- GENERAL
IMA Intentional Movement Academy UG (haftungsbeschränkt) c/o S. Ceylan, Boxhagener Straße 13, 10245 Berlin (“IMA”, “we” or “us”) would like to inform you about how we collect, use and disclose personal data. This Privacy Policy describes our practices in connection with personal data that we collect and use through the following services:
- Through websites operated by us from which you have accessed this Privacy Policy (the “website”);
- Through the Eversports platform, a software application through which you can book our services (the “App”);
- Through our social media pages (collectively, the “Social Media Pages”);
- Via email messages we send you that contain a link to this Privacy Policy; and
- Through other interactions we have with you.
Together, we refer to the Websites, App, Social Media Pages, email messages and other interactions as the “Services“.
"Personal Data” is information that identifies you as an individual or relates to an identifiable individual. Through the Services, we may collect and use Personal Data as follows, including:
- Name and contact details: e.g. first and last name, title, city code, email address, phone number, address, date of birth, gender, country of residence.
- Business contact details: e.g. company name, business email address, business telephone number, business address, country of operation.
- Account information.
- Billing information: Debit or credit card details, bank account details, billing address.
- User Content: e.g. reviews about our services and other content you create or share on our services, including posts on our social media pages, blogs and comment sections.
- User Content: e.g. reviews about our services and other content you create or share on our services, including posts on our social media pages, blogs and comment sections.
- Marketing Data: e.g. your choices in relation to our newsletters, surveys and other marketing/advertising displayed or provided to you and the preferred methods for such promotional communications.
- Business history: details of your communications with us and details of your claims, complaints and queries in general.
- Transaction information: e.g. details of services you have booked with us.
- Device information: e.g. information about your devices and your use of our services. This includes data obtained through cookies and similar technologies, such as IP address.
- Social media information: e.g. profile pictures, social media account ID and other social media profile information, including lists of friends/followers on social media.
- COLLECTION AND PROCESSING OF PERSONAL DATA
IMA offers contortion lessons, flexibility training and shows. Various services in the field of sports and leisure activities and products (collectively the “sports offer”) can be booked, reserved or purchased via IMA. The sports offers are provided by IMA itself. The subject matter of the contract is the use of IMA's services (the “Service”).
How we collect personal data
We and our service providers collect personal data in various ways, including:
- via the Services.
- We collect Personal Data through the Services, e.g. when you sign up for a newsletter, make a booking or attend one of our events.
- From other sources.
- We obtain your Personal Data from other sources, for example
- from publicly available databases;
- from joint marketing partners when they share the information with us.
- When you connect your social media account to your Services account, you share with us certain Personal Data from your social media account, such as your name, email address, photo, list of social media contacts and any other information made available to us by connecting your social media account to your Services account.
We need to collect personal data in order to provide you with the requested services. If you do not provide the requested information, we may not be able to provide the Services. If you provide us or our service providers with Personal Data about other individuals in connection with the Services, you represent that you are authorized to provide the information and are authorized to allow us to use the information in accordance with this Privacy Policy.
Processing of personal data
We and our service providers use personal data for the following purposes:
- Providing the functionality of the Services.
- Examples of processing activities
- To provide you with the functionalities of the Services, such as enabling you to book our sports offer.
- To complete your transactions, verify your information and provide you with related benefits, special offers or customer services.
- To provide you with administrative information, such as changes to our terms and conditions and policies.
- Categories of Personal Data
- Name and contact details; Business contact details; Account information; Billing information; Preferences; Business history; Transaction information; Device information.
- Legal basis
- Performance of a contract, including the Terms and Conditions or any other agreement we enter into with you for the provision of the Services.
- Processing your requests
- Examples of processing activities
- To respond to your inquiries and fulfill your requests when you contact us via our online contact form or otherwise, such as when you send us questions, suggestions, compliments or complaints, or when you request an offer or other information about our services.
- Categories of Personal Data
- Name and contact details, business contact details, account information, billing information, business history, transaction information, device information and preferences.
