privacy policy – Yoganda

Política De Privacidad

Your privacy matters to us at Yoganda. This policy explains what personal data we collect, why we collect it, and how we keep it safe. We keep things clear and simple — and you’re always welcome to contact us if you have questions.

Yoganda makes available through the website www.yoganda.eu this Privacy Policy with the purpose of informing you in detail about how we process your personal data and protect your privacy and the information you provide us. In case of any future modifications to this policy, we will notify you through the website or by other means so that you can be informed of the new privacy conditions introduced.

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5th, on Personal Data Protection and Guarantee of Digital Rights, we inform you of the following:

Data Controller

Owner: MARIA VOGT – NIE: Y9502872E, hereinafter referred to as Yoganda, registered address: Calle Graciosa 5, 1.5, 38612 – EL MEDANO (S/C DE TENERIFE), phone: +34 660 163 740, email: maya.yoganda@gmail.com, website: www.yoganda.eu

Although my official name is Maria Vogt, everyone calls me Maya – and that’s how you’ll hear from me.

While Yoganda does not currently have a designated Data Protection Officer, you may direct all privacy-related questions, concerns, or requests to Yoganda via email at maya.yoganda@gmail.com or at the address listed in the Data Controller section.

For what purposes do we process your personal data?

At Yoganda, we collect and process your personal information generally to manage the relationship we maintain with you. The main identified purposes are:

Management and contracting of the products and services offered by our entity.
Handling information requests, suggestions, and complaints you may send us.
Keeping you informed about events, offers, products, and services that may be of interest to you through various communication channels, provided you have given your consent.
Managing the commercial relationship with our suppliers.

Legal Bases for Processing

In accordance with Article 6 of the GDPR, the legal bases for processing your personal data at Yoganda are:

The performance of a contract for the provision of yoga retreats and related services.
Your explicit consent when required, for example, to send marketing communications or process health-related data.
Compliance with legal obligations applicable to Yoganda, such as tax or accounting requirements.
Our legitimate interest in maintaining communication with clients or website users and improving our services, provided that such interest does not override your fundamental rights and freedoms.

How do we collect your information?

We collect your personal information through various means but will always inform you at the time of collection through information clauses about the data controller, purpose and legal basis, recipients of the data, and the retention period, as well as how you can exercise your rights regarding data protection.

Generally, the personal information we process is limited to identifying data (name and surname, date of birth, address, ID, phone, and email), contracted services, and payment and billing information.

Depending on the nature of the service provided, for which you will have been duly informed and consent requested if necessary, we may process the following types of data:

Health data
Hobbies and data related to yoga activity
Data related to your stay and retreat

Yoganda uses social media, which is another way to reach you. The information collected through messages and communications you post may contain personal information publicly available online. These social networks have their own privacy policies explaining how they use and share your information. Therefore, Yoganda recommends consulting them before using these platforms to confirm you agree with how your information is collected, processed, and shared.

Through our website, we collect personal information related to your browsing through the use of cookies. To know clearly and precisely which cookies we use, their purposes, and how to configure or disable them, please consult our Cookies Policy.

Data Retention

We retain personal data only as long as necessary for the purposes it was collected and in accordance with legal obligations. Email correspondence is typically retained for up to 24 months, unless longer retention is needed for legal or operational reasons.

User Responsibility

By providing your data through electronic channels, the user guarantees they are over 18 years old and that the data provided to Yoganda are true, accurate, complete, and up-to-date. For these purposes, the user confirms responsibility for the truthfulness of the data communicated and agrees to keep this information properly updated to reflect their actual situation, taking responsibility for any false or inaccurate data provided, as well as any direct or indirect damages that may arise.

Minors

Yoganda does not knowingly collect or process personal data of individuals under the age of 18. By using our services or website, you confirm that you are over 18 years of age.

How long do we keep your information?

At Yoganda, we only retain your information for the period necessary to fulfill the purpose for which it was collected, comply with legal obligations, and address any liabilities that may arise from the purpose for which the data was collected.

If at any time we have collected your data to contact you as a potential user of our services or to respond to an information request made by you, such data will be kept for a maximum period of 24 months from collection and will be deleted after this period if no contractual relationship has been established or at your request.

In any case, as a general rule, we will keep your personal information while there is a contractual relationship between us or until you exercise your right of deletion and/or limitation of processing. In such cases, the information will be blocked without further use beyond its retention, while it may be necessary for the exercise or defense of claims or liabilities that may arise.

