Privacy policy
Privacy Policy
General
- Your personal data in the sense of Art. 4 No. 1 DSGVO (e.g. title, name, address, e-mail address, payment information) will only be processed by us in accordance with the provisions of German data protection law and taking into account the European General Data Protection Regulation (DSGVO). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
- The processing within the meaning of Art. 4 No. 2 DSGVO of personal data is lawful pursuant to Art. 6 DSGVO if one of the following conditions is met:
- (a) the data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes;
- (b) processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request;
- (c) processing is necessary for compliance with a legal obligation to which the controller is subject;
- (d) processing is necessary in order to protect the vital interests of the data subject or another natural person;
- (e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- (f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
- The processing of special personal data (e.g. health data) within the meaning of Article 9 (1) of the GDPR is lawful in particular pursuant to Article 9 (2) of the GDPR if one of the following conditions is met:
- there is an explicit consent of the person;
- processing is necessary for the establishment, exercise or defense of legal claims or in the case of actions by the courts in the course of their judicial activities.
- Automatic decision-making or profiling with regard to personal data within the meaning of Art. 22 DSGVO does not take place.
- The operator ensures the security of the data in accordance with Art. 32 DSGVO, taking into account the principle of proportionality, through appropriate technical measures.
- If, contrary to expectations, a breach of data protection should occur, the competent supervisory authority will be notified in accordance with Art. 33 of the GDPR, as well as the data subject in accordance with Art. 34 of the GDPR.
Scope
This data protection declaration refers only to our web pages. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.
Duration of data storage
The duration of the storage of the data transferred by you is based on the legal storage obligations. Insofar as retention periods under commercial and tax law must be observed, the duration of storage of certain data may be up to 10 years.
Disclosure of data to third parties
A transfer of data transmitted within the framework of the contractual relationship to third parties (Art. 4 No. 10 DSGVO), only takes place if you have expressly declared your consent (Art. 4 No. 11 DSGVO) or the transfer is necessary for the performance of the contract. The consent can be revoked informally at any time. Data collected through your visit to the website will only be collected by third parties who are explicitly named below.
Responsible person in the sense of the DSGVO
The responsible person within the meaning of the General Data Protection Regulation (DSGVO), as well as other data protection laws applicable in the European Union and other provisions with data protection character is:
YOGALAXY BY YOGALUFT
Janika Staats
Brüsseler Str. 17
50674 Cologne (Germany)
e-mail: info@yogaluft.de
Tel: +49 (0) 221 / 99989987
Cookies
We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (PC, laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f DSGVO. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or that a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
Storage of access data in log files
You can visit our websites without providing any personal information.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type/ browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
The purpose of the processing results from our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) DSGVO.
An order processing contract has been concluded with our hoster.
Handling of personal data
The website operator collects, uses and discloses your personal data only if this is permitted by law or if you consent to the collection of such data.
Personal data includes all information that can be used to identify you personally and that can be traced back to you - for example, your name, e-mail address and telephone number.
Registration / Login
Registration is required to use some functions. The login data is stored on the server in encrypted form. Data will not be passed on to third parties, unless this is necessary for the execution of the contractual relationship. The data can be changed or deleted by you at any time. After deletion of the data, the service can no longer be offered to you unless you register again.
In addition to the data entered by you, the IP address, as well as the date and time of login are also stored. The storage of IP data serves the prevention of abuse and for the clarification of criminal offences.
Order process
All data entered by customers in the course of an order transaction is stored. This includes:
- Name, first name
- address
- payment data
- e-mail address
Those data which are absolutely necessary for delivery or order processing will be passed on to third party service providers. As soon as the storage of your data is no longer necessary or required by law, they will be deleted.
Google Web Fonts
External fonts, Google Fonts, are used on these web pages. Google Fonts is a service of Google Inc. ("Google"). The integration of these web fonts is done by a server call, usually a Google server in the USA. This transmits to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google.
The legality of the use results from Art. 6 para. 1 p. 1 lit. f) DSGVO.
You can find more information in Google's privacy policy, which you can access here:
https://www.google.com/fonts#AboutPlace:about
https://www.google.com/policies/privacy/
This site uses so-called web fonts provided by Fonticons, Inc. for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the servers of Fonticons, Inc. or the provider Stackpath. This enables Fonticons, Inc. to know that our website has been accessed via your IP address. The use of web fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font from your computer will be used.
An order processing agreement has been concluded.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
An order processing agreement has been concluded with Google Inc.
Use of social media plugins
This website uses Facebook social plugins, which is operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations are recognizable by the Facebook logo or the terms "Like", "Like", "Share" in Facebook's colors (blue and white). Information on all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/
The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and extent of the data that the plugin transmits to the servers of Facebook Inc. Information on this can be found here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you user has visited this website. There is a possibility here that your IP address will be stored. If you are logged into your Facebook account during your visit to this website, the aforementioned information will be linked to it.
If you use the functions of the plugin - for example, by sharing or "liking" a post - the corresponding information will also be transmitted to Facebook Inc.
