1.Who we are
The Studio Estepona
Trading name of PILATES DEL SUR S.L.
Registered in Spain
Registered address: Calle Caddie, Galera Park, Local 4-5 29693Estepona,
We are the data controller responsible for processing your personal data.
2. What Information We Collect
We collect two types of information:
A. Information You Provide to Us
When you create an account, book a class, purchase a membership, or contact us, you may provide:
- Name and surname
- Date of birth
- Email address
- Phone number
- Address (optional)
- Payment information (processed securely by third-party providers)
- Health information voluntarily shared through the PAR-Q form (for safety purposes)
We do not collect sensitive data unless voluntarily provided for safety.
B. Information Automatically Collected
When you visit our website or booking platform, we may automatically collect:
- IP address
- Browser type and version
- Device type
- Operating system
- Approximate location
- Pages visited and time spent
- Cookies and analytics data
This data helps us improve our services, security, and user experience.
3. How We Use Your Personal Data
We only use your information for legitimate and essential business purposes:
A. To Provide Our Services
- Create and manage your User Account
- Process bookings, purchases, and membership renewals
- Send class confirmations, reminders, cancellations
- Manage waitlists
- Ensure safety in the studio (e.g., PAR-Q information)
B. Communication
- Respond to enquiries
- Send updates, notifications, and administrative messages
- Send marketing emails/newsletters (only with your consent)
C. Safety & Security
- Prevent fraud
- Maintain website security
- Ensure safe participation in physical activities
D. Business Operations
Legal compliance (invoices, tax obligations, required documentation)
Internal audits
Analytics to improve our website and services
4. Legal Basis for Processing (GDPR)
We process your data under the following legal grounds:
- Contractual necessity – to provide you with the services you purchase
- Legitimate interest – to improve our services, ensure security, prevent fraud
- Legal obligation – invoices, taxation, safety documentation
- Consent – marketing communications, cookies
You may withdraw consent at any time.
5. Who We Share Your Data With
We only share your data when necessary and always securely:
A. Service Providers
- Booking & scheduling platform
- Payment processors (encrypted and PCI-compliant)
- Email/SMS providers
- Website hosting providers
- Analytics tools (Google Analytics or similar)
These providers act as data processors and comply with GDPR.
B. Legal Authorities
If required by law (courts, tax agencies, police).
We NEVER:
Share it with unrelated third parties
Sell your data
Trade your data
6. How We Protect Your Data
We use industry-standard security measures:
- HTTPS encrypted website
- Encrypted storage on secure servers
- Firewalls and intrusion protection
- Encrypted backups
- Strict access control (only authorised personnel)
- Minimal data retention
- Regular security updates
Although no system is 100% secure, we follow best practices and continuously update our procedures.
7. Your GDPR Rights
Under GDPR, you have full control over your personal data. You may:
✔ Right of Access
Request a copy of your personal data.
✔ Right to Rectification
Correct inaccurate or incomplete information.
✔ Right to Erasure (“Right to be Forgotten”)
Request deletion of your data, unless required by law.
✔ Right to Data Portability
Ask us to transfer your data to another provider.
✔ Right to Restrict Processing
Limit how your data is used.
✔ Right to Object
Object to processing based on legitimate interests or marketing.
To exercise any right, contact us.We respond within 30 days, as required by law.
8. Retention of Your Data
We keep your data only as long as necessary:
- Active accounts: as long as you use our services
- Inactive accounts: up to 2 years
- Invoices & financial data: 5 years (Spanish tax law)
- Health forms: deleted when no longer relevant or after account closure
- Cookies: depending on browser settings
When data is no longer needed, it is securely deleted.
9. Cookies
Cookies help us understand how visitors use our website and improve your experience.
We use:
- Essential cookies – required for site functionality
- Analytics cookies – understand traffic and performance
- Marketing cookies – deliver relevant ads (optional)
You can accept, decline, or manage cookies at any time through your browser settings.
Disabling cookies may limit website functionality.
10. Third-Party Marketing & Remarketing
We may use advertising tools (e.g., Google Ads, Meta Ads) that use cookies to:
- Show relevant ads
- Track website performance
- Remarket to visitors who have shown interest
You can opt out at any time via:
https://www.youronlinechoices.eu/
11. SMS / WhatsApp Communications (Optional)
If you consent to SMS/WhatsApp reminders:
- Message and data rates may apply
- You may unsubscribe at any time by replying STOP
- We do not charge for SMS delivery
12. External Links
Our website may contain links to external sites.
We are not responsible for their content or privacy practices.
13. Children’s Privacy
We do not knowingly collect data from children under 16.
If you believe we have collected such data, contact us and we will delete it immediately.
14. How to Contact Us
For all privacy inquiries, or to exercise your rights:
📧 Write us an email
🏷️ Subject: Privacy Request – The Studio Estepona
15. Changes to This Privacy Policy
We may update this policy periodically.
The “Effective Date” at the top will indicate the latest version.