Privacy
Privacy Policy
This privacy policy informs you about the nature, scope and purposes of the processing of personal data on this website in accordance with Art. 13 GDPR.
Privacy at a glance
The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
We process your data exclusively within the legal framework of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Controller
The controller within the meaning of the GDPR is:
Anytime Pilates Studio, Reindelstraße 13, 90402 Nürnberg, Germany
E-mail: anytimestudio.nbg@gmail.com · Phone: +49 (0) 155 – 6234 3654
Hosting and server log files
We host the contents of this website with the following provider:
Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages).
The servers automatically collect and store information in so-called server log files which your browser transmits on every visit: IP address, date and time of access, page requested, browser and operating system used, and referrer URL.
This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and error-free provision of this website and in ensuring network and information security. We have concluded a data processing agreement (DPA) with the provider.
The provider is based in the USA. The transfer to the USA is based on the adequacy decision of the European Commission (EU-US Data Privacy Framework); Cloudflare is certified under the EU-US Data Privacy Framework.
Log files are automatically deleted after no more than 7 days, unless security incidents require longer storage.
For further information, please see Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/
SSL / TLS encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the lock symbol in the browser bar and the “https://” prefix in the address bar. This prevents third parties from reading the data you send to us.
Contact (form, e-mail, phone)
Our contact and booking forms open a pre-filled e-mail in your own e-mail program (mailto link). The information you provide (name, e-mail address, phone number, subject, preferred time, message) is not transmitted to or stored on a server of this website; it is sent through your own e-mail provider.
We use the data you send solely to handle your request and to prepare and perform a contract (e.g. a trial session or membership). The legal basis is Art. 6(1)(b) GDPR (performance of or steps prior to a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Your data will be deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations stand in the way.
Google Maps (map on the contact page)
On our contact page we embed a map from the service Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The map is only loaded after you actively click “Load Google Maps” (two-click solution). Only through this click is a connection established to Google’s servers. Google receives information such as your IP address, the time of your visit and the content you display, and may store cookies on your device. It cannot be ruled out that data is transferred to Google LLC servers in the USA.
The legal basis for loading the map is your consent under Art. 6(1)(a) GDPR, which you grant by clicking “Load Google Maps” and which you can revoke at any time with effect for the future. For data transfers to the USA, the European Commission has adopted an adequacy decision (EU-US Data Privacy Framework).
For further information, please see Google’s privacy policy: https://policies.google.com/privacy
Cookies, analytics and tracking
This website uses no cookies and no analytics, tracking or marketing services and no retargeting. No usage behaviour is traced beyond this website.
External links
Our website contains links to external websites (e.g. Instagram, TikTok, Google Maps). The respective operator is solely responsible for data protection on those external pages. When you click a link, your IP address may be transmitted to the respective provider.
Retention period
We store personal data only for as long as is necessary to fulfil the respective purposes. Statutory retention obligations (e.g. under commercial and tax law) remain unaffected.
Your rights
You have the following rights with regard to your personal data:
Right of access to the data we process (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise these rights, an informal message to anytimestudio.nbg@gmail.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Automated decision-making
Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.
Changes to this privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The version published on this website at any given time applies.
Last updated: August 2026.
Anytime Pilates
