The protection of your personal data is important to us. With this data protection declaration, we would like to explain to you in more detail what personal data we collect in the course of your use of the mindfit studios website at https://mindfit-studios.com and for what purpose the data is used.
1 Responsible person and contact
mindfit studios GmbH
represented by Karin Hohn and Wibke Veltjens
(hereinafter referred to as "mindfit studios" or "we")
If you have any questions or suggestions on the subject of data protection, please do not hesitate to contact us by e-mail at the following address: email@example.com.
2 Subject of data protection
The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person; this includes, for example, the name or identification numbers.
3 Automated data acquisition
When you access our website, your end device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:
- IP address (shortened by one octet)
- URL of the page accessed
- Date and time
- Browser type and version
- Operating system used
- Host name of the accessing computer
We store this data for the following purposes:
- Load balancing, i.e. in order to distribute access to our website across several devices and to be able to offer you the fastest possible loading times;
- Ensuring the security of our IT systems, e.g. to defend against specific attacks on our systems and to recognise attack patterns;
Your shortened IP address is only stored for a period of 7 days.
We store so-called cookies in order to be able to offer certain functions of our website and to optimise the use of our website. Cookies are small files that are stored on your end device with the help of your internet browser.
- Session cookies: These cookies are needed to store certain technical data during your visit to our website, e.g. to determine whether you have logged in.
- Login cookies: These cookies are needed to save your login beyond a session if you wish.
- External media cookies: These cookies are used to block content from video platforms and social media platforms by default.
5 Processing of personal data of our end users
5.1 Registration for the use of our offers
On the mindfit studios platform, you can register to use our services. To do so, you must provide the following mandatory information:
- First and last name
- E-mail address
- Telephone number
- Payment data
Your registration data is required to set up and manage an account for you and to enable you to use our offers, Art. 6 para. 1 sentence 1 lit. b DSGVO. In order to set up this account, you must provide us with this data. However, you are neither contractually nor legally obliged to provide the data.
5.2 Booking and implementation of courses and personal training sessions
You can book courses and personal training sessions on our website. To do this, you can register for the relevant courses in your account. In order to make this appointment, you and our trainers will receive an invitation from us to a meeting via the Zoom video conferencing tool from Zoom Video Communications, Inc. ("Zoom"). The associated processing of your personal data, in particular your email address, is done for the fulfilment of our contract with you, Art. 6 para. 1 p. 1 lit. b DSGVO.
You have the opportunity to answer questions about your mental fitness in a questionnaire via https://mindfit-studios.com/psyche-testen/. We use the data collected via this questionnaire to send you an evaluation of your mental fitness by e-mail and to be able to suggest suitable offers to you on this basis.
We process your data on the basis of the express consent you gave when filling out the questionnaire, pursuant to Art. 6 para. 1 p. 1 lit. a, Art. 9 para. 2 lit. a DSGVO. We process your e-mail address on the basis of your consent to receive this evaluation by e-mail, Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke the consent you have given at any time by sending us an email to firstname.lastname@example.org, stating the email address you used and the subject "Revocation mindfit test", without this affecting the lawfulness of the processing of your data that took place until this revocation.
After completion of the creation and transmission of your evaluation, your information will be deleted by us within 30 days.
For the creation, implementation and evaluation of the questionnaire, we use the service Typeform of TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain as a processor within the meaning of Art. 28 DSGVO.
If you send us enquiries by e-mail, telephone or other means, we will store and use your details to process the enquiry.
We store enquiries about contracts or of potential legal relevance for the general limitation period, i.e. three years from the end of the year in which we received your enquiries. We store all other enquiries for a period of 24 months. After that, your enquiries will be deleted unless we are obliged to keep them for a longer period for legal reasons.
The processing and storage is based on our legitimate interest, the proper documentation of our business operations and the safeguarding of our legal positions (Art. 6 para. 1 sentence 1 lit. f DSGVO). In the case of enquiries about contracts, the processing and storage is carried out for the initiation and implementation of the respective contractual relationship (Art. 6 para. 1 sentence 1 lit. b DSGVO) and, if applicable, for the fulfilment of legal obligations (Art. 6 para. 1 sentence 1 lit. c DSGVO).
You are under no legal or contractual obligation to provide such data; however, if you do not provide the relevant information, we may not be able to process your request accordingly.
7 Disclosure of data
In principle, your personal data will only be passed on without your express prior consent in the following cases:
The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims and that your rights and interests in the protection of your personal data are not overridden, Art. 6 para. 1 sentence 1 lit. f DSGVO or based on a legal obligation according to Art. 6 para. 1 sentence 1 lit. c DSGVO.
- We disclose personal data to auditors, accounting service providers, lawyers, banks, tax advisors and similar bodies insofar as this is necessary for the provision of our services (6 para. 1 sentence 1 lit. b DSGVO) or the proper operation of our business (Art. 6 para. 1 sentence 1 lit. f DSGVO) or we are obliged to do so (Art. 6 para. 1 sentence 1 lit. c DSGVO).
- We rely on contracted third-party companies and external service providers ("processors") to provide our services. In such cases, personal data will be disclosed to these processors to enable them to continue processing. These Processors are carefully selected and regularly reviewed by us to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually obliged by us to treat your data exclusively in accordance with this data protection declaration and the German data protection laws.
In addition to the above-mentioned service providers, we use the following order processors:
- Webhoster: Strato AG
Pascal Street 10
Phone:030-300 146 0
Register court: Berlin Charlottenburg HRB 79450
VAT ID No.: DE 211 045 709
We provide data to processors on the basis of Art. 28 (1) DSGVO. In the event that personal data is transferred to a data processor outside the EU and no adequacy decision is in place, we ensure the proper processing of the data through measures as described in Art. 46 et seq. DSGVO. For further information, please contact us at the email address provided above.
The disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances and that your rights and interests in the protection of your personal data do not prevail, Art. 6 para. 1 sentence 1 lit. f DSGVO.
- Automated individual decisions or profiling measures
We do not use automated processing to make a decision about you or for profiling.
- Deletion of your data
Unless otherwise stated, we delete your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website and our offers, as well as for a period of 6 months during which we store backup copies after the end of the contract. We also continue to store your data if we are obliged to do so for legal reasons or if the data is required for a longer period for criminal prosecution or to secure, assert or enforce legal claims.
If data must be retained for legal reasons, processing is restricted. The data is then no longer available for further use.
The storage beyond the contractual relationship is based on our aforementioned legitimate interests according to Art. 6 para. 1 sentence 1 lit. f DSGVO.
- Your rights as a data subject
As a person affected by the processing of personal data, you have a right of access to the data processed, a right to rectification of your personal data, a right to erasure of your personal data, a right to restriction of the processing of your personal data and a right to communication of your personal data.
In addition, you have the right to object to the processing of your personal data at any time for reasons relating to your particular situation if the data processing is based on Art. 6 (1) sentence 1 lit. e or lit. f DSGVO (including profiling) or if data is processed for direct marketing purposes.
In the event of consent, you have the right to revoke your consent at any time, Art. 7 (3) sentence 1 DSGVO. You can do this by sending an email to email@example.com. This does not affect the lawfulness of the processing carried out until your revocation.
You also have the right to lodge complaints with a supervisory authority.
Finally, we would like to point out that we process the personal data provided by you when exercising your rights pursuant to Articles 15 to 22 of the GDPR for the purpose of implementing these rights and to be able to provide evidence thereof. These processing operations are based on the legal basis of Art. 6 (1) sentence 1 lit. c DSGVO.
Status: 7 May 2021