DATA PROTECTION
1. GENERAL
1.1 The use of personal data by Berlin Hot Yoga (owner Nelli Nolde) with its registered office at Boxhagener Straße 76-78 in 10245 Berlin (Berlin Hot Yoga) is based on the applicable legal provisions and the consent given by the user to use it Data.
1.2 Berlin Hot Yoga runs a studio for yoga and meditation. Berlin Hot Yoga can be used to book, reserve or buy various services in the field of sports and leisure activities and products (together the "Sports Offer"). The sports offerings are provided by Berlin Hot Yoga in-house. The subject of the contract is the use of the services of Berlin Hot Yoga (the "Service"). Berlin Hot Yoga services are used by the user (the "User").
1.3 Berlin Hot Yoga is aware that the protection and careful handling of the user's personal data is very important. As data protection at Berlin Hot Yoga is very important, Berlin Hot Yoga strictly adheres to the legal provisions applicable in Germany (GDPR, Telecommunications Act (TKG / TMG) ​​when using this data.
1.4 The user is encouraged to visit the Berlin Hot Yoga General Terms and Conditions (GTC) regarding the subject of the contract, the user's obligations, limitations of liability and numerous other important information on the Berlin Hot Yoga website at www.berlinhotyoga.de .
2. COLLECTION OF DATA
2.1 Berlin Hot Yoga collects and stores any information that the user provides on the Eversports platform ("Eversports") and which is transmitted to Berlin Hot Yoga in the course of an online booking or the user Berlin Hot Yoga in any other way, for example on site provides. Berlin Hot Yoga uses the personal data of the user to the extent permitted by law and, moreover, only with the user's consent. Insofar as the consent is given electronically as part of an online booking via Eversports, Eversports takes account of the statutory information requirements and logs this consent using suitable technical systems.
2.2 Berlin Hot Yoga uses the following personal data of the user: name, gender, email address, telephone number, date of birth, place of residence, booking data, existing products.
3. PURPOSE OF USE OF DATA
3.1 We process your data in the context of fulfilling the contract for the following purposes:
a) For making reservations and storing open products
b) To create invoices
c) To create a booking history
d) Medical data if it is relevant for yoga classes and only with the consent of the user
You can withdraw your consent to this data processing. A revocation means that we will no longer process your data for the above-mentioned purposes from this point in time. It should be noted that Berlin Hot Yoga services can no longer be used in the event of a revocation and the Studio Berlin Hot Yoga profile must be deleted. To withdraw your consent, please send an email to info@berlinhotyoga.de.
3.2 If you have subscribed to our newsletter, we will process your data to send our newsletter. You can cancel the subscription to the newsletter at any time directly via a link via the newsletter e-mails or by e-mail to info@berlinhotyoga.de. The newsletter is sent via website provider WIX.com Ltd., Namal 40, 6350671 Tel Aviv, Israel.
3.3 We save your data for the duration of the contractual relationship. By default, Studio Berlin Hot Yoga profiles including the profile data provided by the user will be deleted 6 years after the last booking in the event of inactivity and without a valid product (e.g. block of 10, subscription, etc.). Data that are on an invoice or that are necessary for the creation of an invoice will be kept longer due to the statutory retention period. After the retention period has expired, this data will also be deleted.
3.4 If a registration with Berlin Hot Yoga has been made in writing on site, this data will also be kept in paper form and destroyed after 6 years if our service is not used.
4. DATA SECURITY
4.1 For reasons of data security, personal data is stored in a closed system (Eversports) and protected with a password.
4.2 Eversports is a contract data processor of Berlin Hot Yoga and has taken appropriate measures to ensure data security (see: https://www.eversports.at/h/security ).
4.3 If Berlin Hot Yoga becomes aware that the user's data has been used systematically and seriously illegally and threatens to damage the user, Berlin Hot Yoga will inform the user immediately.
4.4 The Berlin Hot Yoga website contains links to other services or websites. Berlin Hot Yoga is not responsible for the data protection regulations and / or procedures of other websites. If the user follows the link to another website, the user is solely responsible for familiarizing himself with the data protection regulations of this other website. Berlin Hot Yoga's privacy policy is limited to information processed by Berlin Hot Yoga.
4.5 Berlin Hot Yoga uses other processors in addition to Eversports for this data processing. We pass on your data to the following additional recipients or recipient categories:
• Software provider for processing bookings, product management, payment processing, cash register and bookkeeping through Eversports (Eversports GmbH, Kauerhof 1-4, 1150 Vienna Austria)
• When contacting us (via contact form or e-mail), the user's information is stored for the purpose of processing the request and in the event that follow-up questions arise. This data is stored and processed by our website provider Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel.
• Use of PayPal as a payment method
If you decide to pay with the online payment service provider PayPal as part of your order process, your contact details will be sent to PayPal as part of the order triggered in this way. PayPal is an offer of PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes on the role of an online payment service provider and a trustee and offers buyer protection services.
The personal data transmitted to PayPal is mostly first name, last name, address, telephone number, IP address, email address, or other data that are required for order processing, as well as data that is related to the order such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.
This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.
However, please note: Personal data can also be passed on by PayPal to service providers, subcontractors or other affiliated companies, insofar as this is necessary to fulfill the contractual obligations from your order or the personal data are to be processed in the order.
Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit reporting agencies. This transmission serves the identity and credit check in relation to the order you placed. You can find out which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal in PayPal's data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
• Facebook social plugins
Our online offer uses (at times) social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). The plugins can be recognized by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/ .
When a user calls up a function of this online offer that contains such a plugin, his device establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted from Facebook directly to the user's device, which integrates it into the online offer. User profiles of the users can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore informs the users according to our level of knowledge.
By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by pressing the Like button or leaving a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save his IP address. According to Facebook, only an anonymized IP address is saved in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users can be found in Facebook's data protection information: https://www.facebook.com/about/ privacy / .
If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook before using our online offer and delete his cookies. Further settings and contradictions regarding the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info / choices / or the EU site http://www.youronlinechoices.com/ .
The settings are platform-independent, ie they are applied to all devices, such as desktop computers or mobile devices.
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or of how it is used by Instagram.
For more information, see Instagram's privacy policy: https://instagram.com/about/legal/privacy/ .
• Integration of services and content from third parties
It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated into our online offer. The integration of content from third-party providers always presupposes that the third-party provider perceives the IP address of the user, since without the IP address they could not send the content to the user's browser. The IP address is therefore required to display this content. Furthermore, the providers of third-party content can set their own cookies and process user data for their own purposes. User profiles of the users can be created from the processed data. We will use this content as sparingly as possible and avoid data, and choose reliable third-party providers with regard to data security.
The following illustration provides an overview of third-party providers and their content, along with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, options for objection (so-called opt-out):
- External fonts from Google, Inc., https://www.google.com/fonts ("Google Fonts"). Google Fonts are integrated by calling up a server at Google (usually in the USA). Data protection declaration: https://www.google.com/policies/privacy/ , opt-out: https://www.google.com/settings/ads/ .
- Maps of the "Google Maps" service provided by the third-party provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/ , opt-out: https://www.google.com/settings/ads/ .
- Videos of the “Vimeo” platform from the third-party provider Vimeo Inc. 555 West 18th Street
New York, New York 10011. Privacy Policy: https://vimeo.com/privacy .
Your data will be processed within the EU or the EEA. The appropriate level of protection results from an adequacy decision of the European Commission according to Art 45 GDPR.
5. USE OF COOKIES
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser the next time you visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.
6. GOOGLE ANALYTICS
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as so-called "cookies", text files that are stored on your computer. We have concluded a contract for order data processing with Google. You can find more information on the handling of user data at Google Analytics in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link : https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable .
As an alternative to the browser plug-in, you can click on this link https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable to prevent Google Analytics from collecting data on this website in the future.
An opt-out cookie is placed on your device. If you delete your cookies, you must click the link again. We use the "Activate IP anonymization" function on this website. As a result, Google will shorten your IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. We process this data in our legitimate interest, the legal basis for the use of Google Analytics is Art. 6 Para. 1 lit. f GDPR.
7. GOOGLE ADWORDS
Berlin Hot Yoga has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place advertisements in both the Google search engine results and the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance, by means of which an advertisement is only displayed in the Google search engine results when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed on topic-related websites using an automatic algorithm and taking the previously defined keywords into account.
Google AdWords is operated by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by displaying interest-related advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a data subject reaches our website via a Google ad, a so-called conversion cookie is placed on the data subject's information technology system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online shop system, have been accessed on our website.
The conversion cookie enables both we and Google to understand whether a data subject who came to our website via an AdWords advertisement generated sales, i.e. completed or canceled a purchase of goods.
The data and information collected through the use of the conversion cookie is used by Google to generate visitor statistics for our website. These visit statistics are used by us in turn to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future . Neither our company nor any other Google AdWords advertisers receive information from Google that could be used to identify the data subject.
The conversion cookie is used to store personal information, such as the websites visited by the data subject. Every time you visit our website, personal data, including the IP address of the internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the option to object to Google's interest-based advertising. For this purpose, the data subject must call up the link www.google.de/settings/ads from each of the internet browsers they use and make the desired settings there.
Further information and the applicable data protection regulations of Google can be found at https://www.google.de/intl/de/policies/privacy/ .
8. DECLARATION OF CONSENT TO THE PRIVACY POLICY
By ticking the box when booking online with Eversports, the user confirms that they have read the privacy policy of Berlin Hot Yoga. When booking on site, the user confirms that they have read the data protection regulations of Berlin Hot Yoga by signing the data protection regulations on site. The user acknowledges that the personal data mentioned in point 2.2 will be used for the purposes mentioned in point 3.1.
9. LEGAL INFORMATION
9.1 You can reach us using the contact details below.
By post to: Berlin Hot Yoga, Hinterhof, Aufgang 3, Boxhagener Str. 76-78, 10245 Berlin
By email to: info@berlinhotyoga.de
Data protection officer: Andrea Weber
9.2 In principle, you have the rights to information, correction, deletion, restriction, data portability and objection. For this, please contact us. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated, you can contact us directly. If we cannot solve your case to your satisfaction, you have the right to contact the supervisory authority at any time.
In Germany, the data protection authority is responsible for this ( www.bfdi.bund.de/DE/Home/home_node.html ).