Privacy policy, Good Moves Teachers
Last updated: 14 September 2026
Who is responsible for your data
GMS Good Moves Studio GmbH Immanuelkirchstraße 24, 10405 Berlin, Germany Registered at Amtsgericht Charlottenburg, HRB 274490 B Managing director: Indre Ezerskyte-Singh Email: hello@goodmovesstudio.com
We are the controller for the personal data described here, in the sense of the General Data Protection Regulation (GDPR).
What this policy covers
The Good Moves Teachers app, and the teacher area of our internal portal at internal.goodmovesstudio.com that the app talks to. The app is for people who teach classes at Good Moves Studio, and for people applying to.
It does not cover our public website or our class booking system, which our clients use.
What we never do
We say this first because it is the part people usually want to know.
- **We do not show you our clients' personal data, and we do not collect it
through this app.** You see how many people are booked into a class, never who they are. There is no attendee list anywhere in the app, by design.
- **No advertising, no advertising identifiers, no third-party analytics, no
tracking across other apps or websites.**
- We do not sell or rent personal data. Ever, to anyone.
- We do not track your location. The app never asks for it.
What we process, and why
Your account and profile
Email address, name, and the display name you choose. If you fill them in: date of birth, phone number, WhatsApp number, and a short biography. Your qualifications and whether you teach a standing schedule or only cover, both of which the studio sets.
We use these to sign you in, to know who is asking when you make a request, and to contact you about your classes. Your date of birth is used to wish you a happy birthday and is never shown to clients.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
Your schedule and availability
The classes you teach, which come from Mindbody, the studio's booking system. The hours you mark as available or preferred. The schedule changes you request and what we decide about them.
Legal basis: performance of our contract with you.
Cover requests
When you ask a colleague to cover a class, we store the class, the time, and the reason you give.
Your reason is only ever shown to the studio's administrators. Other teachers see the class, the time and the studio, and nothing else. It is also left out of any message the app helps you share.
Legal basis: performance of our contract with you.
Pay and invoicing
Your monthly pay statement, the classes and shifts it is built from, the number of people who attended each class, and any adjustments or bonuses.
For invoicing: your legal or company name, address, tax number (Steuernummer), whether you charge VAT and your VAT number if so, and your IBAN, BIC and account holder name. The invoices generated from these, as PDF files.
Your IBAN is shown in full only to you, in your own app. Administrators see the last four digits.
Legal basis: performance of our contract with you, and our legal obligations under German commercial and tax law for the invoices themselves (Art. 6(1)(c) GDPR, in connection with § 147 AO and § 257 HGB).
Documents you upload
Liability insurance, teaching certification, proof of freelance status, and first aid certification, together with any expiry date, and whether an administrator has checked them. We keep previous versions so there is a record.
Legal basis: performance of our contract with you, and our legitimate interest in being able to show that the people teaching in our studio are insured and qualified (Art. 6(1)(f) GDPR).
The loyalty bonus, if you take part
Which new member sign-ups are credited to you, and the bonuses earned and paid. Counts and your position relative to other teachers, never another teacher's figures, and never a member's identity.
Legal basis: performance of our contract with you.
Your device, for notifications
If you turn notifications on, a push token issued by Apple or Google, an identifier for the device, the platform, and the app version. We use these only to send you the notifications described below, and to stop sending them to a device you have signed out of.
Legal basis: your consent, given through the operating system's permission prompt, which you can withdraw at any time in your phone's settings or in the app (Art. 6(1)(a) GDPR).
Support and reliability
Problems you report through the app, including anything you write and any screenshot you attach. Technical error reports when something goes wrong, which record the error, where in the app it happened and the app version.
Legal basis: our legitimate interest in a working app (Art. 6(1)(f) GDPR).
If you apply to teach with us
The application form in the app is our ordinary careers form, and what you submit there is covered by the same terms as applying through our website: your contact details, your experience, your availability, and anything else you choose to tell us. We use it to consider your application.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Notifications
If you allow them, we send you a notification when:
- a colleague asks for cover on a class,
- someone covers a class you asked about, or an administrator reverses it,
- a schedule change you asked for is approved, countered or declined,
- your monthly pay statement is ready, or an invoice is still outstanding,
- you earn a loyalty bonus.
Nothing else. No marketing. Notifications never name a client and never include another teacher's reason for needing cover.
Who else sees your data
We use these service providers, each under a data processing agreement:
| Who | What for | Where |
|---|---|---|
| Railway | Hosting the portal and its database | European Union |
| Mindbody | The studio's booking system, the source of your class schedule | United States |
| Expo | Delivering push notifications to Apple and Google | United States |
| Apple, Google | Delivering the notification to your phone | United States |
| Google Workspace | Sending our email, including your sign-in code | European Union and United States |
Our tax adviser and, where the law requires it, the tax authorities receive invoices and pay records.
Where a provider is outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision. We have a data processing agreement in place with each of these providers. Our database itself is hosted in the European Union.
How long we keep it
- Invoices, pay statements and the records behind them: ten years, which
German tax and commercial law requires of us.
- Your profile and documents: while you teach with us, and for a reasonable
period afterwards in case a question arises about a past engagement.
- Cover requests and schedule history: while they are operationally
relevant, and closed requests are hidden from you after fourteen days.
- Push tokens: until you sign out, turn notifications off, or the device
stops accepting them.
- Error reports: three months.
- Applications: six months, if we do not take the application further.
Your rights
Under the GDPR you may ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, to receive it in a portable form, and to object to processing we base on legitimate interests. Where we rely on your consent, you may withdraw it at any time, which does not affect what we did before.
Some of this is already in the app: you can see and correct your own profile, invoicing details and documents at any time.
Deletion has one limit worth stating plainly. We cannot delete invoices and pay records before the ten years are up, because the law requires us to keep them.
Write to hello@goodmovesstudio.com and we will answer within a month.
If you think we have handled your data wrongly, you can complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.
Security
Data travels over encrypted connections. Signing in uses a one-time code sent to your email address, and the app holds your session in your phone's secure storage. Access to the portal behind the app is limited by role, and every change to pay data is recorded.
Your bank details get a second layer. The IBAN is encrypted with AES-256-GCM before it is written, so it is unreadable in the database itself, not only on the disk underneath it. It is decrypted only when it is needed: to show you your own details, to put them on your Rechnung, and to match the studio's outgoing payment to your statement. Administrators see the last four digits.
Our database is hosted in the European Union and encrypted at rest by our hosting provider, and only the studio's administrators can reach it.
Children
The app is for people teaching at the studio. It is not intended for anyone under 16 and we do not knowingly process their data.
Changes
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.
Contact
hello@goodmovesstudio.com GMS Good Moves Studio GmbH, Immanuelkirchstraße 24, 10405 Berlin