WE DO OUR BEST
TO PROVIDE YOU WITH THE BEST
Here at Breathe and Live Yoga School we take your privacy and the processing of your personal data very seriously. That is why, we have prepared this Privacy Notice where we describe our contact details, information regarding what personal data we process and what rights you have towards us and how you may defend them.
Always feel free to contact us if you have any questions about our processing of personal data or this Privacy Notice.
Thank you for your trust in us.
Contact Details to Breathe and Live Yoga School (the Controller)
Name of the company: Breathe and Live Yoga School
National company registration number: [Not yet confirmed]
Country of incorporation: Germany
E-mail address: firstname.lastname@example.org
Phone number: +49 1515 3946604
Postal address: Am Anger 2A, 85235, Odelzhausen
E-mail address to the customer experience team: email@example.com
What is personal data?
“Personal data” is any information relating to an identifiable or identified person (you as a user). An identifiable person is someone who can be identified, directly or indirectly, for example by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
The processing of special categories of data, defined as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and data concerning health or sex life, is prohibited, subject to certain exceptions.
Personal data which we handle
Your personal data may only be processed by us with your given consent, when it is necessary for the performance of a contract to which you are a party, or when it is necessary for our compliance with a legal obligation. The processing of the personal data, the specific purposes for the processing, the legal basis for the processing, and for how long we store your personal data, is described below.
When you subscribe to our newsletter, we will process your name, email address, date of birth, preferred language and your country of residence as you optionally provide to us, and our processing of your personal data is based on your consent. We may also process your home/delivery address, for delivery of a physical catalogue or seasonal postcards which you optionally subscribe to. We will store and process this information until you withdraw your consent by unsubscribing from our newsletter. You can unsubscribe from the newsletter via our website, or by following the Unsubscribe link in each sent email.
Your data may be shared with our third-party service providers such as our CRM system provider, email service provider and our employees on a need to know basis to carry out our services to you.
Purchases and deliveries
When you place an order with us, we will process your name, optionally a surname, experience level, optionally phone number, preferred language and your payment details. Our storing and processing of such data is necessary for us to perform under a contract to which you are a party and to deliver your purchased products and providing you with post-purchase service.
All the above data that you provide to us, will be stored with us for 3 years from your last purchase, as this is the length of consumer related statutes of limitations for civil claims in our countries of operation.
Your data may also be shared with our third-party service providers such as our CRM system provider, email service provider, online payment provider and our employees on a need to know basis to carry out our services to you.
We may also use your purchase data (experience level, language preference, country of residence and product choices) on an aggregated and anonymous basis for analytical purposes. None of your data used for these purposes can ever be traced back to you.
Your account and use of our website
If you open an account with us, we will store and process your name, home and/or delivery address, experience level, country of residence, language preference, phone number, date of birth, your payment details, as you voluntarily chose to provide to us when you open an account but are yet to complete a purchase. We will also store and process your purchase history and conversation history with our customer experience team.
Would you choose to use social login, such as your Facebook or Google account, when you open an account with us or when link your social account later, we will store and process your social account information and the email address linked to that social account. Signing up for the optional workshops, such as Asana Lab, etc automatically adds you to our customer data base. You may opt out at any time.
We process this data based on your consent and with the purposes of facilitating your use of our website and services, as well as to reward your loyalty and to request feedback and reviews of your purchase experience.
You can always withdraw your consent and inactivate and delete your account, whereafter we will delete your personal data within a month’s time (subject to data processed in accordance with “Purchases and deliveries” above). Your data will be stored and processed until you withdraw your consent, and we will send you a reminder of your account after 2 years of inactivity to make sure you still want to keep your account with us.
We also process your IP address on an anonymous basis when you have created an account or visited our site. We do this for the purposes of saving your site preferences such as chosen language and your country of residence, analysis of your logins and website usage for customizations of your user experience, for personalization of the content shown, for proactive customer support, and for saving the information of the time and place when you gave your consent to subscribing to our newsletter. We encrypt and anonymised your IP address to further ensure your privacy. We will store your IP address until you inactivate your account as described in the paragraph immediately above. You can also use a VPN or a proxy server to block our processing of your IP address.
