Privacy Policy of Matsya Yoga

Privacy policy and information pursuant to Art. 13 and 14 GDPR

Controller responsible for data protection:

Contact details:
Verein Matsya Yoga (association, ZVR 1919606477)
Herbststraße 59/34
1160 Vienna, Austria
Place of activity: Rossatz 12, 3602 Rossatz
E-mail: home@yogamatsya.com
Phone: +43 680 2455462

Purposes of data processing:

Contact form

If you contact us via the form on our website or by e-mail, the data you provide will be stored by us for six months in order to process your enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The e-mail address, name and telephone number of the customer provided when contacting us or when downloading documents may be used at a later date to contact the customer for the purpose of promoting further products and services of Matsya Yoga Academy. Contact details are not passed on to third parties.

Newsletter

If you subscribe to our newsletter, either online via our sign-up form or on a sign-up list on site, we process your e-mail address and any information you provide voluntarily (first and last name, telephone number, interests, region of residence, language). We use this data to send you dates, news and offers from Matsya Yoga, Danube Atelier and Feldenkrais with Anne Ristorcelli (Rossatz 12, 3602 Rossatz) about once a month and to tailor the content to your interests.

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 174 TKG 2021). You can withdraw your consent at any time via the unsubscribe link in every e-mail or by sending a message to home@yogamatsya.com. The lawfulness of the processing carried out until the withdrawal remains unaffected.

After signing up online, you will receive an e-mail in which you confirm your subscription (double opt-in). We store the time of sign-up and confirmation as well as your IP address in order to be able to prove your consent. If you sign up on paper, we keep the signed list as proof.

We use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) to send the newsletter. Brevo processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. It records whether e-mails are opened and which links are clicked; this shows us which topics our readers are interested in.

Your data remains stored until you unsubscribe. We then delete it, with the exception of your e-mail address on a block list, so that you are not contacted again by mistake, and the proof of your consent.

Analysis purposes

In addition, data is collected and used for analysis purposes. This data processing is not personal (see the information on cookies below).

Registration

When you register, the user's e-mail address and a password are stored. If a purchase is subsequently made, the e-mail address is linked to the data collected during the purchase. The data you provide is required to set up the user account. The data is processed for as long as the user account exists. When the user account is deleted, the e-mail address and password as well as the link to the purchase data are deleted.

IT security

When you visit our yoga studio website, log files are also stored which contain the IP address and other data relating to the access to the website (e.g. date, time, user agent, referrer). This data is processed for a limited period (maximum 30 days) and only to protect against DDoS attacks or other interference with the functionality of the website and any underlying database systems.

Information on cookies

This website uses so-called cookies. These are small text files that are stored on your device with the help of your browser. They do not cause any harm.

This website uses so-called session cookies. These are generated when you access the website and are deleted automatically. They serve to recognise you when you visit the same website again within a short time, so that settings you have already made can be taken into account. No personal data is stored or processed in the process.

The purpose of cookies is to make the website user-friendly. Some cookies remain stored on your device until you delete them. They enable the website operator to recognise your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. Deactivating cookies may, however, restrict the functionality of the website.

Web analysis service Google (Google Analytics)

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the function "activation of IP anonymisation" on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is processed or stored. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to measure the performance of online advertising campaigns for analysis and optimisation purposes.

The data processed includes, in particular, online identifiers (including cookie identifiers), internet protocol addresses, device identifiers, location data, identifiers assigned by the customer and usage data (in particular time and duration of access, selection of certain offers, etc.). More information on how Google Analytics handles user data can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.

You can prevent the collection of data generated by the cookie and relating to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Instructions on how you can also prevent Google from storing data can be found at the following link: https://developers.google.com/analytics/devguides/...

When Google Analytics is used, the relationship with the web analysis provider is based on commissioned data processing. The transfer of data to the processor is based on an adequacy decision of the European Commission (self-certification Privacy Shield). The data is deleted regularly (currently every 26 months).

Use of Google AdWords conversion tracking

This website uses the online advertising programme "Google AdWords" and, as part of Google AdWords, conversion tracking. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies expire after a maximum of 90 days. If you visit certain pages of our website and the cookie has not yet expired, Google and the website operator can recognise that you clicked on the ad and were redirected to this page. The information obtained with the help of the conversion cookie is used to compile conversion statistics. The website operator learns the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag and/or performed various actions on the page. However, the website operator does not receive any information that can be used to identify users personally. If you do not wish to take part in the tracking, you can object to this use by preventing the installation of cookies through the corresponding setting of your browser software (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at: https://policies.google.com/technologies/ads, https://policies.google.com/privacy

When Google AdWords conversion tracking is used, the relationship with the web analysis provider is based on commissioned data processing. The transfer of data to the processor is based on an adequacy decision of the European Commission (self-certification Privacy Shield). Google is also obliged to delete the data regularly (currently every 39 months).

Social media

If Facebook social plugins are used on this website, they are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). They can be recognised by the Facebook logo or by the terms "Like" and "Share" in Facebook's colours (blue and white). Information on all Facebook plugins can be found at the following link: https://developers.facebook.com/docs/plugins/

The plugins are only activated when you click on the corresponding buttons. If they are shown greyed out, the plugins are inactive. You can activate the plugins on each visit.

The plugins establish a direct connection between your browser and the Facebook servers. This only happens after the plugin has been activated. The website operator has no influence whatsoever on the nature and scope of the data that the plugin transmits to the servers of Facebook Inc. Information on this can be found here: https://www.facebook.com/help/186325668085084

The plugin informs Facebook Inc. that you as a user have visited this website. Your IP address may be stored in the process. If you are logged into your Facebook account while visiting this website, this information is linked to your account.

Legal basis for data processing:

On the website of our Kundalini Yoga studio, data is processed exclusively on the basis of the statutory provisions (GDPR, TKG 2003).
Data processing (web shop, product reviews, booking tool and user account) is carried out on the basis of Art. 6 para. 1 lit. b) (performance of a contract) GDPR.

Where analysis tools are used, the data is used on the basis of Art. 6 para. 1 lit. f) (legitimate interest) GDPR. The legitimate interest in the use of the data is the improvement of the website and measuring the success of online advertising.

IT data security measures are also used on the basis of Art. 6 para. 1 lit. f) (legitimate interest) GDPR. The legitimate interest in the use of the data is securing our own IT systems.

Social media plugins are only used with your consent. The legal basis is therefore Art. 6 para. 1 lit. a) GDPR. Consent must be given again each time the website is accessed.

 

YouTube with enhanced privacy

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the enhanced privacy mode does not necessarily exclude the transfer of data to YouTube partners. The videos are played via YouTube's nocookie URL.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after a video has been started, YouTube can store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent attempts at fraud.
Further data processing operations over which we have no influence may be triggered after a YouTube video has been started.

YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

Further information on data protection at YouTube can be found in YouTube's privacy policy at: https://policies.google.com/privacy?hl=en

 

Your rights

In principle, you have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).

This is an English translation of our German privacy policy. In case of doubt, the German version applies.