sidebalance FIND YOUR EDGE.

PRIVACY

Privacy policy

This page explains which data we process, why, and what rights you have.

Last updated: October 2026

  1. Controller
  2. Overview
  3. Visiting the website
  4. Account and sign-in
  5. BodyCheck: photos and measurements
  6. Trainers, physios and studios
  7. Orders and payment
  8. Emails
  9. Cookies and local storage
  10. Storage period
  11. Recipients
  12. Your rights
  13. Security
  14. Changes

Controller

The controller is Tasbasi Gruppe Bülent Tasbasi e.K., Steekberg 5, 24107 Kiel, Germany. Owner: Bülent Tasbasi. Contact details are in the legal notice (Impressum).

Overview

We only process data we need to provide sidebalance. In your account settings you decide about the newsletter, how long your images are kept, and what trainers or physios may see.

Visiting the website

When you open our pages, the server processes technically necessary data, for example IP address, date and time, requested page, browser and operating system. This is necessary to deliver and secure the pages (Art. 6(1)(f) GDPR). Logs are only kept as long as necessary for secure operation and to investigate abuse.

We load icons from a content delivery network (cdnjs by Cloudflare). Your IP address is transmitted to the operator in the process.

Account and sign-in

For your account we store your name, email address, an encrypted password (hash) and optionally your phone number. We also store the times of sign-in, of acceptance of the terms and privacy notice, and security data such as failed sign-ins. The legal basis is performance of the contract (Art. 6(1)(b) GDPR).

If you reset your password, we send you a link by email. It is valid for one hour and can be used once.

BodyCheck: photos and measurements

For a BodyCheck you upload a photo. The body points in the picture are detected in your browser. The photo, the detected points, measurements calculated from them (for example angles and left-right differences) and the date are stored on our server and linked to your account. We use them to build your history and training suggestions.

Because photos and measurements allow conclusions about your body, we ask for your explicit consent before the scan (Art. 6(1)(a) and Art. 9(2)(a) GDPR) where required. You can withdraw it at any time with effect for the future by deleting your images or your account in the settings.

You decide how long photos are kept: under “Settings → Your images” you can keep them, have them deleted automatically after 90 days, 30 days, 7 days or 24 hours, or delete all of them now. Your measurements are not affected.

Without an account you can do a guest scan. The result is then available through a personal link for a limited time.

sidebalance is not a medical device and makes no medical statements.

Trainers, physios and studios

If a trainer, physio or studio supports you on sidebalance, that organisation only sees what you share under “Settings → Trainer & physio”: BodyCheck results, training plan and progress and, separately, your photos. Photos are not shared by default. You can change sharing at any time.

Orders and payment

For orders we process your name, billing address, email address, booked plan and payment status (Art. 6(1)(b) GDPR). Payments are handled by payment providers, depending on your choice Mollie B.V. (Netherlands) and Stripe Payments Europe, Ltd. (Ireland). You enter your payment details directly with them. We only receive whether the payment succeeded.

We keep invoices and booking records for up to ten years because of legal obligations (Art. 6(1)(c) GDPR, sections 147 AO and 257 HGB). This also applies if you delete your account. Afterwards the records are no longer linked to your name in the account.

Emails

You always receive emails that are necessary for your account, for example confirmation, password link, invoice and activation. You only receive newsletters and news if you agreed in the settings (Art. 6(1)(a) GDPR). You can unsubscribe there at any time. We store when you agreed or unsubscribed so we can prove it.

Cookies and local storage

We set a session cookie so you stay signed in. It is technically necessary. Your choice in the cookie notice and small settings, for example your language or that you closed the add-to-home-screen hint, are stored in your device’s browser. You can delete them in your browser settings.

If you add sidebalance to your home screen, part of the site is cached so the app starts faster.

Storage period

We store data as long as your account exists. If you delete your account, we remove access, personal details, photos, measurements and training plans. Records with a statutory retention period are excepted. Data from guest scans is deleted after a reasonable time.

Recipients

We only pass data on where necessary: to hosting and email providers who support us as processors, to payment providers, and to trainers or physios if you share it with them. We do not pass data on for advertising.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests (Art. 15 to 21 GDPR). You can withdraw consent at any time.

You can do a lot yourself: under “Settings → My data” you can download all your data as a file, and delete your account there. For anything else, write to the address in the legal notice.

You can also complain to a data protection supervisory authority, for example the Independent Centre for Privacy Protection Schleswig-Holstein (ULD) in Kiel.

Security

Transmission is encrypted with TLS. We only store passwords as hashes. Access to data is limited to what is necessary.

Changes

We update this policy when our offer or the legal situation changes. The version published here applies.