- Legal basis
- Performance of a contract, including the Terms and Conditions or any other agreement we enter into with you for the provision of the Services.
- Legitimate interests, such as our interest in responding to queries or complaints.
- Legal obligations, such as when you make a request for access to your Personal Data.
- Providing you with our newsletter and/or other marketing materials and enabling you to share content on social networks.
- Examples of processing activities
- To send you marketing-related emails with information about our services, events, and other news about our company.
- To facilitate sharing content on social networks, if you choose to use this functionality.
- Categories of Personal Data
- Name and contact details, business contact details, account information, business history, transaction information, preferences, marketing data, device information, and social media information.
- Legal basis
- Consent. For example, if we want to send you marketing messages via SMS or email but we don't have an existing business relationship with you, we will ask for your prior consent.
- Legitimate interests. For example, to market our services.
- Analysis of personal data for business reports and the provision of personalized services.
- Examples of processing activities
- To analyze or predict our users' preferences, to create aggregated trend reports on how our digital content is used so that we can improve our services.
- To better understand your interests and preferences so that we can personalize our interactions with you and provide you with information and/or offers tailored to your interests.
- To better understand your preferences so that we can provide you with content through our Services that we believe will be relevant and interesting to you.
- To evaluate the effectiveness of our advertising campaigns so that we can adapt our campaigns to the needs and interests of our users.
- To identify usage trends, such as understanding which parts of our services are of most interest to users.
- Categories of Personal Data
- Name and contact details, business contact details, account information, marketing data, social media information, user content, business history, transaction data, device information and preferences.
- Legal basis
- Legitimate interests, such as improving our services.
- Consent, for example, when we use cookies and similar technologies and the information collected using such technologies is Personal Data.
- Aggregating and/or anonymizing Personal Data.
- Examples of processing activities
- We may aggregate and/or anonymize Personal Data so that it is no longer considered Personal Data. We do this to generate other data for our purposes, which we may use and disclose for any purpose because it no longer identifies you or anyone else.
- Categories of Personal Data
- Personal data relevant to the relevant business purpose.
- Legal basis
- Legitimate interests, such as generating other data for our purposes, which we may use and disclose for any purpose because it no longer identifies you or anyone else.
- Fraud prevention and security.
- Examples of processing activities
- For audits, to verify that our internal processes are working as intended and to comply with legal, regulatory, or contractual requirements;
- For fraud prevention and fraud security monitoring purposes, e.g., to detect and prevent cyberattacks or attempted identity theft.
- Categories of Personal Data
- Name and contact details; business contact details; account information; billing information; device information; business history; and transaction information.
- Legal basis
- Legal obligations, e.g., to detect and prevent cyberattacks.
- Legitimate interests, such as detecting and/or preventing fraudulent transactions.
Disclosure of Personal Data
We share Personal Information:
- With our third-party service providers to enable them to provide the services they provide to us.
- This may include providers of services such as website hosting, payment processing, order fulfillment, fraud prevention, information technology and related infrastructure provision, email delivery, auditing, and other services.
- By using the Services, you may choose to disclose Personal Information.
- In message boards, chats, profile pages, blogs, and other tools where you can post information and content (including, but not limited to, our social media pages). Please be aware that any information you post or disclose through these services becomes public and may be accessible to other users and the general public.
- Through your social networking activities. When you connect your account on our Service to your social media account, you share information with your friends connected to your social media account, with other users, and with your social media provider. By connecting your account, you authorize us to enable this sharing of information, and you understand that the use of the shared information will be governed by the social media provider's privacy policy.
MailPoet
We use the services of MailPoet to send newsletters. The provider is Wysija SARL, 6 rue Dieudé, 13006, Marseille, France. Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter, for example, via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and MailPoet's servers after you unsubscribe from the newsletter.
For more information, see MailPoet's privacy policy at: https://www.mailpoet.com/privacy-notice/.
