Privacy Policy

Last updated: 23/01/2025

‍

This Privacy Policy explains how we collect and process personal data when you visit our website, contact us, or use our services. This notice is provided in accordance with Art. 13 GDPR.

‍

2.1 Controller (data controller)

RS24/7 Training & Wellness UG i.G.
Eichendorffstr. 4, 10115 Berlin, Germany
Email: contact@laudacestudios.com
Phone: +49 172 9446264

‍

2.2 Data Protection Officer

We have not appointed a Data Protection Officer (DPO). If this changes, we will update this Privacy Policy.

‍

2.3 What data we process (categories)

Depending on how you interact with us, we may process:

  • Contact data (name, email, phone number)
  • Account & booking data (membership type, bookings, check-ins, QR access records)
  • Payment data (transaction references, payment status; payment details are handled by payment providers)
  • Technical data (IP address, device/browser info, timestamps, referrer URL, log files)
  • Marketing & analytics data (cookie IDs, online identifiers, usage events), where permitted

We do not intentionally collect health data (e.g., injuries, pregnancy) via forms.

‍

2.4 Purposes & legal bases

We process personal data for the following purposes:

‍

A) Website operation & security

  • Purpose: deliver the website, prevent abuse, ensure IT security
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interests)

‍

B) Contact requests (email/forms)

  • Purpose: respond to inquiries and provide support
  • Legal basis: Art. 6(1)(b) GDPR (pre-contract/contract steps) or Art. 6(1)(f) GDPR

‍

C) Booking, memberships, access & service delivery (Virtuagym / QR / screens)

  • Purpose: create your account, manage bookings, enable studio access, deliver on-screen programs, prevent misuse
  • Legal basis: Art. 6(1)(b) GDPR (contract), plus Art. 6(1)(f) GDPR (security and abuse prevention)

‍

D) Payments & billing (Mollie / PayPal / SEPA via Virtuagym)

  • Purpose: payment processing, accounting, compliance
  • Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations)

‍

E) Newsletter (Klaviyo)

  • Purpose: send updates and marketing emails
  • Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe anytime.

‍

F) Analytics & advertising (GA4, GTM, Meta Pixel, TikTok Pixel)

  • Purpose: measure performance, improve marketing, run ad campaigns
  • Legal basis: consent via cookie/consent settings (Art. 6(1)(a) GDPR) and device-access rules under German law (TDDDG).

‍

2.5 Cookies, tracking & consent (TDDDG / CMP)

We use cookies and similar technologies. Non-essential cookies (analytics/marketing) are used only where required consents apply. In Germany, analytics/marketing tracking typically requires opt-in consent (and users must be offered a real choice).

‍

Cookie/consent management: We plan to implement a Consent Management Platform (CMP). Once live, you will be able to accept/reject categories and change your preferences at any time.

‍

Tools we use (with consent where applicable):

  • Google Analytics 4 (GA4) / Google Tag Manager (GTM)
  • Meta Pixel
  • TikTok Pixel

‍

2.6 Who receives your data (processors / recipients)

Depending on the service, your data may be processed by the following providers:

‍

Website & hosting

  • Webflow (website hosting/platform; processor)
  • GoDaddy (domain provider)

‍

Communication / forms

  • Microsoft / Outlook (email and forms)

‍

Booking / CRM / membership management

  • Virtuagym (booking system, CRM, QR check-in)

‍

Smart lock / QR access

  • Comydo (smart lock / QR access logs)

‍

On-screen programs / kiosks

  • YouReformer (member access to on-screen programs)

‍

Payments

  • Mollie (payment services; typically acts as controller for its payment processing)
  • PayPal (payment services; data processing under its privacy statement)
  • SEPA via Virtuagym / banking partners (as applicable)

‍

2.7 International transfers

Some providers (especially analytics/marketing platforms) may process data outside the EEA. Where applicable, transfers rely on recognized safeguards (e.g., Standard Contractual Clauses). Details depend on each provider’s setup and terms.

‍

2.8 Retention (how long we keep data)

We keep personal data only as long as necessary for:

  • providing the service and managing your account,
  • legal retention periods (e.g., accounting),
  • resolving disputes and preventing misuse.

‍

Typical examples:

  • Booking/account data: for the duration of the customer relationship and as required by law
  • Payment records: according to legal retention obligations
  • Support emails: as long as needed to resolve the issue

‍

2.9 Your rights

You have the right to request:

  • access, rectification, erasure, restriction, portability
  • to object to processing based on legitimate interests
  • to withdraw consent at any time (for consent-based processing)
    Art. 13 GDPR requires that we inform you of these rights.

‍

To exercise your rights, contact: contact@laudacestudios.com

‍

2.10 Right to lodge a complaint (Berlin supervisory authority)

You can lodge a complaint with the supervisory authority in Berlin:

‍

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin, Germany
Email: mailbox@datenschutz-berlin.de
Phone: +49 30 13889-0

‍

2.11 CCTV (planned)

We may consider installing a camera at the entrance for security in the future. If implemented, we will update this Privacy Policy and provide appropriate notice on site.