1. Data controller
Controller: Paola Hofmann
Tax identification number (NIF): 42390370J
Trading name: JoyPilates
Address: Carrer Galió, 14, 07181 Magaluf, Illes Balears, Spain
Email: info@joypilates.es
Phone: +34 618 28 37 02
2. Purposes of processing
JoyPilates processes personal data for the following purposes:
- Responding to enquiries and requests for information.
- Creating and managing client records, bookings, cancellations, waiting lists, attendance and class-related communications.
- Managing contracted services, fees, passes, payments, collections and invoicing.
- Adapting activities when a person voluntarily provides information about injuries, medical conditions, pregnancy or other relevant health circumstances.
- Sending commercial information about activities, events, promotions and news where consent has been given.
- Analysing use of the website and improving its content where analytics cookies have been accepted.
3. Data processed
Depending on your relationship with JoyPilates, we may process identification and contact details, booking and attendance information, payment and invoicing data, communications with the studio, technical browsing data and, where necessary and voluntarily provided, health data relevant to safe participation.
Fields marked as mandatory are required to process registration, bookings or the requested service. Users guarantee that the information they provide is accurate and undertake to keep it up to date.
4. Legal basis
- Enquiries, registrations, bookings, services and payments are processed in order to take pre-contractual steps and perform the contractual relationship.
- Tax, accounting and administrative management is based on compliance with legal obligations.
- Health data and commercial communications are processed on the basis of explicit consent, which may be withdrawn at any time without affecting the lawfulness of earlier processing.
- Analytics cookies are used only where the user accepts them.
5. Recipients and processors
Personal data is not sold or disclosed to third parties unless required by law. Service providers that are necessary to deliver the services may access data under an appropriate data processing agreement.
These providers include TIME MANAGEMENT TECHNOLOGIES, S.L. (TIMP), which provides the management and booking platform, as well as hosting, email, communications, analytics and payment providers. Data may also be disclosed to public authorities, financial institutions and professional advisers where necessary to comply with legal obligations or manage contracted services.
If a provider processes data outside the European Economic Area, the processing will be subject to the safeguards required by applicable law.
6. Retention
Data will be retained for as long as the relationship with JoyPilates continues. When it ends, data will remain blocked for the periods required to comply with legal obligations and address possible liabilities. Tax and accounting records will be retained for the periods established by applicable law.
Data used for commercial communications will be retained until consent is withdrawn. Information obtained through cookies will be retained for the periods described in the Cookie Policy.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@joypilates.es or to the postal address above, with the subject “Data Protection”. Where there are reasonable doubts about your identity, additional information may be requested to verify it.
You may also withdraw consent at any time and lodge a complaint with the Spanish Data Protection Agency.
8. Minors
Where the user is a minor, registration and contracting must be completed or authorised by their parent or legal guardian. JoyPilates may request evidence of that authority.
9. Security and updates
JoyPilates applies appropriate technical and organisational measures to protect personal data in accordance with Regulation (EU) 2016/679 and Spanish Organic Law 3/2018. This policy may be updated to reflect changes in the law or the services offered.
Last updated: 24 July 2026.