Privacy notice

1. Controller

Maike Schelling, Germany ·

2. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. When you visit the site, the provider automatically stores server log files (IP address, date and time of access, browser type, referrer). This is done on the basis of Art. 6 (1) (f) GDPR for the secure and stable operation of the website. A data processing agreement is in place with the provider.

3. Contact form and e-mail

If you send us an enquiry via the contact form or by e-mail, the details you provide (name, e-mail address, subject, message) will be stored for the purpose of processing your request. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual measures, otherwise Art. 6 (1) (f) GDPR. The data is deleted once your enquiry has been dealt with and no statutory retention periods apply.

The form runs on our own server. Your message is received there and forwarded to us by e-mail; no third-party form service is involved, and no data is transferred to a third country. To guard against automated submissions, the server keeps a one-way hash of your IP address for one hour — a value from which your IP address cannot be recovered.

4. Booking a class

When you book a place, we process the name and e-mail address you enter, optionally your telephone number, the class and date you chose, the number of places, and the time of the booking. Without these details a place cannot be reserved for you.

The legal basis is Art. 6 (1) (b) GDPR: the booking is a contract between you and us, and the data is needed to perform it. We use your e-mail address to send you the confirmation, the cancellation link and, if necessary, word that a class cannot take place.

Waiting list. When a date is full you can put your name on a waiting list. We process the same details as for a booking, except that no place is created. The legal basis is Art. 6 (1) (b) GDPR (steps taken at your request prior to a contract). You can take yourself off the list at any time using the link in your mail; the entry is deleted after the date at the latest.

Voluntary notes about your health. The booking form offers a free field for anything we should know — an injury, a pregnancy, a condition. Whatever you write there is entirely up to you and nothing is required. If you do mention health details, these are data of a special category under Art. 9 GDPR, and we process them only on the basis of your explicit consent under Art. 9 (2) (a) GDPR, given by ticking the box on the booking form. They are used for one purpose: so that the class can be taught safely for you. You may withdraw this consent at any time with effect for the future, by writing to the address above.

Bookings are stored on our own web server in Germany, not with a booking platform. No data is passed to third parties.

5. Newsletter

To receive the newsletter we process your e-mail address and, if you give it, your first name. The legal basis is your consent under Art. 6 (1) (a) GDPR.

We use the double opt-in procedure: after you enter your address, you receive one e-mail with a confirmation link. Only when you click it are you on the list. Until then your address is held solely as an unconfirmed request and is removed if it stays unconfirmed. To be able to prove that the subscription was requested, we store the time of the request and a one-way cryptographic hash of your IP address — a value from which your IP address cannot be reconstructed.

Every newsletter carries an unsubscribe link, and the signup page carries one too. Unsubscribing deletes your address from the list immediately and completely; nothing is kept on a suppression list. You may withdraw your consent at any time with effect for the future, which does not affect the lawfulness of what was sent before.

The newsletter is sent from our own server. It contains no tracking pixels and no measurement of opens or clicks, so we do not know whether or when you read it.

6. Feedback

The feedback page is anonymous. Your answers are stored without a name, without an e-mail address and without an IP address — only the answers themselves, the class you may have selected, and the date of submission. We therefore cannot connect feedback to a person, and we cannot connect it to a booking.

The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in improving the classes. Please do not enter personal details in the free text fields: if you do, they are stored as you wrote them, and because the entry is anonymous we have no way to find them again on your request.

7. Cookies

This website sets no cookies for visitors and uses no tracking or analytics tools. There is nothing here to consent to, which is why you are not asked.

One exception exists for the site owner: the internal administration area sets a single session cookie once Maike signs in, so the page knows she is still signed in. It contains no personal data, expires when the browser is closed, and is strictly necessary within the meaning of § 25 (2) no. 2 TDDDG.

8. Web fonts

This site uses the typefaces Playfair Display and Panchang. Both are self-hosted: the font files are delivered from this website’s own server. No connection to Google Fonts, Fontshare or any other third party is established, and no data about you is transmitted to them.

9. Social media

The link to our Instagram profile is a plain hyperlink. No data is transferred to Instagram until you actively click it.

10. How long we keep things

• Enquiries: until your request has been dealt with, unless a statutory retention period applies.
• Bookings: for the current season and up to the end of the following calendar year, so that attendance and payment can be reconstructed. Where a booking is part of accounting records, the statutory periods of § 147 AO and § 257 HGB apply (6 or 10 years). Voluntary health notes are deleted as soon as the class has taken place.
• Newsletter: until you unsubscribe. Unconfirmed requests are removed after 30 days.
• Feedback: anonymous from the outset, kept as long as it is useful.

11. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). Where processing rests on your consent — the newsletter, and any health details in a booking — you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, baden-wuerttemberg.datenschutz.de.

12. SSL/TLS encryption

For security reasons, this site uses TLS encryption for the transmission of confidential content. You can recognise an encrypted connection by the "https://" in the address bar.

Last updated: 10.2026