PRIVACY STATEMENT
‍

initiation

With this privacy policy, we inform you about the processing of your personal data (hereinafter referred to as “data”) and its purpose, scope and legal basis. The privacy policy applies to all processing of personal data that we carry out as part of our services, our website, mobile applications and external online presences (e.g. social media profiles).

Status: January 07, 2025
Scope of application: Switzerland and EU (DSG and GDPR).

‍

person responsible

Myriam Feichtinger/Letitflow Pilates
address: switzerland
email: info@surfpilates.com
Site: www.surfpilates.com
Existing websites: letitflow-pilates.com / surftrainingadventures.com‍
‍

Data processing overview

Types of data processed:

  • Inventory data (e.g. name, address).
  • Contact details (e.g. email, telephone number).
  • usage data (e.g. websites visited, interest in content).
  • Meta/communication data (e.g. IP addresses, browser information).
  • Payment details (e.g. invoices, bank details).

Affected persons:

  • users (e.g. website visitors, app users).
  • customers (e.g. booking services).
  • Business and contract partners.

Purposes of processing:

  • Provision of the online offer.
  • Provision of contractual services.
  • Communication and customer service.
  • direct marketing.
  • Analysis and optimization of the online offer.
    ‍

Relevant legal bases

Our data processing is based on:

  • consent in accordance with Art. 6 para. 1 lit. a GDPR.
  • Fulfilment of contract in accordance with Art. 6 para. 1 lit. b DSGVO.
  • Legal obligations in accordance with Art. 6 para. 1 lit. c GDPR.
  • Legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO.

In Switzerland, the Federal Data Protection Act (DSG) also applies.
‍

Safety measures

We take appropriate technical and organizational security measures to ensure the confidentiality, integrity and availability of your data:

  • SSL encryption (HTTPS) for secure data transmission.
  • Access controls for physical and digital systems.
  • Regularly review and update our security measures.
    ‍

Transfer of personal data

Your data will only be shared with third parties if this:

  • is necessary to fulfill the contract.
  • is based on your express consent.
  • is required by law.
  • is necessary within the framework of legitimate interests.

Examples of recipients:

  • IT service provider
  • Payment service provider
  • Shipping and logistics companies
    ‍

Data processing in third countries

Data will only be transferred to countries outside Switzerland or the EU if:

  • the level of data protection is recognized by the EU Commission.
  • standard contractual clauses have been concluded.
  • there is express consent.
    ‍

Cookies and tracking

We use cookies to make our online offering user-friendly:

  • Required cookies: To operate the website.
  • Statistics cookies: To analyze user behavior.
  • Marketing cookies: For personalized advertising.

Google Analytics: We analyze user behavior to improve our website. The IP address is anonymized. You can prevent data collection through an opt-out plugin.

Facebook pixels: Enables targeted advertising based on pseudonymous profiles.

Note: You can disable cookies using your browser settings. For more information, please see our cookie banner.
‍

Communication via messenger

We use messenger services such as WhatsApp. The following principles apply:

  • Message content is end-to-end encrypted.
  • Metadata can be processed by providers.
  • The use is based on your consent (Art. 6 para. 1 lit. a DSGVO).

Alternatively: Contact via email or telephone.
‍

Video conferences and online meetings

We use services like Zoom for meetings. The following data can be processed in the process:

  • Name and contact details of participants.
  • Visual and vocal contributions.
  • Chat message content.

legal basis: Your consent or our legitimate interests in effective communication.
‍

Deletion of data

We only store personal data for as long as is necessary for the purposes of their processing or as long as there are legal retention periods. The data is then securely deleted.
‍

Rights of those affected

You have the right to:

  • information to obtain information about your stored data.
  • rectification to request incorrect or incomplete data.
  • erasure to request your data, provided that there are no legal storage requirements.
  • contradiction to object to the processing of your data.
  • yours consent to cancel at any time.

To exercise your rights, please contact us: info@surfpilates.com.
‍

Privacy Policy Updates

We reserve the right to adapt this privacy policy if there are changes. Please check back regularly for the latest status.

‍