Privacy

The controller is Futó Csenge, sole trader, who runs FormX Reformer Pilates Studio.

• Registered office: 6000 Kecskemét, Torockói u. 10, Hungary
• Registration number: 62522980
• Tax number: 92187379-1-23
• E-mail: formxpilates@gmail.com
• Telephone: +36 30 113 0671

I am not required to appoint a data protection officer (GDPR Article 37). You can contact me directly with any data protection question using the details above.

You can book through the Bookcut.eu online booking system, by telephone or by email.

• Data processed: name, email address, telephone number, booking details (time, class type), class pass sessions, cancellations and missed classes without notice.
• Purpose: managing bookings, sending confirmations and reminders, keeping track of class passes, staying in touch and settling missed-class fees.
• Legal basis: performance of a contract (GDPR Article 6(1)(b)).
• Retention: up to 5 years from your last booking (the general limitation period under the Hungarian Civil Code).

Without the data needed for a booking, I cannot book a class for you.

• Data processed: name, address (for companies, company name and tax number), the service and the amount.
• Purpose: issuing invoices and meeting accounting and tax obligations.
• Legal basis: compliance with a legal obligation (GDPR Article 6(1)(c); Section 169 of Hungarian Act C of 2000 on Accounting).
• Retention: 8 years.

If you tell me about an injury, a complaint, a pregnancy or any other health condition I should take into account, I use it only to run your class safely and adapt it to you.

• Legal basis: your explicit consent (GDPR Article 9(2)(a)), which you can withdraw at any time.
• Retention: for as long as we need it for our work together, or until you ask me to delete it.

I do not share this information with anyone.

• Data processed: if you contact me by telephone, email or Instagram: your name, contact details and the content of your message.
• Purpose: answering your question.
• Legal basis: steps prior to entering into a contract, or legitimate interest (GDPR Article 6(1)(b) and (f)).
• Retention: 1 year after the matter is closed.

Messages sent on Instagram are also subject to Meta's own privacy rules.

You do not need to provide any personal data to browse this website.

• Necessary storage: your browser stores your chosen currency and your cookie choice (formx-currency, formx-consent). These do not identify you and never reach me. Legal basis: Section 155(4) of Hungarian Act C of 2003 on Electronic Communications (storage necessary for a service you requested).
• Google Ads measurement: only with your consent. If you choose Accept in the cookie banner, the Google Ads tag sets cookies (for example _gcl_au, for 90 days) so I can measure how many people book a class from my ads. Legal basis: consent (GDPR Article 6(1)(a)). If you do not consent, the tag sets no cookies and Google only receives cookieless, aggregated measurement signals.
• Server logs: the hosting provider briefly logs requests (IP address, time, page opened, browser type) to keep the site secure. Legal basis: legitimate interest (GDPR Article 6(1)(f)), the security of the website.

You can change your cookie choice at any time with the Cookie settings button in the footer. Withdrawing consent does not affect the lawfulness of earlier processing.

• Bookcut: Deák Dániel, sole trader (registration number: 62031574, info@bookcut.eu), operator of the online booking system, acting as processor. The further providers it uses (hosting, database, email delivery) are listed in Bookcut's privacy notice: bookcut.eu/adatvedelmi-tajekoztato
• Vercel Inc.: 440 N Barranca Avenue #4133, Covina, CA 91723, USA (privacy@vercel.com), the website's hosting provider.
• Google Ireland Limited: Gordon House, Barrow Street, Dublin 4, Ireland; ad measurement, only with your consent.
• Card payments: card payments at the studio are handled by the card acceptance provider; I have no access to your card details.
• Authorities: only where the law requires it (for example, the tax authority).

I do not sell your data or pass it on to anyone for marketing.

Vercel and Google may also process data in the United States. This takes place under the EU-U.S. Data Privacy Framework (European Commission Implementing Decision (EU) 2023/1795), to which both companies have signed up.

• Access: you can ask what data I process about you (GDPR Article 15).
• Rectification: you can ask me to correct inaccurate data (Article 16).
• Erasure: you can ask me to delete your data where it no longer needs to be kept (Article 17).
• Restriction: in certain cases you can ask me only to store your data (Article 18).
• Portability: you can ask to receive your data in a machine-readable format (Article 20).
• Objection: you can object to processing based on legitimate interest (Article 21).
• Withdrawal: you can withdraw your consent at any time (Article 7(3)).

You can send your request by email or telephone. I will reply within one month at the latest (GDPR Article 12(3)).

If you feel I have breached your data protection rights, please contact me first so we can sort it out together.

You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

• Address: 1055 Budapest, Falk Miksa utca 9–11.
• Postal address: 1363 Budapest, Pf. 9.
• Telephone: +36 1 391 1400
• E-mail: ugyfelszolgalat@naih.hu
• Website: naih.hu

You can also go to court; you may bring proceedings before the regional court for your place of residence.

I protect your data with appropriate technical and organisational measures, and only those who need it for their work can access it.

If this notice changes, I will publish the updated version on this page.