Privacy Policy for the Online Yoga Studio "Embodied Space"

 

A few words in advance:

 

Embodied Space KG, hereinafter referred to as "Embodied Space," takes the protection of your data very seriously. Embodied Space is committed to treating your data with the utmost confidentiality. Embodied Space does not disclose your data to third parties unless it is necessary to provide the services you have requested, there is a legal obligation, or you expressly wish to disclose it. Your data is protected by Embodied Space using powerful technical safeguards against unauthorized access by third parties. The following provisions provide you with detailed information on how your data is handled when using Embodied Space.

 

We have drafted this privacy policy (version 10.02.2024) to inform you in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act (DSG) about what information we collect, how we use data, and what decision options you have as a visitor to this website. Unfortunately, by the nature of things, these explanations may sound very technical, but we have made every effort to describe the most important things as simply and clearly as possible

 

Name and contact details of the data controller

 

Controller & Data Protection Officer at Embodied Space:

 

Embodied Space KG

Isengaustraße 11

5020 Salzburg

Tel .: +43664 2212 698

Email: hello@embodied-space.com

 

1.Data Controller

The data controller according to data protection laws is: Nathalie Grahlert, Owner of Embodied Space, hello@embodied-space.com

 

2. Automatic Data Storage

When you visit websites these days, certain information is automatically created and stored, just like on this website. When you visit our website, our web server (the computer on which this website is stored) automatically stores data such as:

 

• The address (URL) of the accessed website

• Browser and browser version

• The operating system used

• The address (URL) of the previously visited page (referrer URL)

• The hostname and IP address of the device from which access is made

• Date and time

 

This data is stored in files (web server log files). Generally, web server log files are stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed in the event of unlawful behavior.

The legal basis exists in accordance with Article 6(1)(f) of the GDPR (legality of processing) because there is a legitimate interest in enabling the error-free operation of this website by recording web server log files.

 

3.Collection and Processing of Personal Data

3.1. We collect and process personal data of our users only to the extent necessary for providing a functional website, as well as our content and services.

3.2. The processing of personal data is based on your consent or, if processing is necessary for the performance of a contract or pre-contractual measures.

3.3. Storage of Personal Data

Personal data that you transmit to us electronically on this website, such as your name, email address, address, or other personal information when submitting a form, will be used by us together with the time and IP address for the purpose specified, securely stored, and not passed on to third parties.

We use your personal data only for communication with those visitors who expressly request contact and for the processing of the services and products offered on this website. We do not pass on your personal data without consent, but we cannot exclude the possibility that this data may be viewed in the event of unlawful behavior.

If you send us personal data by email—away from this website—we cannot guarantee secure transmission and the protection of your data. We recommend that you never transmit confidential data unencrypted by email.

The legal basis exists in accordance with Article 6(1)(a) of the GDPR (legality of processing) because you give us your consent to process the data you have entered. You can revoke this consent at any time—just send an informal email; you can find our contact details in the Impressum.

 

4.Data Transfer to Third Parties

4.1. Transfer of personal data to third parties only occurs if necessary for fulfilling the contractual purpose, due to legitimate interests, or if there is a legal obligation.

4.2. We use data processors who are contracted to operate and maintain the website and associated services.

 

5. Data Security

5.1. We implement organizational, contractual, and technical security measures according to the state of the art to ensure compliance with data protection laws and protect processed data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

 

6. Cookies

6.1. Our website uses cookies. Further information can be found in our Cookie Policy [Click here to read the Cookie Policy].

 

7. Your rights under the General Data Protection Regulation (GDPR)

 

In accordance with the provisions of the GDPR and the Austrian Data Protection Act (DSG), you generally have the following rights:

 

• Right to rectification (Article 16 GDPR)

• Right to erasure ("right to be forgotten") (Article 17 GDPR)

• Right to restriction of processing (Article 18 GDPR)

• Right to notification—obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)

• Right to data portability (Article 20 GDPR)

• Right to object (Article 21 GDPR)

• Right not to be subject to a decision based solely on automated processing—including profiling (Article 22 GDPR)

 

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can complain to the supervisory authority, which in Austria is the Datenschutzbehörde (Data Protection Authority) whose website you can find at https://www.dsb.gv.at/.

 

8. Changes to this Privacy Policy

8.1. This Privacy Policy is regularly reviewed and updated as needed. The latest version is available on our website.