Privacy Policy

We are delighted by your interest in our company. Data protection is of the utmost importance to the management of Yoga Studio Fox. In principle, you may use this website without providing any personal data. However, if you wish to make use of any specific services offered by our company via our website, the processing of personal data may become necessary. If such processing is necessary and no legal basis applies, we will in general obtain the data subject’s consent.

The processing of personal data—such as name, address, email address or telephone number—is always carried out in accordance with the General Data Protection Regulation (GDPR) and consistent with country‑specific data protection laws applicable to Yoga Studio Fox. Through this Privacy Policy, our company aims to inform the public about the nature, scope and purpose of the personal data collected, used and processed by us. Furthermore, data subjects are informed via this policy about their rights.

As the controller responsible for processing, Yoga Studio Fox has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, internet‑based transmissions may contain security gaps, so absolute protection cannot be guaranteed. For this reason, each data subject is free to transmit personal data to us by alternative means, such as telephone.

1. Definitions

This Privacy Policy is based on the terms used by the European legislator when adopting the GDPR. Our aim is to make this policy easily readable and understandable for both the public and our clients and business partners. To this end, we clarify the terminology in advance.

We use the following terms in this policy:

a) Personal data means any information relating to an identified or identifiable natural person (“data subject”), identified directly or indirectly by reference to identifiers such as name, ID number, location data, online identifier, or characteristics reflecting physical, physiological, genetic, mental, economic, cultural or social identity.

b) Data subject means any identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing means any operation (automated or not) performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, alignment, restriction, erasure or destruction.

d) Restriction of processing means marking stored personal data to limit future processing.

e) Profiling means any form of automated processing of personal data used to evaluate aspects concerning performance at work, economic situation, health, preferences, interests, reliability, behaviour, location or movements of a natural person.

f) Pseudonymisation means processing personal data so it can no longer be attributed to a specific data subject without additional information, which is kept separately under technical and organisational measures.

g) Controller means the person or entity that determines the purposes and means of personal data processing, as defined by EU or national law.

h) Processor means the person or entity processing personal data on behalf of the controller.

i) Recipient means any person or entity to whom personal data is disclosed, whether a third party or not; public authorities receiving data for specific legal purposes are not regarded as recipients.

j) Third party means any entity other than the data subject, controller, processor, or authorised personnel under the direct authority of the controller or processor.

k) Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by statement or clear affirmative action, signifying agreement to processing of personal data.

2. Controller’s Name and Address

The data controller under the GDPR and applicable EU and national data protection laws is:

Yoga Studio Fox
Happy & Free GmbH, represented by Maja Mast
Im langen Hau 1
70565 Stuttgart
Germany
E‑mail: service@yogastudiofox.co.uk
Website: www.yogastudiofox.co.uk

3. Cookies

This website uses cookies—text files stored via your browser on your device. Many websites and servers use cookies, often including a unique ID to identify your browser. This allows websites to distinguish your browser from others, e.g. to remember login data or shopping cart content.

Cookies enable us to provide user‑friendly services which would not be possible without them, optimising content and offers tailored to users. You can prevent cookie placement by adjusting your browser settings, and delete already stored cookies via your browser or other software. If you deactivate cookies, some website functions may no longer be fully usable.

4. Collection of General Data & Information

Each visit to this website by a data subject or automated system triggers logging of general data and information in server log files. Captured data includes browser type/version, operating system, referrer URL, visited pages, date/time of access, IP address, Internet Service Provider and similar data used for defence against attacks.

We do not draw conclusions about data subjects from this data. Instead, the data is required to deliver content correctly, optimise content and advertising, ensure functional IT systems, and provide law enforcement with necessary information in case of cyber‑attacks. These anonymised data are analysed statistically and stored separately from personal data.

5. Registration on Our Website

Data subjects may register with the website by voluntarily providing personal data. Required data are indicated in the registration form. This data is collected and stored solely for internal use by the controller and may be shared with processors (e.g. delivery services) acting on behalf of the controller.

Registration also captures ISP‑assigned IP address, date and time to prevent misuse and support crime investigations. Stored data is not shared with third parties unless legally required or for law enforcement.

Registered users can update or delete their data at any time by emailing service@yogastudiofox.com. The controller will correct, delete or limit data processing upon request, unless legal obligations prevent it.

6. Newsletter Subscription

Users may subscribe to our newsletter via a sign‑up form specifying required data. Dispatch relies on valid email addresses and double‑opt‑in confirmation. We store the IP address, date and time of registration for security reasons.

Newsletter data is used only for dispatch and related communications (e.g. service updates). No data is shared with third parties. Subscribers can unsubscribe at any time via the link in each newsletter or by contacting us directly. The act of unsubscribing is automatically interpreted as a withdrawal of consent.

