Privacy policy
Personal data protection in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
- Controller and joint controllers
- Purpose of processing
- Retention period
- Lawful basis
- Source of the data
- International transfers and recipients
- Accuracy and updates of data
- Individuals’ rights
- Data provided by users of our services
- Website and software intellectual property
- Marketing communications
- Contact channels
Controller and joint controllers
Pilates Iberia, S.L. informs that the personal data collected through the forms on the website https://www.spainpilates.com/ are incorporated into automated files of users of its services.
The following entities within the same group act as joint controllers, in accordance with Article 26 GDPR:
- Thomas Wellness Group, S.L. — Tax ID (NIF) B84956093
- Pilates Iberia, S.L. — Tax ID (NIF) B22512206
- Evergy Fitness International, S.L. — Tax ID (NIF) B02706273
Common address: C/ Lanzarote 13, Bajo B, 28703 San Sebastián de los Reyes (Madrid), Spain.
Purpose of processing
Your data are processed for the following purposes:
- Maintaining the business relationship and complying with commercial, employment, corporate and accounting obligations.
- Providing the contracted services and/or products.
- Managing contact requests received through the website channels.
- Sending commercial information and newsletters about new services and sector news (you may object at any time).
- Security and fraud prevention.
- Sharing data within the corporate group for internal administrative purposes (accounts consolidation, policy harmonisation and strategic, commercial and financial management).
Retention period
Data will be retained for as long as the business relationship exists, while the data subject does not request deletion, or for the periods required to address potential legal liabilities. Where processing is based on consent, data will be kept until consent is withdrawn.
Lawful basis
- Implementation of pre-contractual measures and/or performance of a contract requested by the user.
- Freely given and informed consent (for example, subscription to marketing communications).
- Compliance with legal obligations applicable to the controller.
- Legitimate interests in fraud prevention, improving system performance, proper management of requests and internal administration of the group.
If the required data are not provided, or are inaccurate/incomplete, it will not be possible to handle the request or provide the service.
Source of the data
The data are provided directly by the data subject. If data relating to third parties are provided, the person providing them guarantees that they have obtained the relevant consent and have informed the third party of this Policy, releasing the controller from liability for any breach of this obligation.
International transfers and recipients
As a result of the web hosting service, data may be transferred to Cloudflare Inc. (San Francisco, CA, USA). Cloudflare adheres to the EU–US Data Privacy Framework (Adequacy Decision of 10/07/2023) and has Standard Contractual Clauses in place.
Data will not be disclosed to additional third parties unless required by law.
Accuracy and updates of data
The data subject guarantees that the data provided are true, accurate, complete and up to date, and undertakes to notify any changes via the channels indicated in this Policy.
Rights of access and control of your data
You may exercise your rights of access, rectification, erasure, objection, restriction and data portability at any time by using the contact details set out in the section Contact channels. We may request proof of identity where necessary.
Data provided by users of our services
Where a user hosts files containing personal data on our shared hosting servers, Pilates Iberia, S.L. accepts no responsibility for the user’s non-compliance with the GDPR.
Website and software intellectual property
Pilates Iberia, S.L. holds the intellectual and industrial property rights to the content of the website https://www.spainpilates.com/, as well as the programs necessary for its implementation and related information. Total or partial reproduction or publication is not permitted without prior written consent.
The user must respect any third-party programs made available, even if free of charge or publicly accessible. The user acquires no right or licence to the software beyond what is necessary for the provision of the contracted service and for its duration.
Accessing, modifying or viewing the configuration, structure and files of servers owned by Pilates Iberia, S.L. without authorisation is prohibited. The user assumes civil and criminal liability for any damages that may arise.
The use of services for purposes contrary to applicable law is prohibited, including, in particular, publishing or transmitting violent, obscene, illegal, racist, xenophobic or defamatory content; infringing intellectual property rights; collecting and using personal data of third parties without consent; and sending unsolicited bulk email.
Marketing communications
In accordance with the LSSI, Pilates Iberia, S.L. will not send promotional communications by electronic means unless they have been previously requested or authorised. Where a prior contractual relationship exists, communications may be sent regarding products or services similar to those contracted. The user may object at any time through the contact channels.
Contact channels and exercising your rights
- Email: info@thomas.es
- Postal address: C/ Lanzarote 13, Bajo B, 28703 – San Sebastián de los Reyes (Madrid), Spain