Your data may be shared with our third-party service providers such as our CRM system provider, website hosting provider, email service provider, online payment provider and our employees on a need to know basis to carry out our services to you.
A cookie is a small piece of data that may be stored on your computer or mobile device, used to allow the website to “remember” you and your preferences over time. Session cookies are stored for only a brief amount of time (up to 30 minutes after your visit), while persistent cookies can be stored for up to 12 months after your last visit of the website.
You can manage the cookies and whether you accept cookies or not on your computer or mobile device by accessing the browser settings. For most browsers, you are able to categorically accept, refuse or delete cookies at all times.
We may use third-party Service Providers to monitor and analyze the use of our Service.
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: http://www.google.com/intl/en/policies/privacy/.
We are committed to securing personal information and any data we collect from clients. We use physical, technical and organisational security safeguards to help protect your personal data that we have collected from unauthorised access and third parties.
Summary of your rights towards us:
You as a user have the possibility to claim several rights towards us. Such rights are listed here and thereafter described in detail below. You find our contact details at the top of this Privacy Notice.
• Right to be forgotten
• Right to withdraw consent
• Right to access
• Right to rectification
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to lodge a complaint with a supervisory authority
Right to be forgotten
You have the right to request that we delete any personal data that we process about you. We will delete the data as soon as possible, but at least within one month’s time. If the personal data is needed for fulfillment of our contractual duties towards you or to preserve it with legal ground, we will however not delete the information until the data is no longer needed. We will also, without your explicit demand, delete such personal data that we have collected but do not longer have a lawful right to process. We will inform you about this, if it would occur. Bear in mind, that all services purchased are automatically cancelled at the moment of data deletion.
Right to withdraw consent
You have the right to withdraw your given consent at any time. If you do so, we will erase such personal data which is not subject to any other legal ground than your given consent. The erasure will be done as soon as possible, but at the latest within one month’s time from our receipt of your demand. Please note that your withdrawal of consent does not oblige us to erase personal data which is processed based on a contractual relationship or any other legal ground.
Right of access
You have, at any time, the right to receive confirmation from us as to whether personal data concerning you are being processed. You have also the right to access that personal data and to receive the following information:
The purposes of the processing
The categories of personal data concerned
The recipients or categories of recipients to whom personal data have been or will be disclosed
The envisaged period for which the personal data will be stored or the criteria used to determine that period
The existence of automated decision-making and profiling
Right to rectification
You have, at any time, the right to demand us to correct any inaccurate personal data within a month’s time from our receipt of your demand. You have also the right to complete incomplete personal data, taking into account our purposes of the processing, by the means of providing a supplementary statement.
Right to restriction of processing
You have, instead of demanding us to delete any data, the right to demand us to restrict our processing of your personal data. This may be achieved if
You have reason to believe that the accuracy of the personal data is not correct, and the restriction shall be in place during a period that allows us to verify the accuracy of the personal data
The processing is unlawful but you don’t want us to delete the personal data
We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims
You have objected to processing concerning profiling or automated decision-making, whereby a restriction shall be obtained during the period when we assess whether our legitimate ground for the processing override your legitimate ground.
You have the right to retrieve the personal data which we process about you and that you have provided to us. You have also the right to demand that we transmit such personal data to another data controller if the personal data is collected based on your consent or if the processing of the personal data is carried out by automated means by us, if we deem it technically feasible.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This can be done when the personal data is processed as part of automated decision-making, including profiling, and direct marketing, if such processing would be carried out (see “Personal data that we process” above).
Right to lodge a complaint with a supervisory authority
You have, at any time, the right to lodge a complaint with a supervisory authority regarding our processing of your personal data. Regardless of where we carry out our business, even if it would not be in the member state which is your country of residence, you have the right to lodge your complaint to your national supervisory authority. Please follow to the link below to find the contact details to your national supervisory authority:
About this Privacy Notice
With regard to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we must disclose what personal data we collect and process about you, and for what purposes. In this Privacy Notice, you find all such information that we are obliged to inform you.
The Regulation in its entirety in your language, may be accessed by following this link:
Would you like to defend your rights, which are listed in this Privacy Notice, or would you have any questions related to our processing of your personal data, you may always contact us using the contact information listed above.