Privacy Policy
PRIVACY POLICY
SIEL SARL, protection of personal data
Last updated: 2 November 2026
1. Data controller
This privacy policy describes how SIEL SARL (hereinafter "the Studio", "we") collects, uses and protects the personal data of its clients and visitors (hereinafter "you"), in the course of its activities and through the use of its website and booking platform.
The data controller is:
SIEL SARL, société à responsabilité limitée
Registered office: 4 rue Leonardo da Vinci, L-2681 Luxembourg
R.C.S. Luxembourg B305108
VAT No.: LU37291707
General email: contact@sielstudio.lu
For any question regarding your data: contact@sielstudio.lu
All processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018 on the protection of individuals with regard to the processing of personal data.
2. Data we collect
We only collect the data necessary for our activities:
- Identification data: surname, first name, date of birth, postal address, email address, telephone number.
- Account data: login credentials, password (encrypted), preferences.
- Booking data: classes booked, attendance history, cancellations, no-shows, waitlist registrations.
- Payment data: the plan purchased and transaction history. Banking details (card, IBAN) are processed directly by our payment provider and are not stored by the Studio.
- Health data: information you provide voluntarily (injuries, pregnancy, contra-indications, medical certificate submitted in support of a medical suspension). See Article 4.
- Image: photographs or videos taken for communication purposes, with your agreement or subject to your right to object.
- Contact requests: the information you send us through the contact form of our website or by email (name, email address, telephone number if provided, subject and message).
- Browsing data: IP address, technical connection data and cookies (see Article 8).
3. Purposes and legal bases
We process your data for the following purposes:
- Management of client accounts, bookings and the contractual relationship. Basis: performance of the contract.
- Processing of payments, invoicing and bookkeeping. Basis: performance of the contract and compliance with legal obligations.
- Management of cancellations, no-shows and any penalties. Basis: performance of the contract and legitimate interest (proper running of the Studio).
- Ensuring the safety of individuals and adapting classes to your physical condition. Basis: explicit consent (see Article 4).
- Answering requests sent through the contact form or by email. Basis: legitimate interest in replying to you and, where the request concerns a purchase, steps taken at your request before entering into a contract.
- Marketing communications and information about our offers (newsletter). Basis: consent, which may be withdrawn at any time.
- Prevention of fraud and unpaid amounts, and handling of disputes. Basis: legitimate interest.
- Production of communication materials (photos, videos). Basis: consent and/or right to object.
- Displaying an interactive map on our website (Google Maps). Basis: consent given through the cookie banner.
4. Health data (sensitive data)
Certain information you provide (injuries, pregnancy, contra-indications, medical certificates) constitutes sensitive data within the meaning of Article 9 GDPR and is subject to enhanced protection:
- It is processed only on the basis of your explicit consent, for the sole purpose of ensuring your safety and adapting your practice, or handling a medical suspension request.
- Providing it is optional; however, the absence of such information may prevent us from ensuring the safety of your practice or granting certain requests.
- Access to this data is strictly limited to authorised SIEL staff (relevant instructors and administrative staff). It is hosted by our booking platform (Bsport), acting as processor, and is never sold or used for any other purpose.
- Medical certificates are kept only for as long as necessary to process the request, then deleted.
- You may withdraw your consent at any time by writing to contact@sielstudio.lu.
5. Recipients and processors
Your data is neither sold nor rented. It may be shared with:
- our booking and payment platform (Bsport);
- our payment service providers;
- our technical providers (website hosting by Lovable, email and newsletter tools) and advisers (accountant, lawyer), where applicable;
- Google, for the map displayed on our website, only if you have accepted the corresponding cookies (see Article 8);
- administrative or judicial authorities where required by law.
These providers act as processors and are bound by confidentiality and security commitments compliant with the GDPR.
6. Transfers outside the European Union
Your data is in principle hosted and processed within the European Union. Some providers (for example Google, for the map displayed after your consent, or our payment and website providers) may process data in the United States or another third country. Such transfers are framed by appropriate safeguards: an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's standard contractual clauses.
7. Retention periods
We keep your data for no longer than is necessary for the purposes pursued:
- Account and booking data: for the duration of the contractual relationship, then twenty-four (24) months after your last activity.
- Accounting and invoicing data: ten (10) years, in accordance with Luxembourg legal obligations.
- Health data: for as long as necessary for the purpose (safety, medical suspension), then deleted or anonymised.
- Contact requests: twelve (12) months after our last exchange, unless the request leads to a contractual relationship.
- Marketing data: until you withdraw your consent, and at most twenty-four (24) months after the last contact.
8. Cookies and browsing data
Our website uses:
- cookies and similar technologies strictly necessary for it to function, in particular for booking and payment through the Bsport widgets. These do not require your consent;
- the Google Maps map service, provided by Google Ireland Limited, which displays the location of the studio. When the map loads, Google may set cookies and collect your IP address and browsing data for its own purposes. The map is therefore only loaded after you have given your consent through the cookie banner. Without consent, a static image and a link to Google Maps are displayed instead.
We do not use audience-measurement or advertising cookies. You can change your choices at any time via the "Cookie settings" link at the bottom of each page, or through your browser settings. Your choice is kept for six (6) months, after which you will be asked again.
If we add other non-essential cookies in the future, we will ask for your prior consent and update this policy.
9. Security
The Studio implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure (restricted access, passwords, secure providers). In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with the applicable regulation.
10. Your rights
In accordance with the GDPR, you have the following rights:
- right of access to your data;
- right to rectification;
- right to erasure ("right to be forgotten");
- right to restriction of processing;
- right to object, in particular to marketing;
- right to data portability;
- right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, contact us at contact@sielstudio.lu, enclosing proof of identity where necessary. We respond within one (1) month.
11. Complaints
If you consider that the processing of your data does not comply with the regulation, you have the right to lodge a complaint with the Luxembourg supervisory authority:
Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz, L-4370 Belvaux
Tel.: (+352) 26 10 60-1
www.cnpd.lu
12. Minors
Access to the Studio's services is reserved for persons meeting the age conditions set out in the Terms and Conditions. Data relating to an authorised minor is processed only with the consent of their legal representative.
13. Changes
The Studio may amend this policy to reflect legal developments or changes in its practices. The applicable version is the one in force on the date you consult it, as shown by the "Last updated" date above. In the event of a substantial change, you will be informed by appropriate means.
14. Contact
For any question regarding this policy or the processing of your personal data: SIEL SARL, 4 rue Leonardo da Vinci, L-2681 Luxembourg, contact@sielstudio.lu.