Privacy Policy
Controller: Knuth POSERN, contact yoga@kp.mt.
What is collected: when you book a session, your name and email address are used to confirm your spot, contact you about that specific session, and let you cancel it. If you use the self-service booking tool you also choose a 6-digit code to manage your own bookings; only a salted hash of it is stored, never the code itself. No health information is collected -- if you have health concerns, please consult a doctor before joining, at your own judgement.
Why (legal basis): your consent, given when booking, and where relevant the need to fulfil the booking you asked for (Art. 6(1)(a)/(b) GDPR).
Who else sees it (processors): mailbox.org (Heinlein Support GmbH, Germany) for email and calendar; OVHcloud (EU) for web hosting. Both process data on our behalf under a data-processing agreement and do not use it for their own purposes. No data leaves the EU/EEA.
How long it's kept: booking records are kept for up to 24 months after the session date (24 months if canceled), then automatically deleted. You can delete your own account and booking history at any time from the booking tool's "my bookings" page, or by emailing yoga@kp.mt -- your email address is then irreversibly hashed and cannot be linked back to you.
Cookies: no advertising or tracking cookies. Only a strictly-necessary session cookie is used while you're logged into the booking or "my bookings" page, which doesn't require consent under EU ePrivacy rules.
Your rights: access, correction, deletion, restriction, objection, and data portability regarding your own data, plus the right to complain to your local data protection authority (e.g. in Germany, France, Belgium or Luxembourg, wherever you live) or the authority where the controller is established. Contact yoga@kp.mt for any of these.
Datenschutzerklärung (Kurzfassung, Deutsch)
Verantwortlicher: Knuth POSERN, yoga@kp.mt. Bei einer Buchung werden Name und E-Mail-Adresse verarbeitet, um Ihren Platz zu bestätigen und Sie ggf. zur Absage zu kontaktieren. Keine Gesundheitsdaten werden erhoben. Auftragsverarbeiter: mailbox.org (Deutschland) für E-Mail/Kalender, OVHcloud (EU) für das Hosting. Speicherdauer: bis zu 24 Monate nach dem Kurstermin (bei Absage 24 Monate), danach automatische Löschung. Sie können Ihr Konto und Ihre Buchungshistorie jederzeit selbst löschen oder per E-Mail an yoga@kp.mt löschen lassen; Ihre E-Mail-Adresse wird dabei irreversibel gehasht. Sie haben die üblichen DSGVO-Rechte (Auskunft, Berichtigung, Löschung, Einschränkung, Widerspruch, Datenübertragbarkeit) sowie ein Beschwerderecht bei der für Sie zuständigen Datenschutzaufsichtsbehörde.