Source: https://www.private-yoga-frankfurt.de/en/privacy-policy/
Timestamp: 2019-04-20 20:47:07+00:00

Document:
In the following, we also refer to the persons concerned as “users”.
Provision of the online offering, its contents and functions.
We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the latest technology, implementation costs and the nature, scope, circumstances and purposes of the processing as well as the probability of occurrence and severity of the risk to the rights and freedoms of natural persons and organisational measures to ensure a level of protection appropriate to the risk; Measures include, in particular, ensuring the confidentiality, integrity and availability of data by monitoring physical access to the data, as well as their access, input, disclosure, availability and separation. In addition, we have established procedures that ensure the management of the rights of affected persons, data erasure and data vulnerability. Furthermore, we consider the protection of personal data already in the developmental phase, or selection of hardware, software and procedures, according to the principle of data protection by technology design, taken into account privacy aware default settings (Art. 25 GDPR).
If, in the context of our processing, we disclose data to other persons and companies (processors or third parties) or otherwise grant access to the data, this will only be done on the basis of legal permission (e.g. if a transmission of the data to third parties, as required by payment service providers, pursuant to Art. 6 (1) (b) GDPR for the performance of the contract) you have consented to, a legal obligation or based on our legitimate interests (e.g. the use of agents, web hosting, etc.).
If we commission third parties to process data on the basis of a so-called ” processing contract”, this is done on the basis of Art. 28 GDPR.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfil our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. That is, processing is, for example, on the basis of specific guarantees, such as the officially recognized level of data protection (e.g. through the “Privacy Shield” for the USA) or compliance with officially recognized special contractual obligations (the so-called “standard contractual clauses”).
You have the right to ask for confirmation as to whether the data in question is processed and for information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
According to Art. 16 GDPR, you have the right to demand the completeness of the data concerning you or the correction of the incorrect data concerning you.
You have the right to demand that the data relating to you, which you have provided to us, be obtained in accordance with Art. 20 GDPR and request the transmission thereof to other responsible persons.
You have the right to grant consent in accordance with. Art. 7 para. 3 GDPR with future effect.
You can object to the future processing of your data at any time, in accordance with Art. 21 GDPR. The objection may in particular be made against processing for direct marketing purposes.
According to legal requirements, storage occurs for 6 years, in accordance with § 257 para. 1 of the German Commercial Code (trading books, inventories, opening balance sheets, annual accounts, commercial papers, accounting documents, etc.) and for 10 years, in accordance with § 147 para. 1 of the German Fiscal Code (books, records, status reports, accounting documents, commercial and business papers, documents relevant to taxation, etc.).
We process inventory data (e.g., names and addresses as well as users’ contact information), contract data (e.g., services used, names of contacts, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. Art. 6 para. 1 subpara. b. GDPR. The entries marked as obligatory in online forms are required for the conclusion of the contract.
If we make an advance payment (e.g., when purchasing on account), we reserve the right to carry out an identity and credit check for the purpose of assessing credit risk on the basis of mathematical-statistical procedures from specialized service providers (credit agencies).
We process the information obtained by the credit agencies on the statistical probability of a default in the context of an appropriate discretionary decision on the establishment, implementation and termination of the contractual relationship. We reserve the right, in the case of a negative result of the credit check, to refuse payment on account or any other advance payment.
In accordance with Art. 22 GDPR, the decision as to whether we make advance payments is made solely on the basis of an automated decision in individual cases, which our software carries out on the basis of the information provided by the credit agency.
If we obtain your explicit consent, the legal basis for the credit information and the transmission of the customer’s data to the credit agencies is thus given, in accordance with. Art. 6 para. 1 subpara. a, 7 GDPR. If no consent is obtained, our legitimate interests in the reliability of the claim for payment constitutes the legal basis, pursuant to Art. 6 para. 1 subpara. f. GDPR.
When contacting us (via contact form or email), the information provided by the user is used to process the contact request, pursuant to Art. 6 para. 1 subpara. b) GDPR.
User information can be stored in our Customer Relationship Management System (“CRM System”) or similar organisation.
We delete the requests in the event that they are no longer required. We check the necessity therein every two years; enquiries from customers who have a customer account are stored permanently and refer to deletion on the details of the customer account. In the case of legal archiving obligations, deletion takes place after its expiry (end of commercial law [6 years] and tax law [10 years] pursuant to retention obligations).
If users leave comments or other posts, their IP addresses are saved for 7 days, based on our legitimate interests within the meaning given in Art. 6 para. 1 subpara. f. GDPR.
Concerning our own security, if someone leaves illegal content in comments and posts (insults, prohibited political propaganda, etc.), as we can be prosecuted for such comments or posts, there is hence a legitimate interest in the identity of the author.
