Privacy & your data

Who controls your data

The controller is Razvoj in poslovne storitve, Domen Hodnik s.p., Žihlava 11, 9244 Sveti Jurij ob Ščavnici, Slovenia. For privacy, corrections, objections or deletion, email hello@pilatesplaces.co. Do not send passwords, sign-in codes or health information.

Data, purposes and legal bases

For accounts, submissions and profile management we process email, account ID, name, role, studio details, photos and messages to provide the requested service or take steps at your request before an agreement (GDPR Article 6(1)(b)). For company representatives, business contacts and authority checks rely on our legitimate interest in secure profile management (6(1)(f)). We handle enquiries at your request; corrections, security and abuse prevention rely on our legitimate interest in an accurate, secure directory. Required fields are needed to handle your request. Submitting a form does not subscribe you to marketing.

Public profiles and private submissions

The directory uses official studio websites, public business profiles and submissions from authorised representatives. Each profile shows its sources and review date. Personal business data is processed on our legitimate interest in a useful provider directory; you may request corrections, object or request removal. Applicant contacts, drafts and original photos are private, accessible to the authorised manager and editorial team. Published details and approved photos are accessible to everyone, including search engines. Publication is decided by the team, not automatically.

How long we keep data

Unfinished drafts are kept for up to 3 months after the last change. Closed enquiries, correction requests and rejected applications or claims are kept for up to 6 months after closure. Accounts and published-profile management data are kept while the service is used, then deleted or anonymised following a verified request. A public-source listing is separate from its manager’s account. If a legal obligation or specific legal claim requires further retention, we keep only necessary data for the applicable period. Deletion includes linked private photos; provider copies follow their deletion procedures. Backup removal is not the same as immediate removal from the active database.

Providers and data transfers

Cloudflare provides hosting, database, image storage, security and system notifications. Clerk provides email sign-in. Neoserv handles hello@pilatesplaces.co email; copies and notifications also reach the authorised administrator’s Gmail (Google). Providers receive data necessary for their services, including technical request data. Cloudflare, Clerk and Google may process data outside the EEA. Their contractual documentation describes safeguards, including standard contractual clauses where required; ask us for details of specific transfers. Opening a map loads OpenStreetMap tiles and discloses your IP to that provider. Web fonts load from Google Fonts. External links open services with their own privacy policies. Bookings and payments are handled by studios.

Cookies, saved choices and statistics

Sign-in uses necessary Clerk cookies (such as __session, __client, __client_uat and technical variants) for sessions and authentication. Duration depends on the cookie and authentication settings; we do not use them for advertising. pilates-saved and pilates-places-language are localStorage entries created when you choose to save a studio or language and remain until changed or site data is cleared. Our application statistics store only daily aggregate counts of public pages, clicks and searches without results, with no search text, email, IP or persistent visitor ID in those counters. DNT and GPC are honoured. Provider security systems separately process technical data, including IP for form rate limits. We currently use no advertising trackers.

Your rights

You may request access, correction, deletion, restriction and, where applicable, data portability. You may object to processing based on legitimate interests. Any consent can be withdrawn at any time without affecting prior lawful processing. Email hello@pilatesplaces.co; we verify identity proportionately and normally respond within one month. We notify you of any legally permitted extension. You can complain to the Slovenian Information Commissioner (ip-rs.si) or your competent supervisory authority. We do not use your data for automated decisions with legal or similarly significant effects.

Further information