Este documento está disponível apenas em inglês.
Privacy Policy
Last updated: 27 September 2026
1. Who is responsible
The controller for the processing of personal data on openmatstudios.net is Matteo Senoner, R. Dom João de Castro 12-2, Oeiras, Portugal, info@openmatstudios.net. For any privacy question, write to this address.
2. What OpenMat does
OpenMat lets yoga, pilates and fitness studios offer free or low-cost trial spots in classes that are not fully booked. People aged 18 and over can create an account and book trial classes. Each studio decides whether and after how many weeks a guest can book a trial there again.
3. Which data we process and why
a) Guest accounts: name, email address, mobile phone number and password (stored only in encrypted form). Purpose: creating and managing your account and your bookings. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
b) Bookings: the class you booked, time of booking, status (booked, cancelled, attended, no-show, ineligible) and, if you joined via a friend's link, who shared it. Purpose: managing bookings and enforcing the rules of the service. Legal basis: Art. 6(1)(b) GDPR.
c) Abuse prevention: we record no-shows and cases where a studio reports that you had already visited it. After two confirmed no-shows or two such reports, booking may be blocked. Purpose: keeping trial spots fair for everyone and for the studios. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). A studio report is reviewed by us on request, and you can contact us at any time to object or ask for a review.
d) Studio accounts: name of the contact person, email address, studio name, address, description, photos and class details. Purpose: presenting the studio and its classes and managing the studio account. Legal basis: Art. 6(1)(b) GDPR.
e) Communication: when you email us, we process your message and contact details to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.
f) Technical data: when you use the website, the hosting provider processes technical data such as IP address, date and time of access and browser information to deliver the website securely. Legal basis: our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR).
4. Sharing with studios
When you book a class, your name, email address and phone number are shared with the studio you booked so it can manage your visit. The studio may only use this data for your booking. Each studio is itself responsible for how it handles your data once received.
5. Service providers
We use the following providers, who process data on our behalf under data processing agreements:
- Lovable (Lovable Labs Incorporated AB, Sweden) and its cloud infrastructure provider Supabase, Inc. (USA): hosting of the website, database and user accounts.
- Google Ireland Limited (Ireland): Google Workspace for our email communication.
- Resend, Inc. (USA): sending of transactional emails such as booking confirmations, reminders and notifications to studios.
Where data is processed outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on Standard Contractual Clauses.
6. Maps
Maps are only loaded when you tap "Show map". Your browser then connects to servers of the OpenStreetMap Foundation (United Kingdom), which receives your IP address. Legal basis: your consent by tapping the button (Art. 6(1)(a) GDPR). The United Kingdom is covered by an adequacy decision of the European Commission.
7. Cookies and local storage
We only use technically necessary storage in your browser to keep you logged in and to remember your language. We do not use analytics, tracking or advertising cookies.
8. How long we keep data
Account data is kept as long as your account exists. When you delete your account, your name, email address, phone number and password are deleted and past bookings are anonymised. Records needed for abuse prevention (no-shows, studio reports) are linked to an anonymised identifier and deleted no later than 24 months after your last booking. Data we must keep for legal reasons is kept for the legally required period.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time with effect for the future. You can download your data and delete your account directly in your profile, or write to info@openmatstudios.net.
You also have the right to lodge a complaint with a supervisory authority, for example the Portuguese Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt, the Austrian Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at, or the authority in your country of residence.
10. Minimum age
OpenMat is only available to people aged 18 and over. We do not knowingly process data of minors.
11. Changes
We may update this policy when the service changes. The current version is always available on this page.