Other uses and disclosures
We will also use and disclose your Personal Information when necessary or appropriate, including when we are legally required to do so or have a legitimate interest in doing so:
- To comply with applicable laws and regulations.
- This may include laws outside the country in which you reside.
- To cooperate with public and government authorities.
- To respond to a request or to provide information we believe is necessary or appropriate.
- This may include authorities outside the country in which you reside.
- To cooperate with law enforcement authorities.
- For example, when responding to requests and orders from law enforcement authorities or to provide information we believe is important.
- For other legal reasons.
- To enforce our Terms and Conditions; and
- To protect the rights, privacy, safety, or property of us, you, or others.
"Other Information” is any information that does not specifically reveal your identity or directly relate to an identifiable individual. The Services collect Other Information, such as:
- Browser and device information
- App usage data
- Information collected through cookies, pixel tags, and other technologies
- Demographic information and other information you provide that does not reveal your identity
- Information aggregated in such a way that it no longer reveals your identity
Collection of Other Information
We and our service providers may collect Other Information in a variety of ways, including through:
- Your browser or device.
- Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, internet browser type and version, and the name and version of the services you use. We use this information to ensure that the services function properly.
- Cookies.
- Cookies are pieces of information stored directly on the computer you use. Cookies allow us to collect information such as your browser type, time spent on the Services, pages visited, language preferences, and other traffic data. We and our service providers use this information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also collect statistical information about the use of the Services to continually improve their design and functionality, understand how they are used, and help us answer questions. Cookies also allow us to understand which of our advertisements or offers are most likely to appeal to you and to display them while you are on the Services. We may also use cookies or other technologies in online advertising to track responses to our ads. If you do not want information collected through the use of cookies, most browsers allow you to automatically decline cookies or give you the choice to decline or accept a particular cookie (or cookies) from a particular website. You may also visit http://www.allaboutcookies.org/manage-cookies/index.html . However, if you do not accept cookies, you may experience inconvenience when using the Services. You may also not receive advertising or other offers from us tailored to your interests and needs.
- Pixel tags and other similar technologies.
- Pixel tags (also known as web beacons and clear GIFs) may be used, among other things, to track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about Service usage and response rates.
Use and Disclosure of Other Information
We may use and disclose Other Information for any purpose, unless we are required to do otherwise by applicable law. If we are required to treat Other Information as Personal Information by applicable law, we may use and disclose it for the purposes for which we use and disclose Personal Information, as described in this Privacy Policy. In some cases, we may combine Other Information with Personal Information. If so, we will treat the combined information as Personal Information for as long as it remains combined.
We strive to take reasonable organizational, technical, and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us promptly as described in the "Contacting Us" section below.
Your choices regarding our use and disclosure of your Personal Information
You have a choice about whether we use and disclose your Personal Information for marketing purposes. You can opt out of the following:
Receiving marketing emails from us. If you no longer wish to receive marketing emails from us in the future, you can opt out by sending an email to hello@ima-studio.de and indicating that you no longer wish to receive marketing emails. There is also an unsubscribe link in the footer of the newsletter.
We will try to comply with your request as quickly as possible. Please note that if you have opted out of receiving marketing emails, we may still send you important administrative communications, which you will not be able to opt out of.
How to Exercise Your Rights
If you would like to request access to, information about, rectification, updating, suppression, restriction, or deletion of your Personal Data, object to or refuse to process your Personal Data, withdraw your consent (which does not affect the lawfulness of the processing before withdrawal), or request a copy of your Personal Data for the purpose of transmitting it to another company (to the extent you are entitled to these rights under applicable law), you may contact us as described in the "Contacting Us" section below. We will respond to your request in accordance with applicable law.
Please indicate in your request which Personal Data you would like to have changed or whether you would like to have your Personal Data deleted from our database. For your protection, we can only implement requests with respect to the Personal Data associated with the email address you use to make your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as quickly as possible.
Please note that we may need to retain certain information for accounting purposes and/or to complete transactions that you began before requesting a change or deletion (e.g., if you make a purchase or participate in a promotion, you may not be able to change or delete the Personal Information you provided until after the purchase or promotion is complete).
