Data protection

Privacy policy for the use of the mindfit studios website

The protection of your personal data is important to us. With this data protection declaration, we would like to explain to you in more detail what personal data we collect in the course of your use of the mindfit studios website at and for what purpose the data is used.


1 Responsible person and contact

mindfit studios GmbH
Schützenstrasse 53
10117 Berlin
represented by Karin Hohn and Wibke Veltjens

(hereinafter referred to as "mindfit studios" or "we")

If you have any questions or suggestions on the subject of data protection, please do not hesitate to contact us by e-mail at the following address:


2 Subject of data protection

The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person; this includes, for example, the name or identification numbers.


3 Automated data acquisition

When you access our website, your end device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

  • IP address (shortened by one octet)
  • URL of the page accessed
  • Date and time
  • Browser type and version
  • Operating system used
  • Host name of the accessing computer

We store this data for the following purposes:

  • Load balancing, i.e. in order to distribute access to our website across several devices and to be able to offer you the fastest possible loading times;
  • Ensuring the security of our IT systems, e.g. to defend against specific attacks on our systems and to recognise attack patterns;

Your shortened IP address is only stored for a period of 7 days.


4 Cookies

We store so-called cookies in order to be able to offer certain functions of our website and to optimise the use of our website. Cookies are small files that are stored on your end device with the help of your internet browser.

Specifically, we use the following cookies (unless other cookies are specified elsewhere in this privacy policy):

  • Session cookies: These cookies are needed to store certain technical data during your visit to our website, e.g. to determine whether you have logged in.
  • Login cookies: These cookies are needed to save your login beyond a session if you wish.
  • External media cookies: These cookies are used to block content from video platforms and social media platforms by default.

The legal basis for the use of these cookies is Section 15 (1) of the German Telemedia Act (TMG) and Article 6 (1) sentence 1 lit. b of the German Data Protection Act (DSGVO), insofar as they are necessary for the use of our website and the functions you have accessed. Otherwise, we use cookies on the basis of your consent, Art. 6 para. 1 sentence 1 lit. a DSGVO.


5 Processing of personal data of our end users

5.1 Registration for the use of our offers

On the mindfit studios platform, you can register to use our services. To do so, you must provide the following mandatory information:

  • First and last name
  • E-mail address
  • Telephone number
  • Password
  • Payment data

Your registration data is required to set up and manage an account for you and to enable you to use our offers, Art. 6 para. 1 sentence 1 lit. b DSGVO. In order to set up this account, you must provide us with this data. However, you are neither contractually nor legally obliged to provide the data.

5.2 Booking and implementation of courses and personal training sessions

You can book courses and personal training sessions on our website. To do this, you can register for the relevant courses in your account. In order to make this appointment, you and our trainers will receive an invitation from us to a meeting via the Zoom video conferencing tool from Zoom Video Communications, Inc. ("Zoom"). The associated processing of your personal data, in particular your email address, is done for the fulfilment of our contract with you, Art. 6 para. 1 p. 1 lit. b DSGVO.

Your use of Zoom and the processing of your personal data through Zoom is governed solely by Zoom's privacy policy, which you can access here: We have no control over how Zoom processes your personal data.


5.3 Payments

You have the option to pay for your booking by credit card. For the processing of these payments we use the payment service provider Stripe Inc. (510 Townsend Street, San Francisco, CA 94103, USA) to process these payments. Your payment data is processed exclusively on the basis of Stripe's privacy policy, which you can access here: The payment service provider is solely responsible for processing your payment data. We have neither access to nor influence over this.


5.4 Questionnaire

You have the opportunity to answer questions about your mental fitness in a questionnaire via We use the data collected via this questionnaire to send you an evaluation of your mental fitness by e-mail and to be able to suggest suitable offers to you on this basis.

We process your data on the basis of the express consent you gave when filling out the questionnaire, pursuant to Art. 6 para. 1 p. 1 lit. a, Art. 9 para. 2 lit. a DSGVO. We process your e-mail address on the basis of your consent to receive this evaluation by e-mail, Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke the consent you have given at any time by sending us an email to, stating the email address you used and the subject "Revocation mindfit test", without this affecting the lawfulness of the processing of your data that took place until this revocation.

After completion of the creation and transmission of your evaluation, your information will be deleted by us within 30 days.

For the creation, implementation and evaluation of the questionnaire, we use the service Typeform of TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain as a processor within the meaning of Art. 28 DSGVO.


6 Requests

If you send us enquiries by e-mail, telephone or other means, we will store and use your details to process the enquiry.

