Privacy policy

1. Controller

J2 Pilates GbR, Hasengartenstraße 46a, 65189 Wiesbaden. Email: info@j2pilates.de.

2. Hosting & server logs

This website is operated in a data centre in Germany (Microsoft Azure, Germany region). The technical service provider and processor is Novosky (Lucas Teichmann); data processing agreements pursuant to Art. 28 GDPR are in place with the processors. On access, technically necessary log data (e.g. IP address, time, page requested, data volume transferred) is processed to ensure delivery and security (Art. 6(1)(f) GDPR). These server logs are deleted after no more than 30 days; security-relevant log data may be retained within the EU for up to 90 days to detect and prevent attacks.

3. Cookies & local storage

We store your consent decision as technically necessary information in your browser’s local storage (§ 25 (2) no. 2 TDDDG, Art. 6(1)(f) GDPR). Analytics and map services load only after your consent (§ 25 (1) TDDDG, Art. 6(1)(a) GDPR); only then can those services set cookies. You can change or withdraw your consent at any time via the "Cookie settings" button in the footer - after withdrawal, already-loaded services are no longer embedded when the page reloads.

4. Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Ltd., to statistically analyse website usage (Art. 6(1)(a) GDPR). Your IP address is processed in truncated form. The script loads only after your consent; without consent no analysis takes place. Data may be transferred to Google LLC in the USA. For the USA there is an adequacy decision of the EU Commission (EU-US Data Privacy Framework), under which Google LLC is certified; in addition, EU Standard Contractual Clauses apply. You can withdraw your consent at any time via the cookie settings.

5. Google Maps

The map loads only after your explicit consent (Art. 6(1)(a) GDPR). Data is then transferred to Google (Google Ireland Ltd.), including your IP address; a transfer to Google LLC in the USA is possible (EU-US Data Privacy Framework, additionally EU Standard Contractual Clauses). Without consent, no connection to Google is established.

6. Contact & enquiry form

If you contact us via a form or email, we process your details (name, contact data, message) to handle your enquiry (Art. 6(1)(b) and (f) GDPR). The data is used solely for this purpose and deleted once your enquiry has been fully handled, unless statutory retention obligations require otherwise.

To protect the forms against automated abuse we use Cloudflare Turnstile, a service of Cloudflare, Inc. (USA). Turnstile uses technical browser signals to check whether an input comes from a human, but does not set any tracking cookies. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR, § 25 (2) no. 2 TDDDG). A connection to Cloudflare servers is established and your IP address is processed; a transfer to the USA is possible. Cloudflare is certified under the EU-US Data Privacy Framework. Details: https://www.cloudflare.com/privacypolicy/.

7. Booking via Eversports

For the online booking of classes, passes and memberships we use the booking service Eversports, operated by Eversports GmbH, Vienna, Austria. When you start a booking, you are redirected to the Eversports booking platform or an Eversports booking widget is loaded. Your booking and contact data as well as technical data (e.g. IP address) are transmitted to and processed by Eversports (Art. 6(1)(b) GDPR for performance of contract; for directly embedded widgets additionally Art. 6(1)(a) GDPR, as these load only after your consent). Eversports is based in the EU (Austria). Details can be found in the Eversports privacy policy at https://www.eversports.de/h/privacy.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden.

Last updated: August 2026