Privacy Policy

Data Controller

hyaenilvtk B.V. is the data controller responsible for your personal data. You can contact us at:

Data Collection

The data we collect includes personal information that you provide directly to us and information that is automatically collected when you use our services. This includes your name, email address, phone number, payment information, and usage data from our website and services.

Information You Provide

• Contact information (name, email, phone number, address)
• Account registration details
• Class booking and payment information
• Health and fitness information relevant to yoga practice
• Communication preferences
• Feedback and survey responses

Information Automatically Collected

• Website usage data and analytics
• Device and browser information
• IP address and location data
• Cookies and similar tracking technologies

How We Use Your Information

We explain how we use your information to provide and improve our yoga and mindfulness services, communicate with you, and ensure the security of our platform. Your data helps us deliver personalized experiences and maintain the quality of our offerings.

Service Provision

• Process class bookings and membership registrations
• Manage your account and provide customer support
• Process payments and maintain financial records
• Ensure safety and suitability of yoga practices

Communication

• Send class confirmations and schedule updates
• Provide information about new programs and workshops
• Respond to your inquiries and feedback
• Send administrative notices and policy updates

Improvement and Analytics

• Analyze website usage to improve our services
• Develop new programs based on student needs
• Ensure website security and prevent fraud
• Comply with legal and regulatory requirements

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: To provide yoga classes and services you have booked
• Legitimate Interest: To improve our services and communicate about relevant programs
• Consent: For marketing communications and optional data processing
• Legal Obligation: To comply with accounting, tax, and safety regulations

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following limited circumstances:

• Service Providers: Third-party processors who help us operate our business (payment processors, email services, analytics providers)
• Legal Requirements: When required by law, legal process, or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Emergency Situations: To protect the health and safety of our students and staff

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations. Specific retention periods include:

• Account Information: Retained while your account is active and for 3 years after closure
• Financial Records: Kept for 7 years as required by Dutch law
• Health Information: Retained for the duration of your participation and 2 years thereafter
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: Aggregated data retained for 26 months

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data under certain circumstances
• Restriction: Request limitation of processing in specific situations
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests or for marketing purposes
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us at privacy@hyaenilvtk.live. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing through certified providers
• Regular backups and disaster recovery procedures

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Certification schemes and codes of conduct

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyze usage patterns. For detailed information about our cookie practices, please see our Cookie Policy.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through our website. The updated policy will be effective upon posting.

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us at:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data properly.