Privacy policy

At Pilates&Me, protecting your personal data is a priority.

This Privacy Policy is intended to inform you, in a clear and accessible manner, about how we collect, use, store and protect your personal data when you use the website pilatesme.com (the Website), including when making a purchase, requesting a quote or creating your account.

Pilates&Me is committed to complying with the General Data Protection Regulation (GDPR), as well as any other applicable data protection legislation. If you have any questions regarding the processing of your data, you can contact us at any time at the following address: info@pilatesme.com

Data Controller: Monesty SARL – Pilates&Me, 197, Rue de Differdange, L-4437 Soleuvre Sanem, Esch-sur-Alzette, Luxembourg, Luxembourg Trade and Companies Register: B 289079 (Pilates&Me).

Any term not defined in this Privacy Policy shall have the meaning given to it under the GDPR.

What personal data do we collect?

Data you provide to us when you visit our Website

When you interact with our Website, we may collect the following data:

Identification data: first name, last name;
Contact details: email address, telephone number, postal address;
Payment data: bank card number, transaction data; and
Customer account data: login credentials and order history.

Data collected automatically when you visit our Website

When you browse our Website, certain technical data is collected automatically:

Browsing data: IP address, browser type, pages viewed, duration of visits; and
Cookies: See our Cookie Policy.

On what legal basis do we use your personal data?

We process your personal data for the following specific and clearly defined purposes:

Purpose	Legal basis	Data concerned
Managing purchases and your customer account	Performance of a contract (Art. 6(1)(b) GDPR)	Identification data and contact details
Processing payments	Performance of a contract (Art. 6(1)(b) GDPR)	Payment data
Sending newsletters and commercial offers	Consent (Art. 6(1)(a) GDPR)	Identification data and contact details (name, email address)
Improving the Website and statistical analysis	Legitimate interests (Art. 6(1)(f) GDPR)	Browsing data and cookies
Compliance with our legal and accounting obligations	Legal obligation (Art. 6(1)(c) GDPR)	Payment data
Responding to your requests (contact form)	Legitimate interests (Art. 6(1)(f) GDPR) / Consent (Art. 6(1)(a) GDPR)	Name, email address

Who do we share your personal data with?

Your personal data may be disclosed to the following categories of recipients, in strict accordance with the data minimisation principle:

Our team and suppliers, to the extent necessary for them to perform their duties;
Our technical service providers: Website hosting provider, online payment provider, newsletter management platform, online booking platform; and
Public authorities, where required by law.

Where is your personal data stored and for how long?

Your personal data is retained only for as long as necessary to fulfil the purposes for which it was collected:

Types of data	Retention period
Customer account data	For the entire duration of the contractual relationship (management of an account on the Website), then for 3 years after the end of the relationship
Accounting and invoicing data	10 years in accordance with applicable legal obligations
Direct marketing data	3 years from the last active contact
Cookies	See the Cookie Policy

Your personal data is stored on servers located within the European Union. If data is transferred to service providers located outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR.

What are your rights as a data subject?

Under applicable data protection laws, including the GDPR, you have several rights regarding the control of your personal data and the right to receive information directly from us about how we process such data. Information about your rights is set out below.

Right to information and right of access: You have the right to be informed about how we process your personal data. We provide this information through this Privacy Policy. You may ask whether we process your personal data and request a copy of your personal data. Through such an access request, you will receive information about the personal data Pilates&Me holds about you and how we process it.
Right to rectification: If you believe that your personal data is inaccurate or incomplete, you have the right to request that it be corrected or completed.
Right to restriction: If you believe that your personal data is inaccurate, that our processing is unlawful or that we no longer require this information for a specific purpose, you have the right to request that we restrict the processing of such personal data. You may also request that we temporarily stop processing your personal data while we assess your request. If you object to our processing under the right described below, you may also ask us to restrict the processing of your personal data while we carry out our assessment.
Right to object: You have the right to object to the processing of your personal data based on our legitimate interests (Article 6(1)(f) GDPR), taking into account your personal circumstances. If we cannot demonstrate compelling legitimate grounds for continuing the processing of your personal data, we must stop processing it. You may also object at any time to our processing of your personal data for direct marketing purposes. If you do so, we will stop sending you direct marketing communications.
Right to erasure: In certain circumstances, you have the right to ask us to delete personal data relating to you. For example, you may ask us to delete personal data that we (i) no longer need for the purposes for which it was collected, or (ii) process on the basis of your consent where you subsequently withdraw that consent. There are situations in which Pilates&Me may be unable to delete your data, for example where it is still necessary for the purposes for which it was collected, where Pilates&Me's legitimate interest in processing the data overrides your interest in having it deleted, or where we have a legal obligation to retain it.
Right to data portability: If we process your personal data to perform a contract or on the basis of your consent, you may in certain circumstances obtain such data for use elsewhere, for example by receiving a copy in a machine-readable format and transmitting it to another data controller.
Right to withdraw your consent: Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. When you withdraw your consent, we will stop any processing of personal data that is based on that consent.
Right to lodge a complaint: If you have objections or concerns regarding the way in which we process your personal data, you have the right to contact or lodge a complaint with the competent data protection authority responsible for supervising our processing of personal data.

In Luxembourg, the competent authority is the National Commission for Data Protection (CNPD).

Website: https://cnpd.public.lu/fr.html

Contact details:

Commission Nationale pour la Protection des Données

15, Boulevard du Jazz, L-4370 Belvaux

(+352) 26 10 60 -1

To exercise your rights, please contact us at any time. We reserve the right to limit our response to such requests to what is required under applicable law.

Changes

This is version 1.0 of our Privacy Policy, effective as of 10 April 2026. We regularly review this Privacy Policy to ensure that it remains up to date and may amend it over time to reflect changes to our services and data processing activities. Where applicable, we will publish the updated Privacy Policy on this webpage. Please review this Privacy Policy regularly for any changes, as any revised Privacy Policy will apply to all personal data that we process.