose of storage no longer applies, unless statutory retention obligations prevent this.
3. Hosting and server log files
This website is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. The servers are located in Germany or the European Union. When the website is accessed, the hosting provider processes technically necessary access data. This may include in particular the IP address, date and time of the request, the page accessed, access status or HTTP status code, the amount of data transferred, referrer URL, browser, operating system and language settings.
According to STRATO, full IP addresses are stored for a maximum of seven days in order to detect and prevent attacks. The access statistics and log files provided in the STRATO customer area use anonymised IP addresses; log files can be accessed there for up to six weeks. The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in the secure and reliable provision of this website. Data is not combined with other data sources.
4. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption, recognisable by “https://” in the browser’s address bar.
5. Fonts
The Source Sans 3 font used on this website is hosted locally on my own server. No connection is made to servers operated by Google or any other font provider.
6. Google Maps
This website contains a link to Google Maps for directions to the studio. It is a plain text link that opens Google Maps in a new tab when clicked. No map is embedded in the website. Simply visiting this website therefore does not transmit any data to Google. Responsibility for processing after the link is clicked lies with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
7. Instagram
Where this website links to an Instagram profile, this is a plain text or icon link. No Instagram content is embedded in the website. Simply visiting this website therefore does not transmit any data to Meta or Instagram. Responsibility for processing after the link is clicked lies with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Further information: Instagram Privacy Policy.
8. Cookies and consent management
In its current configuration, the publicly accessible website does not use any analytics or marketing cookies. Contact Form 7 and the local honeypot spam protection used do not set any cookies in their standard configuration. WordPress uses technically necessary cookies in the non-public administration area for logged-in users. These are set on the basis of Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). As the public website does not currently use any cookies or comparable storage technologies that require consent, no cookie consent tool is in use.
9. Analytics and audience measurement
No separate analytics or tracking tool such as Google Analytics or Matomo is integrated into this website. STRATO provides server-generated access statistics in its protected customer area. According to STRATO, the log data provided for this purpose contains anonymised IP addresses. This website does not recognise users across devices or create personal usage profiles.
10. Contact form
The contact form uses Contact Form 7. When you use the form, your last name and email address as mandatory fields and – if you provide them – your first name and message are transmitted to me so that I can process your enquiry and reply to you. Without these mandatory details, I cannot respond to your enquiry. Before submitting, you must confirm that you have read the Privacy Policy. The legal basis is Article 6(1)(b) GDPR, insofar as your enquiry relates to the initiation or performance of a contract, and otherwise Article 6(1)(f) GDPR. My legitimate interest lies in processing your enquiry.
In the standard configuration used, Contact Form 7 does not store the content submitted via the form in the WordPress database. The message is sent to me by email. No additional archiving takes place using the Flamingo plugin. In this configuration, the sender’s IP address is neither included in the notification email nor permanently stored by Contact Form 7. Technical processing in the server log files remains unaffected.
To protect against automated spam, WP Armour – Honeypot Anti Spam is used. This processes a check field, invisible to humans, locally on my own server. In the free version used, no cookies are set, no data is transmitted to external spam protection services and no IP addresses are logged for spam protection. The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in protection against spam and misuse.
The information submitted is deleted once the enquiry has been fully dealt with, unless statutory retention obligations prevent this. It is not passed on to third parties unless this is necessary for the technical delivery of email or required by law.
11. Contact and training relationship
Where you contact me in the context of a training relationship, the separate privacy information in Annex 2 to the Training Agreement applies to the processing of your data in that context, including health-related information.
12. Transfers to third countries
No personal data is currently transferred via this website to countries outside the European Union or the European Economic Area. This does not apply if you yourself follow an external link such as Google Maps or Instagram; the respective provider is responsible for any subsequent processing.
13. Email contact
If you send me an email, I process your email address, your name and the content of your message in order to reply to your enquiry. The legal basis is Article 6(1)(b) GDPR, insofar as your enquiry relates to the initiation or performance of a contract, and otherwise Article 6(1)(f) GDPR. My legitimate interest lies in processing your enquiry. My email account is hosted by STRATO AG. The information on retention periods in section 10 applies accordingly.
14. Automated decision-making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.
15. Your rights as a data subject
Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and to object (Article 21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Article 7(3) GDPR). An informal email to info@muenchenpilates.com is sufficient to exercise your rights.
Right to object: Where I process your data on the basis of my legitimate interest (Article 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
16. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Article 77 GDPR). The authority responsible for me is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany.
17. Status of this Privacy Policy
Last updated: October 2026. Further development of this website or changes in legal requirements may make amendments necessary.