7. Newsletter Tracking

Newsletter emails may include tracking pixels—tiny images enabling log file recording and analysis of marketing success (e.g. open rates, linked clicks). Data collected via tracking pixels is stored and analysed to improve newsletter content. This data is not shared. Subscribers may withdraw their consent at any time, in which case tracking data will be deleted.

8. Contact via the Website

This site includes contact options (e.g. email address and contact form) allowing messaging in line with legal requirements. Submitted personal data is stored automatically and used solely to respond or communicate. No data is shared with third parties.

9. Routine Deletion and Blocking of Personal Data

We store personal data only as long as necessary for the storage purpose or according to legal retention requirements. Once that purpose ceases or retention period expires, data is routinely blocked or deleted in accordance with legal provisions.

10. Rights of the Data Subject

a) Right of Confirmation: You may request confirmation on whether we process personal data about you.
b) Right to Access: You may request free access to the personal data we hold, plus details such as purposes, categories, recipients, storage duration or criteria, correction or deletion rights, complaints options, profiling logic (if applicable), and origin of data. You may also request information on transfers to third countries and appropriate safeguards.
c) Right to Rectification: You may request immediate correction of inaccurate or incomplete data.
d) Right to Erasure: You may request deletion of data where applicable under GDPR (e.g. if data no longer necessary, consent is withdrawn, processing is unlawful).
e) Right to Restriction: You may request restriction under certain conditions (e.g. contested data accuracy, unlawful but undeleted processing, processing needed for legal claims).
f) Right to Data Portability: You can receive structured, machine‑readable personal data provided to us and request direct transmission to another controller, where technically feasible.
g) Right to Object: You may object to processing based on legitimate interests or public tasks; we will stop unless we can demonstrate compelling reasons. You may also object to profiling for direct marketing or statistical/historical purposes.
h) Automated Individual Decision‑Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, unless necessary for contract fulfilment, authorised by law, or based on explicit consent. If so, we provide safeguards such as human intervention, explanation, and contestation options.
i) Right to Withdraw Consent: You may withdraw consent to data processing at any time without affecting data processed prior to withdrawal.

11. Google Analytics (with IP Anonymisation)

We use Google Analytics, a web analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin D04 E5W5, Ireland. We use the _gat._anonymizeIp extension to anonymise IP addresses for users from the EU/EEA. Google Analytics collects referrer data, page access information and visitor duration to evaluate website usage and advertising. Google may transfer collected data to the US. Cookies are required; you can disable them via browser settings or via Google’s opt‑out Add‑On: https://tools.google.com/dlpage/gaoptout. Full details on Google’s privacy policy can be found on Google’s site.

12. Google reCAPTCHA

We also use Google reCAPTCHA by Google Ireland Limited (same address) to distinguish between human users and automated misuse, under GDPR Art. 6(1)(f). Data such as IP address may be transmitted to Google servers, potentially in the US. Google is certified under the EU‑US Privacy Shield. Details are available at https://www.google.com/intl/de/policies/privacy/.

13. PayPal as Payment Method

We integrate PayPal, operated in Europe by PayPal (Europe) S.à r.l. et Cie, S.C.A., Boulevard Royal 22‑24, L‑2449 Luxembourg.
When you choose PayPal at checkout, personal data (e.g. name, address, email, IP) is automatically transmitted to PayPal for payment and fraud prevention. PayPal may share data with affiliates and credit agencies. You can withdraw consent at any time without affecting data processed for contract fulfilment. PayPal’s privacy policy is available at https://www.paypal.com/de/webapps/mpp/ua/privacy‑full.

14. Legal Basis of Processing

We rely on GDPR Art. 6(1)(a) when consent is required, Art. 6(1)(b) for performance of contracts, Art. 6(1)(c) for legal obligations, Art. 6(1)(d) in rare cases of vital interests, and Art. 6(1)(f) for legitimate interests, provided they do not override data subjects’ rights. Recital 47 supports legitimate interest processing for customers.

15. Legitimate Interests Pursued by Controller or Third Party

Where processing is based on Art. 6(1)(f), our legitimate interest lies in conducting our business in favour of our employees and shareholders.

16. Storage Duration

We store personal data only for the period necessary to fulfil processing purposes or comply with statutory retention periods. When no longer needed, data is routinely deleted or blocked.

17. Required Provision of Personal Data

Provision of personal data may be legally required (e.g. tax law) or contractually necessary (e.g. identity for order fulfilment). Non‑provision may prevent contract conclusion. Prior to data submission, you will be informed whether data is mandatory and consequences of non‑provision.