Last updated: January 2024
Our Commitment to GDPR
Yoga Norden is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This page explains your rights as a data subject and how we handle your personal information.
Data Controller
Yoga Norden acts as the data controller for personal data collected through this website. Our contact details are:
Yoga Norden
Hornsgatan 78
118 21 Stockholm
Sweden
Email: [email protected]
Lawful Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you submit a booking form or subscribe to communications, you provide explicit consent for us to process your data for those specific purposes.
- Contract: Processing is necessary to fulfill our service obligations when you book a class or session.
- Legitimate Interest: We may process data to improve our services and communicate relevant information, provided this does not override your rights.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests promptly.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected or when you withdraw consent.
Right to Restrict Processing
You may request that we limit how we use your data while we address any concerns you have raised about our processing activities.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or processing based on legitimate interests.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects concerning you.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Booking information is retained for two years after your last interaction with us unless you request earlier deletion.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
International Transfers
Your data is primarily stored and processed within the European Economic Area. If any transfer outside the EEA is necessary, we ensure appropriate safeguards are in place.
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by two months, in which case we will inform you.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).
Updates to This Notice
We may update this GDPR notice periodically. Any changes will be posted on this page with an updated revision date.