If you would like to prevent Facebook. Inc. linking this data to your Facebook account, please log out of Facebook before visiting this website.
Furthermore, this website uses the "+1" button from Google Plus. This is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). If you visit a page that contains the "+1" button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence on the nature and extent of the data that the plugin transmits to the servers of Google Inc. If you click on the "+1" button while logged into Google +, you share the content of the page on your public profile.
According to Google Inc., personal data is only collected when you click on the button. Even for logged-in Google users, the IP address, among other things, is stored. If you would like to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.
Information on the "+1" button can be found here: https://developers.google.com/+/web/buttons-policy.
Furthermore, this website uses Twitter chat areas. These are operated by Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). If you visit a page that contains such a button, a direct connection is established between your browser and the Twitter servers. The website operator therefore has no influence on the nature and extent of the data that the plugin transmits to the Twitter Inc. servers.
According to Twitter Inc., only your IP address is collected and stored.
Information on the handling of personal data by Twitter Inc. can be found here: https://twitter.com/privacy?lang=de
Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or "purchase on account" as well as payment by installments via PayPal, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal as well as the installment payment via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values.
For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Instant bank transfer / Klarna
If you use "Sofortüberweisung" as a payment method, your access data for your online banking account (log-in and PIN) as well as your account data (BIC and IBAN) will be collected and processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
You can find out more about the provider's data protection here:
https://www.klarna.com/sofort/datenschutz/
Payment by credit card
When paying by credit card, you agree that your entered data will be transferred to the credit company (Visa, Master Card, American Express). It is pointed out that the respective credit company may obtain a credit report about you. We have no influence on this. The collection of the data is justified for the execution of the contract from Art. 6 DSGVO.
Billbee
Order processing is carried out via the service provider "Billbee" (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address and, if applicable, other personal data will be passed on to Billbee in accordance with Art. 6 Para. 1 lit. b DSGVO exclusively for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order.
Details on data protection at Billbee and the privacy policy can be viewed at the following link:
https://www.billbee.io/datenschutz/
Newsletter
On our website we offer you the possibility to subscribe to our newsletter. With this newsletter we inform you about our offers in regular intervals. To receive our newsletter, you need a valid e-mail address. We will check the e-mail address you have entered to ensure that you are indeed the owner of the e-mail address provided or that the owner is authorized to receive the newsletter. With your registration for our newsletter, we will store your IP address and the date and time of your registration. This serves as a safeguard on our part in the event that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge. No other data is collected on our part. The data collected in this way is used exclusively for the purpose of receiving our newsletter. It will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place. You can cancel your subscription to this newsletter at any time. Details on this can be found in the confirmation email as well as in each individual newsletter.
E-mail advertising with subscription to the newsletter
If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis based on your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.
The newsletter is sent via the provider MailChimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. The provider has joined the Privacy Shield (data protection agreement between the EU and the USA) and therefore offers an adequate level of data protection. An order processing agreement has been concluded with MailChimp.
You can find out more about MailChimp's privacy policy here: https://mailchimp.com/legal/privacy/
Contact form
When using the contact form offered on these pages, the information you enter and the files you attach are transmitted and stored for the purpose of responding to your request. No data will be passed on to third parties.
The processing of the data entered into the contact form is based on your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) DSGVO.
Security of your data / SSL encryption
In accordance with the legal regulation according to § 13 para. 7 TMG, this site uses SSL encryption, recognizable by a lock symbol in the address bar of your browser. When SSL encryption is activated, transmitted data cannot be read by third parties.
As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Rights of the user
You can request information about the personal data stored about you at any time and free of charge. Your rights also include confirmation, correction, restriction, blocking and deletion of such data and the provision of a copy of the data, in a form suitable for transmission, as well as the revocation of consent given and the objection. Legal storage obligations remain unaffected by this.
Your rights arise in particular from the following standards of the GDPR:
Article 7(3) - Right to withdraw consent under data protection law.
Article 12 - Transparent information, communication and modalities for exercising the rights of the data subject
Article 13 - Information obligation when personal data are collected from the data subject
Article 14 - Information obligation when personal data have not been collected from the data subject
Article 15 - Data subject's right of access, confirmation and supply of a copy of personal data
Article 16 - Right to rectification
Article 17 - Right to erasure ("right to be forgotten")
Article 18 - Right to restriction of processing
Article 19 - Obligation to give notice in connection with rectification or erasure of personal data or restriction of processing
Article 20 - right to data portability
Article 21 - Right to object
Article 22 - right not to be subject to a decision based solely on automated processing, including profiling
Article 77 - Right to lodge a complaint with a supervisory authority
To exercise your rights (with the exception of Article 77 of the GDPR), please contact the body mentioned under the point "Responsible party in terms of the GDPR" (e.g. by email to: info@yogaluft.de).
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information NRW
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de
Homepage: https://www.ldi.nrw.de
(Please check whether the above data is still up to date before contacting us via the homepage).
