Privacy policy

This is a convenience translation. The German version is legally binding.

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. We process your data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller responsible for data processing on this website is:

Yogaschule Zehlendorf
Owner: Laura Brauer
Riemeisterstraße 114
14169 Berlin
Email: info@yogaschule-zehlendorf.de

2. Hosting

This website is hosted by an external service provider: netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. When you visit the website, technically necessary data (e.g. IP address, time of access) is processed. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6(1)(f) GDPR).

3. Collection of data when visiting the website / server log files

When you access our website, your browser automatically sends information to the server, which is temporarily stored in server log files. This includes in particular: browser type and version, operating system used, referrer URL, host name of the accessing device, time of the server request and the IP address. This data serves the technically error-free provision, security and optimisation of the website. The legal basis is Art. 6(1)(f) GDPR. This data is not merged with other data sources.

4. Cookies and consent

Our website uses cookies. Cookies are small text files that are stored on your device. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). For non-essential cookies and for loading external services (e.g. Google Maps, Eversports), we obtain your consent via our consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You may withdraw your consent at any time with effect for the future. You can also configure your browser so that cookies are stored only to a limited extent or not at all; the functionality of the website may then be restricted.

5. Contact form and email contact

If you contact us via the contact form or by email, the details you provide (e.g. name, email address, telephone number, content of the message) will be stored for the purpose of processing your enquiry and for possible follow-up questions. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract, e.g. course booking) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). The data remains with us until the purpose of storage no longer applies or you request deletion, provided no statutory retention obligations apply.

6. Online booking, customer account and payment processing via Eversports

We use the Eversports booking system to display the class schedule, manage customer accounts, and book and bill classes, passes and memberships. The provider is Eversport GmbH, Jakov-Lind-Straße 13 / Tür 6 / 5. Stock, 1020 Vienna, Austria (hereinafter “Eversports”).

a) Integration on the website. The booking calendar is embedded on our website. Data (e.g. your IP address) is transmitted to Eversports as soon as the widget is loaded. The content is therefore only loaded after you have given your consent via the consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Alternatively, you can make your booking directly on the Eversports platform.

b) Customer account, booking and membership. An Eversports customer account is required for use. For the performance of the contract, we, or Eversports on our behalf, process the data required for this purpose, in particular first and last name, address, email address, telephone number, booked classes and attendance history, pass and membership data, and the associated payment information. The legal basis is Art. 6(1)(b) GDPR (performance of the contract and pre-contractual measures). Where we are legally obliged to retain data, e.g. invoice data, further storage is based on Art. 6(1)(c) GDPR (in particular retention periods under commercial and tax law).

c) Payment processing. Payments (e.g. by SEPA direct debit, credit card or PayPal) are processed via Eversports or the payment service provider used by Eversports. The data required for the respective payment method (e.g. IBAN, card or PayPal details) is processed in this context. The legal basis is Art. 6(1)(b) GDPR.

d) Data processing on our behalf. Insofar as Eversports processes personal data on our behalf, a data processing agreement pursuant to Art. 28 GDPR is in place. Eversports processes the data in accordance with our instructions and takes appropriate technical and organisational measures to protect your data. Further information on data processing by Eversports can be found at https://www.eversportsmanager.com/de-DE/datenschutz.

7. Web analytics with Matomo

We use the open-source software Matomo for statistical analysis of website usage. Matomo is self-hosted by us – on the same server as this website (netcup, Germany); no analytics data is transferred to third parties. We have configured Matomo in a privacy-friendly manner: no cookies are set, your IP address is truncated (anonymised) before storage, and your browser’s “Do Not Track” setting is respected. It is therefore not possible to identify individual visitors. The legal basis is our legitimate interest in the needs-based design and statistical analysis of our website (Art. 6(1)(f) GDPR). The data collected is not merged with other data sources.

8. Integration of Google Maps

We use the Google Maps map service to display our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map service is used, data (in particular your IP address) is transmitted to Google; this may involve a transfer to the USA. The map is only loaded after you have given your consent via the consent banner (Art. 6(1)(a) GDPR). Further information: https://policies.google.com/privacy.

9. Data subject rights

Within the scope of the statutory provisions, you have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). If processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, a message to the contact details given above is sufficient.

10. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin
www.datenschutz-berlin.de

11. SSL / TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in the browser bar.

12. Currency and amendment of this privacy policy

This privacy policy is current as of 07/2026. It may become necessary to amend it due to further development of the website or changes in legal requirements. The current version can be accessed on this page at any time.