Privacy Policy
1. Data controller
Identity: Pinar Estudio Pilates, S.L. — Tax ID B75374157
Postal address: Calle del Pinar 8, 28006 Madrid, Spain
Contact email: hola@pinarpilates.com
Phone: +34 611 994 729
2. What data do we collect?
- Identification data: first name and surname.
- Contact data: email, phone, address.
- Health data relevant to safe practice (injuries, pregnancy, medical conditions) when you provide it voluntarily by signing the waiver.
- Payment data: handled by our providers (Momence, bsport, Stripe), never stored directly by Pinar Pilates.
- Usage data: bookings, attendance, packs purchased, class history.
- Technical data: IP, device, cookies (see Cookie Policy).
3. What do we use your data for?
- Managing your booking, class and participation at the studio.
- Processing payments and issuing invoices.
- Ensuring your safety during practice (health data).
- Complying with legal, tax and accounting obligations.
- Commercial communications: if you give your express consent, sending you offers, promotions, news, reminders and exclusive Pinar Pilates content by email, SMS and WhatsApp.
- Improving our services through aggregated usage analysis.
4. Legal basis for processing
- Performance of the contract (points a, b).
- Explicit consent (points c, e).
- Compliance with legal obligations (point d).
- Legitimate interest (point f).
5. Who do we share your data with?
We share your data only with the providers needed to deliver the service to you, all under data-processor agreements in accordance with the GDPR:
- Momence / bsport: booking platform and CRM.
- Stripe / payment gateway: payment processing.
- Resend: sending transactional and commercial emails.
- Vonage: sending transactional and commercial SMS.
- Google (Analytics, Workspace): web analytics and email.
- Meta (Instagram, WhatsApp Business): communication and marketing.
- ClassPass, Wellhub, Urban Sports Club: if you book through these platforms, we share what is necessary to manage your access.
We do not sell or transfer your data to third parties for commercial purposes unrelated to Pinar Pilates.
6. International transfers
Some of our providers (Stripe, Google, Meta, Resend, Vonage) may store data outside the European Economic Area. In all cases they are covered by the standard contractual clauses approved by the European Commission or by the EU-US Data Privacy Framework.
7. Data retention
- Active customer data: for the duration of the commercial relationship.
- Tax and accounting data: 6 years (legal obligation).
- Marketing data: until you withdraw your consent.
- Health data: until you cease to be a customer, unless consent is withdrawn earlier.
8. Your rights
You can exercise the following rights at any time by writing to hola@pinarpilates.com:
- Access to your data.
- Rectification of inaccurate data.
- Erasure (“right to be forgotten”).
- Objection to processing.
- Restriction of processing.
- Portability.
- Withdrawal of consent at any time.
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing does not comply with the regulations.
9. Unsubscribing from commercial communications
You can unsubscribe free of charge and at any time:
- SMS: by replying BAJA to the message received.
- Email: by clicking “unsubscribe” at the bottom of the email.
- WhatsApp: by replying BAJA or writing to +34 611 994 729.
- Direct email: hola@pinarpilates.com.
10. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, in accordance with Article 32 of the GDPR.
11. Changes to this policy
We reserve the right to modify this policy at any time. Changes will be notified at least 30 days in advance by email or on the website itself.
Last updated: 6 May 2026.