Filing a complaint with a public authority
You may also lodge a complaint with an EU/EEA data protection authority in the country or region where you are habitually resident or work, or where an alleged infringement of applicable data protection law has occurred. A list of data protection authorities can be found at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.
We will retain your Personal Data for as long as necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law, for example, to comply with legal, regulatory, tax, accounting, or reporting obligations.
The criteria used to determine our retention periods include, but are not limited to:
- the period during which we have a business relationship with you and provide the Services to you;
- whether there is a legal obligation to which we are subject (e.g., certain laws require us to retain records of your transactions for a certain period of time before we can delete them); or
- whether retention is advisable given our legal position (e.g., in view of applicable statutes of limitations, litigation, or regulatory investigations).
If we are legally obligated to do so or if retention is advisable given our legal position, we will, under certain circumstances, retain certain Personal Data even after your account has been deleted and/or we no longer provide the Services to you, for example:
- To cooperate with law enforcement or public, regulatory, or government authorities: If we receive a subpoena or search warrant in respect of your account on our Service, we will retain the Personal Data subject to that subpoena or search warrant after you delete your account on our Service.
- To comply with tax and accounting requirements: We may retain your Personal Data, such as billing information, business history, and/or transaction data, for up to 10 years after your Service account has been deleted to comply with tax and accounting requirements.
- To pursue or defend legal action: We may retain relevant Personal Data in the event of a legal claim or complaint, including regulatory investigations or legal proceedings concerning a claim relating to your Personal Data, or where we reasonably believe that such legal action is imminent (whether relating to our relationship with you or otherwise), for up to 10 years after the settlement of the dispute or the decision of a court or tribunal from which no further appeal is available.
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third party, including third parties operating a website or service to which the Services link. The inclusion of a link on the Services does not imply our endorsement of the linked website or service.
Furthermore, we are not responsible for the information collection, use, sharing, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, or other app developers, app providers, social media platform providers, operating system providers, wireless service providers, or device manufacturers, including with respect to any Personal Data you choose to share with other organizations through or in connection with the Apps or our Social Media Pages.
- JURISDICTION AND CROSS-BORDER TRANSFER
Your Personal Data may be stored and processed in any country in which we maintain facilities or in which we engage service providers. By using the Services, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection laws than those in your country.
Some countries outside the European Economic Area (EEA) are recognized by the European Commission as providing an adequate level of data protection in accordance with EEA standards (the full list of these countries can be found here). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place appropriate measures, such as standard contractual clauses adopted by the European Commission, to protect your Personal Data. You can obtain a copy of these measures by contacting us as described in the "Contact Us" section below.
- SENSITIVE INFORMATION
Unless we request it, we ask that you not submit any sensitive Personal Information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometric or genetic characteristics, criminal background, or trade union membership) to us through the Services or otherwise.
- THIRD-PARTY PAYMENT SERVICES
The Services may provide features that allow you to make payments to the Company using third-party payment services with which you have established a separate account. If you use such a payment service to make a payment to us, your Personal Information will be collected by that third party, not us, and will be subject to the third party's privacy policies and not to this Privacy Policy. We have no control over, and are not responsible for, that third party's collection, use, and disclosure of your Personal Information.
- UPDATES TO THIS PRIVACY POLICY
The "LAST UPDATED" legend in this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.
- Contact Us
IMA Intentional Movement Academy UG (limited liability) c/o S. Ceylan, Boxhagener Straße 13, 10245 Berlin, is responsible for the collection, use, and disclosure of your Personal Information as described in this Privacy Policy.
If you have any questions about this Privacy Policy, please contact us at hello@ima-studio.de or:
IMA Intentional Movement Academy
c/o S. Ceylan
Boxhagener Straße 13
10245 Berlin
Because email communication is not always secure, we ask that you do not include credit card details or other sensitive information in your emails to us.
LAST UPDATED: 07/14/2022
