Who is responsible?
BASI Pilates Studio Zürich is operated by Sima Bürgin as a sole proprietor. She is the data controller for this website, studio enquiries and the studio’s customer administration: she decides why and how personal data is used for these purposes. Her postal address and email are shown above.
Customer and booking records are managed in Eversports, accessed by the studio through Eversports Manager. This website does not maintain a separate customer or booking database. Using Eversports does not remove the studio’s responsibility for its use of those records.
Eversports acts as a processor for studio administration and as a controller for its own platform accounts and services. Its privacy notice explains these roles, including activities for which it and a studio share responsibility.
Messages to the studio are handled through Google Workspace or, if you contact us there, WhatsApp. This notice covers the website, enquiries and studio bookings. Swiss data-protection law applies; other applicable requirements remain unaffected.
Enquiries and studio administration
When you contact us, we use your contact details, message and any information you choose to provide to answer your enquiry, arrange classes and manage our relationship with you. Booking records may include your name, contact details, class reservations, attendance, passes and payment status.
Our studio email uses Google Workspace. If you choose to contact us via WhatsApp, that service also processes information under its own privacy terms. Please do not send detailed medical information or payment-card details in a general enquiry.
Information is shared with the people and service providers who need it to handle your enquiry, booking or studio administration, and with authorities where required by law.
Website hosting and technical data
This website is hosted using OpenAI Sites and its delivery infrastructure, including Cloudflare. Loading a page transmits technical information such as your IP address, requested page, date and time, and browser or device information. The infrastructure processes technical data to deliver the website, investigate faults and protect it from misuse.
Sites also automatically records website traffic and provides statistics on visitors and page views over time in the hosting dashboard. No separate analytics SDK has been added to this website.
OpenAI publishes a Sites-specific data-processing addendum for personal data it hosts on behalf of a Site operator. OpenAI and its infrastructure providers operate internationally; this hosting does not guarantee that data stays in Switzerland.
Classes, passes and Eversports
We use Eversports to display schedules and prices and to manage bookings and passes. Its tools and public schedule feeds make requests to Eversports when they load, transmitting technical information such as an IP address and browser details. Booking, account and payment information is entered through Eversports and its payment providers, not through a payment form operated by this website.
The studio can access the records needed to organise classes and administer bookings. Eversports’ privacy notice describes its platform processing, payment services, cookies and account controls. Eversport GmbH is based in Austria and identifies Germany as its website and platform hosting location. Its data-processing agreement also provides for processing in the USA and Canada.
Maps and reviews
Google Maps helps you find our studios. The maps load automatically when the relevant embedded content loads, without a separate permission request on this website. Your browser connects to Google and sends technical information such as your IP address and browser details. Google can use cookies and process information under its own privacy policy.
Google reviews on the homepage are displayed through Elfsight, which also loads automatically. Elfsight receives technical information such as an IP address, operating system and browser type. Its policy describes the cookie elfsight_viewed_recently for counting widget views. This website does not present a click-to-load or cookie-consent control before these services load.
Cookies and browser storage
Cookies and similar technologies can be used by the embedded providers for their services. Their linked notices explain their uses and any choices they offer. Hosting traffic statistics are described above; the website’s own code contains no separate advertising pixel or analytics tracker.
The public class ticker caches upcoming class information in local browser storage. Cached information is reused only while it is less than 15 minutes old; it may remain stored until replaced or you clear your browser storage. It is not your customer account or booking history.
You can clear or restrict cookies and local storage through your browser, and use its available controls for third-party content. This may affect embedded services. Blocking cookies does not necessarily prevent technical requests to those providers. The website does not currently have its own cookie-preference panel.
Advertising and newsletters
At the date of this notice, the studio does not run Google Ads or send marketing newsletters. The studio has not added a Google Ads tag, remarketing pixel or separate Google Analytics tracker to its own website code.
An enquiry or class booking does not automatically sign you up for a studio newsletter. Messages concerning your enquiry or booking are service communications, not a newsletter subscription.
Before introducing newsletters or advertising tracking, we will update this notice to identify the services and explain your choices, and obtain consent where required. These future services are not covered as already active by this notice.
Processing outside Switzerland
The providers described above operate internationally. Eversports is based in Austria, identifies Germany as a hosting location and provides for processing in the USA and Canada in its data-processing agreement. Google, Google Workspace, OpenAI, Cloudflare and WhatsApp describe processing that can include the United States. WhatsApp also identifies Ireland and other service-provider countries. Elfsight uses international infrastructure. These services do not guarantee exclusively Swiss storage or access.
OpenAI’s published Sites addendum describes standard contractual clauses or adequacy decisions for relevant international transfers. Cloudflare identifies its Swiss–US Data Privacy Framework certification and standard contractual clauses. These are the providers’ published mechanisms, not a statement that every studio account or transfer uses the same arrangement.
The linked provider information and OpenAI’s sub-processor list give further details about recipients, locations and safeguards. For questions about a recipient or safeguard relevant to the studio’s use of your information, please contact the privacy contact above.
How long information is kept
The retention of enquiry and booking information is determined by the purpose for which it is needed: answering an enquiry, organising your classes and administering our customer relationship. Applicable legal record-keeping obligations and the establishment, exercise or defence of claims can require longer retention.
There is no single retention period for all information. You can ask the studio about retention or request deletion of your information; legal obligations may prevent immediate deletion of particular records. Providers apply their own retention rules to information they process independently, as explained in their linked notices.
Your choices and rights
Subject to the applicable legal conditions, you may request information about your personal data and its processing, correction of inaccurate data, deletion, or restriction of or an objection to processing. You may also request a copy or transfer of data where the legal requirements are met. Where processing relies on consent, you may withdraw it for the future.
Please email the studio to make a request. We may need to verify your identity. For information or concerns about Swiss data protection, you can contact the Federal Data Protection and Information Commissioner (FDPIC).
External links and updates
Instagram and teacher-training registration links lead to separate websites. Those providers receive information when you follow the links and handle it under their own privacy notices. This website does not embed an Instagram feed.
We will update this notice when the website’s services or the studio’s processing arrangements change. The date below identifies this version.