Examples of Retention Periods

Booking and billing data: Retained for up to 5 years to comply with legal and tax obligations.
Health and retreat-related data: Retained only for the duration of the retreat and a reasonable period thereafter for safety and organizational reasons, not exceeding 6 months.
Contact data for marketing or inquiries: Retained for a maximum of 24 months unless a contractual relationship is established or until you request deletion.

To Whom Do We Disclose Your Data?

In general, at Yoganda, we do not share your personal information except when required by legal obligations.
However, to provide the requested service, we share your data with the following third parties:

- Marzena Jachowicz, of legal age, with NIE DNI Y3922741J, residing at c/Pais Vasco 3, Apt 9A, 38660 Adeje — Chef and Venue Owner
- Herichal Gestión Integral, located at C. Músico Tomás Montesdeoca Pérez, 2, 38203 La Laguna, Santa Cruz de Tenerife — Accountant

Other Third-Party Processors

In addition to the parties listed, we may also share your personal data with service providers who assist us in delivering our services, such as IT support, website hosting, and secure payment processing. These third parties act as data processors on our behalf, follow our instructions, and are not permitted to use your data for their own purposes.

You may object to the transfer of your data to these third parties. However, in that case, it will not be possible to provide you with the requested service.

Although not considered a data transfer, third-party companies acting as our service providers may access your information to carry out the contracted service. These processors access your data following our instructions and are not allowed to use it for any other purpose, maintaining strict confidentiality.

Additionally, your personal information will be available to Public Administrations, Judges, and Courts for the attention of possible liabilities arising from the data processing.

International Data Transfers

There are no international transfers of your data outside the European Economic Area (EEA).

With our providers, we have agreed that, for the provision of the contracted service, they use servers located within the EEA. If, in the future, we need to use servers located outside the EU territory, appropriate measures will be adopted and incorporated into this Privacy Policy, ensuring that such providers are under the Privacy Shield agreement or other adequate guarantees.

Marketing Communications and Objection to Processing

Yoganda may occasionally contact you with updates or offers related to yoga retreats or services, but only if you have given your consent.

You may object at any time to the use of your data for marketing purposes by sending an email to maya.yoganda@gmail.com with the subject “Unsubscribe from communications.” We will process your request without delay.

Withdrawal of Consent

Where the processing of your personal data is based on your consent, you may withdraw that consent at any time by contacting us via email at maya.yoganda@gmail.com. Withdrawal of consent does not affect the legality of data processing based on prior consent.

Automated Decision-Making

Yoganda does not carry out any data processing activities that involve automated decision-making, including profiling, which produce legal effects or significantly affect you.

What Are Your Rights Regarding Your Data and How Can You Exercise Them?

Data protection regulations allow you to exercise your rights of access, rectification, deletion, portability, opposition, and restriction of processing, as well as to not be subject to decisions based solely on automated processing of your data, when applicable. These rights have the following characteristics:

Exercising your rights is free of charge, except for manifestly unfounded or excessive requests (e.g., repetitive), in which case Yoganda may charge a fee proportional to administrative costs or refuse to act.
You can exercise your rights directly or through your legal or voluntary representative.
We must respond to your request within one month, which can be extended by two more months depending on the complexity and number of requests.
We are obligated to inform you about the means to exercise these rights, which must be accessible and without denying your request simply because you choose a different medium.
If the request is made electronically, the information will be provided by electronic means when possible, unless you request otherwise.
If Yoganda does not process the request, we will inform you within one month of the reasons and the possibility to file a complaint with a supervisory authority.

You can exercise your rights by:

Sending a signed written request addressed to Yoganda, Calle Garaciosa 5, 1.5, 38612 – El Médano (S/C de Tenerife), Ref: Exercise of LOPD Rights.
Sending a scanned signed form via email to maya.yoganda@gmail.com with the subject “Exercise of LOPD Rights.”

In both cases, you must sufficiently identify yourself electronically or with a signed request. If doubts arise regarding your identity, we may request additional information to confirm your identity to ensure we only respond to the interested party or legal representative, who must provide proof of representation if applicable.

If you believe your rights have not been fully respected, you may file a complaint with the national supervisory authority:
Agencia Española de Protección de Datos, C/ Jorge Juan, 6 – 28001 Madrid.