We store enquiries about contracts or of potential legal relevance for the general limitation period, i.e. three years from the end of the year in which we received your enquiries. We store all other enquiries for a period of 24 months. After that, your enquiries will be deleted unless we are obliged to keep them for a longer period for legal reasons.

The processing and storage is based on our legitimate interest, the proper documentation of our business operations and the safeguarding of our legal positions (Art. 6 para. 1 sentence 1 lit. f DSGVO). In the case of enquiries about contracts, the processing and storage is carried out for the initiation and implementation of the respective contractual relationship (Art. 6 para. 1 sentence 1 lit. b DSGVO) and, if applicable, for the fulfilment of legal obligations (Art. 6 para. 1 sentence 1 lit. c DSGVO).

You are under no legal or contractual obligation to provide such data; however, if you do not provide the relevant information, we may not be able to process your request accordingly.


7 Disclosure of data

In principle, your personal data will only be passed on without your express prior consent in the following cases:

  • If it is necessary to clarify unlawful use of our services or for legal prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behaviour. A transfer may also take place if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities.

The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims and that your rights and interests in the protection of your personal data are not overridden, Art. 6 para. 1 sentence 1 lit. f DSGVO or based on a legal obligation according to Art. 6 para. 1 sentence 1 lit. c DSGVO.

  • We disclose personal data to auditors, accounting service providers, lawyers, banks, tax advisors and similar bodies insofar as this is necessary for the provision of our services (6 para. 1 sentence 1 lit. b DSGVO) or the proper operation of our business (Art. 6 para. 1 sentence 1 lit. f DSGVO) or we are obliged to do so (Art. 6 para. 1 sentence 1 lit. c DSGVO).
  • We rely on contracted third-party companies and external service providers ("processors") to provide our services. In such cases, personal data will be disclosed to these processors to enable them to continue processing. These Processors are carefully selected and regularly reviewed by us to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually obliged by us to treat your data exclusively in accordance with this data protection declaration and the German data protection laws.

In addition to the above-mentioned service providers, we use the following order processors:

  • Webhoster: Strato AG

Pascal Street 10

10587 Berlin

Phone:030-300 146 0

E-mail contact:

Register court: Berlin Charlottenburg HRB 79450

VAT ID No.: DE 211 045 709

We provide data to processors on the basis of Art. 28 (1) DSGVO. In the event that personal data is transferred to a data processor outside the EU and no adequacy decision is in place, we ensure the proper processing of the data through measures as described in Art. 46 et seq. DSGVO. For further information, please contact us at the email address provided above.

  • As part of the further development of our business, the structure of mindfit studios GmbH may change as a result of a change in legal form, the establishment, acquisition or sale of subsidiaries, parts of companies or components. In such transactions, customer information is shared with the part of the company being transferred. Whenever personal data is shared with third parties to the extent described above, we will ensure that this is done in accordance with this privacy policy and the relevant data protection laws.

The disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances and that your rights and interests in the protection of your personal data do not prevail, Art. 6 para. 1 sentence 1 lit. f DSGVO.


  • Automated individual decisions or profiling measures

We do not use automated processing to make a decision about you or for profiling.


  • Deletion of your data

Unless otherwise stated, we delete your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website and our offers, as well as for a period of 6 months during which we store backup copies after the end of the contract. We also continue to store your data if we are obliged to do so for legal reasons or if the data is required for a longer period for criminal prosecution or to secure, assert or enforce legal claims.

If data must be retained for legal reasons, processing is restricted. The data is then no longer available for further use.

The storage beyond the contractual relationship is based on our aforementioned legitimate interests according to Art. 6 para. 1 sentence 1 lit. f DSGVO.


  • Your rights as a data subject

As a person affected by the processing of personal data, you have a right of access to the data processed, a right to rectification of your personal data, a right to erasure of your personal data, a right to restriction of the processing of your personal data and a right to communication of your personal data.

In addition, you have the right to object to the processing of your personal data at any time for reasons relating to your particular situation if the data processing is based on Art. 6 (1) sentence 1 lit. e or lit. f DSGVO (including profiling) or if data is processed for direct marketing purposes.

In the event of consent, you have the right to revoke your consent at any time, Art. 7 (3) sentence 1 DSGVO. You can do this by sending an email to This does not affect the lawfulness of the processing carried out until your revocation.

You also have the right to lodge complaints with a supervisory authority.

Finally, we would like to point out that we process the personal data provided by you when exercising your rights pursuant to Articles 15 to 22 of the GDPR for the purpose of implementing these rights and to be able to provide evidence thereof. These processing operations are based on the legal basis of Art. 6 (1) sentence 1 lit. c DSGVO.


  • Changes to this privacy policy

The current version of this privacy policy is always available at .


Status: 7 May 2021