Datenschutzerklärung

This is an English translation of our German privacy notice, provided for convenience. In case of doubt the German version is the binding one.

1. Controller

MOVE:MENT Studios GmbH
Lübecker Straße 128, 22087 Hamburg, Germany
Telephone: +49 40 4318 2270
Email: datenschutz@movement-studios.de

We have not appointed a data protection officer because the statutory thresholds do not apply to us. Please send any data protection question to the address above.

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. A data processing agreement is in place; transfers to the USA are based on the EU standard contractual clauses.

When you open the site, your browser transmits information that is stored in server log files: a shortened IP address, the date and time of the request, the page requested, the volume of data transferred, the status code, the referrer and your browser and operating system. We cannot attribute this data to any individual and use it solely to run the site securely. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the delivery and protection of the website. Log files are deleted after 30 days.

3. Storage on your device

We use no tracking cookies and no analytics services. We store only two entries in your browser’s local storage:

• movement:studio — the studio you chose (Hohenfelde, Wandsbek or Harburg), so that the schedule, teachers, map and prices are right on your next visit.
• movement:consent:v1 — your decision about loading external maps.

Both entries stay on your device, are never transmitted to us and do not identify you. You can delete them at any time in your browser settings. The legal basis is § 25 (2) no. 2 TDDG, as these entries are strictly necessary for a function you explicitly requested, together with Art. 6 (1) (f) GDPR. Your language choice is carried in the page address (/en or /de) only.

4. Maps (OpenStreetMap)

The Locations page can embed maps from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom. These maps load only after you have agreed, either in the consent banner or directly on the individual map. Until then no connection to OpenStreetMap is made and you see a placeholder graphic we drew ourselves.

When the map loads, your IP address and information about your browser and device are transmitted to OpenStreetMap. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDG. You may withdraw that consent at any time using the “Cookie settings” link in the footer; the lawfulness of processing carried out before withdrawal is unaffected.

5. Enquiry forms

Through this site you can request a trial class, ask for a corporate wellness offer, sign up to be told when our app launches, or request an access link for the member area. We process only what you enter — depending on the form, that is your name, email address, company, the number of seats, your preferred studio, the style you are interested in, your experience and your free-text message.

The purpose is to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns the conclusion or performance of a contract, and otherwise Art. 6 (1) (a) GDPR on the basis of your consent. We delete enquiry data as soon as it is no longer needed to answer you, and at the latest twelve months after our last contact, unless statutory retention periods say otherwise. Providing the data is voluntary, but without it we cannot reply.

6. Membership, punch cards and class attendance

For a membership, a 10er-Karte or a drop-in class we process your name, address, date of birth, contact details, bank details for SEPA direct debit, your chosen studio and your class bookings. The legal basis is Art. 6 (1) (b) GDPR. After the contract ends we delete this data unless commercial or tax law requires us to keep it for six or ten years (§ 257 HGB, § 147 AO).

Telling us about injuries or health limitations is entirely voluntary. If you do, we use that information only to adapt the teaching, on the basis of your explicit consent under Art. 9 (2) (a) GDPR. You can withdraw that consent at any time, in any form.

7. The Street Kids children’s class

For the children’s class in Wandsbek (ages 8 to 12) we collect only the child’s first name and age, and the name, telephone number and email address of a parent or guardian. Registration is always made by the parent or guardian, never by the child. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Art. 8 GDPR. We do not photograph or film the children’s class. Registration data is deleted twelve months after the end of the term.

8. Photographs in the studios

We occasionally photograph in our rooms for our own website and social media. Photographs are only taken after the class has been told in advance, and only with the explicit consent of the people shown, under Art. 6 (1) (a) GDPR. If you do not want to be photographed, tell the teacher — it has no effect whatsoever on your participation. You can withdraw consent at any time and we will remove the image from our own channels.

9. Recipients

We pass on your data only where necessary: to our hosting provider (Vercel Inc.), our email provider, our tax adviser, and payment providers and banks for direct debits. Agreements under Art. 28 GDPR are in place with all processors. Transfers to third countries take place only on the basis of the EU standard contractual clauses. We do not sell your data and do not use it for third-party advertising.

10. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may withdraw any consent you have given at any time with effect for the future.

You also have the right to object, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR). Please write to datenschutz@movement-studios.de.

You may also lodge a complaint with a supervisory authority. Ours is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.

11. Data security

This site is served exclusively over an encrypted connection (TLS). Only the people at the studio desks and in administration who need it for their work have access to membership and enquiry data.

12. Changes to this notice

We update this notice when our services or the legal requirements change. The version published here is the one that applies.