1. Controller
Lona Pilates GmbH
Hanauer Landstraße 14, 60314 Frankfurt am Main
Registered office: Hasselhorstweg 13, 60599 Frankfurt am Main
E-Mail: info@lonapilates.com

2. Data Collected
We process personal data that you provide when using our website/app or booking services, including:

• Name
• E-mail address, phone number
• Payment details (depending on payment method)
• Booking details (classes, memberships, etc.)

3. Purposes and Legal Basis
Your data is processed for:

• Booking and contract fulfilment (Art. 6 (1) b GDPR)
• Customer administration and communication (Art. 6 (1) b, f GDPR)
• Compliance with legal obligations (Art. 6 (1) c GDPR)
• Marketing/newsletters (only with consent, Art. 6 (1) a GDPR)

4. Disclosure of Data
Data may be transferred to third parties only where necessary, e.g.:

• Payment providers (SEPA, credit card, etc.)
• Providers of the booking app/software
  No further transfer to third parties will take place.

5. Storage and Deletion
Personal data is stored only as long as necessary for the stated purposes or as required by law.

6. Cookies & Tracking

• • Our website may use cookies. If tracking tools (e.g. Google Analytics) are used, you will be informed separately and consent will be obtained where necessary.

7. Your Rights
You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7 (3) GDPR)

You may lodge a complaint with the competent supervisory authority:
The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
8. Data Security
We implement technical and organisational measures to protect your data against loss, manipulation, or unauthorised access.

9. Changes to this Privacy Policy
We reserve the right to update this privacy policy to comply with legal requirements or changes in our services.