Log file information is stored for security purposes for a maximum of seven days (for example, to investigate abusive or fraudulent activities), after which time the information is deleted. Where further data retention is required for evidential purposes, it shall be exempted from the aforementioned cancellation period until the final clarification of the incident.
We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and users in order to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines apply to their respective providers.
We use “session cookies” that are only stored for the duration of the current visit to our website (for example, to enable the saving of your login status or the shopping cart function and thus the use of our online offering itself). A session cookie randomly generates and saves a unique identification number, known as a session ID. In addition, a cookie contains information about its origin and retention period. These cookies cannot save any other type of data. Session cookies will be deleted if you have finished using our online offering and have, for example, logged out or closed the browser.
If users do not want cookies stored on their computer, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the browser’s system settings. The exclusion of cookies can, however, lead to functional restrictions of this online offering.
Google uses this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of this online offering and internet usage in general. In this case, pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA, upon which it will be shortened.
For more information about Google’s data usage, setting and opt-out options, please visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“Google’s use of your data when you use websites or apps from our partners”), https://policies.google.com/technologies/ads (“data usage for advertising purposes”), https://adssettings.google.com/authenticated (“Managing information Google uses to display advertising”).
The following information provides information about the contents of our newsletter as well as the registration, transmission and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to the receipt thereof and the processes therein.
Content of the newsletter: We send newsletters, emails and other electronic notifications with advertising information (hereafter “newsletter”) only with the consent or legal permission of the recipient. Where the contents of a newsletter are concretely described, they represent the authoritative consent of the users. Furthermore, our newsletters contain information about our products, offers, promotions and our company.
Double opt-in and logging: Registration for our newsletter is done through a so-called double-opt-in procedure. That is, after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that nobody can register with third-party email addresses. The registration for the newsletter will be logged in order to verify the registration process, in accordance with legal requirements. This includes the storage of the login and the confirmation time, as well as the IP address. Likewise, changes to your data stored with the dispatch service provider will be logged.
Furthermore, the dispatch service provider may, according to information available, transmit this data in pseudonymous form, i.e. without attribution to a given user, in order to optimise or improve their own services, e.g. for the technical optimisation of the dispatch and the presentation of the newsletters or for statistical purposes, so as to determine from which countries the recipients originate. However, the dispatch service provider does not use or transcribe the newsletter recipients’ data or pass on said data to third parties.
Login details: To subscribe to the newsletter, providing an email address is sufficient. Optionally, we ask for a name to be given in the newsletter for personalised salutation.
Measuring success: The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the dispatch service provider’s server when the newsletter is opened. This retrieval will initially collect technical information, such as information about the browser and your system, as well as your IP address and time of retrieval. This information is used to improve the technical performance of services based on the target audience’s specifications or their reading habits, based on their respective locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether the newsletters will be opened, when they will be opened, and which links will be clicked. For technical reasons, this information can be assigned to individual recipients of newsletters. However, it is neither our endeavour nor that of the dispatch service provider to observe individual users. The evaluations serve to recognize the reading habits of our users and to adapt our content accordingly or to send different types of content according to the interests of our users.
Germany: The sending of the newsletter and the measurement of success are based on the consent of the recipients, according to Art. 6 para. 1 subpara. a, Art. 7 GDPR i.V.m § 7 para. 2 No. 3 of the Unfair Competition Act or on the basis of the legal permission pursuant to Art. § 7 para. 3 of the Unfair Competition Act.
The logging of the registration process is based on our legitimate interests in accordance with Art. 6 para. 1 subpara. f GDPR and serves as proof of the consent for receipt of the newsletter.
Cancellation / Objection: You may cancel the receipt of our newsletter at any time, i.e. revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. If the users have subscribed to the newsletter and cancel this registration, their personal data will be deleted.
Based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) subpara. GDPR), we make use of content or services offered by third-party providers in order to provide their content and services, such as videos or fonts (collectively referred to as “content”). This always presupposes that the third-party providers of this content are aware of the IP address of the users, since they could not send the content to the users’ browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavour to only use content from respective providers that use the IP address solely for the purposes of delivering said content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include, but is not limited to, technical information about the browser and operating system, referring websites, time of access, and other information regarding the use of our online offering.
If our customers use the payment services of third parties (for example, PayPal or Sofortüberweisung), the terms and conditions and privacy policies of the respective third party apply, which are available within the respective websites, or transactional applications.

References: Art. 32
 Art. 6
 Art. 28
 Art. 44
 Art. 15
 Art. 16
 Art. 20
 Art. 7
 Art. 21
 § 257
 § 147
 Art. 6
 Art. 22
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 7
 § 7
 Art. 6
 Art. 6