How We Protect Your Information

At Yoganda, we are committed to protecting your personal information. We use reasonable physical, organizational, and technological measures, controls, and procedures to preserve the integrity and security of your data and ensure your privacy.

Additionally, all personnel with access to personal data have been trained and are aware of their obligations regarding data processing.

Our contracts with providers include clauses requiring them to maintain confidentiality regarding any personal data they access and to implement technical and organizational security measures to guarantee the confidentiality, integrity, availability, and resilience of the personal data processing systems and services.

These security measures are periodically reviewed to ensure adequacy and effectiveness.

However, absolute security cannot be guaranteed, and no system is impenetrable. In the event of any security breach under our control, we will take appropriate measures to investigate the incident, notify the supervisory authority, and, if applicable, inform affected users so they can take appropriate actions.

Security Incidents and Data Breach Notification
In the unlikely event of a data breach that may compromise your personal information and pose a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours and, where applicable, inform affected individuals without undue delay.

Yoga Instructor Credentials

Maria Vogt ( Maya ) is a certified yoga instructor with a total of 550 hours of Yoga Alliance–accredited training, including:

200h Hatha and Vinyasa Yoga – Gayatri School of Yoga, Tenerife, Spain
300h Ashtanga and Vinyasa Yoga – Rishikesh Yog Nirvana, Rishikesh, India
50h Yin Yoga – Rishikesh Yoga Association, Rishikesh, India

She also holds additional certifications in:

Yoga Instructor training (Poland)
Face Yoga and other complementary practices

These qualifications ensure a safe, informed, and holistic approach to all yoga sessions, workshops, and retreats offered through Yoganda.

Certificates are available upon request.

Cookie Policy

At Yoganda, we use cookies or other similar technologies (hereinafter, “cookies”) to understand how you use our services and to improve them. Yoganda is responsible for the cookies and for processing the data obtained through them, whether owned or provided by third parties, and decides the purpose, content, and use of the information collected.

The purpose of this policy is to clearly and thoroughly inform you about what a cookie is, what it is used for, what types of cookies we use, and how to configure or disable them if you wish.

A cookie is a small text file stored in your browser when you visit our website, which saves information about your browsing. Some cookies are essential for the proper functioning of websites, such as technical cookies or user interface customization cookies, while others—such as analytics or behavioral advertising cookies—require us to inform you and obtain your consent before use.

Below, and to allow you to give fully informed consent, we describe the purpose and use of each type of cookie:

Technical cookies are those that allow the user to navigate a website, platform, or application and use different options or services available, including site management and operation. They enable functions such as session identification, access to restricted areas, remembering order elements, making purchases, and managing payments. The website cannot function properly without these cookies, so they are considered necessary and do not require your consent.
Preference or personalization cookies allow the website to remember information that changes how the site behaves or looks, such as your chosen language, the number of search results to display, or your region. If the user selects these features themselves (e.g., choosing the site language by clicking on a flag), this is considered a service expressly requested by the user, and these cookies also do not require consent.
Analytics or measurement cookies help us understand how visitors interact with websites and provide statistical analysis of users’ interactions. The information collected is used to measure website or app activity to improve products and services offered by the data controller.
Marketing or behavioral advertising cookies store information about users’ behavior through ongoing observation of their browsing habits. This allows for the creation of a user profile to show relevant and engaging ads tailored to the individual, which are more valuable to advertisers.

Yoganda uses both first-party and third-party cookies, including technical, personalization, analytics, and advertising cookies, for the purposes described in the following cookie declaration:

TYPE PURPOSE EXPIRATION OWNED/THIRD PARTY
(No cookies currently in use)

Currently, no cookies are actively used on this website. This section will be updated if any are implemented in the future.

To use advertising cookies, we need your consent, which we will obtain if you click the “Accept” button on the information banner displayed when you access our website.

If you disable cookies, you can still access the website, but navigation may not be optimal, and some services may not work properly.

If in the future Yoganda uses different types of cookies from those described in this Cookie Policy to provide new services or if it becomes necessary to adapt to new legal requirements, we will notify you.

You can allow, block, or delete cookies installed on your device through your internet browser settings. You can configure it to block cookies or alert you when a server wants to save them. You can manage or delete cookies through your browser settings. For more information, visit your browser’s help section.

According to the GDPR and Spanish law, we will only store cookies on your device if they are strictly necessary. For all other types of cookies, we require your permission.”

Pop-up Cookie Notice Text

We use our own and third-party cookies for functional purposes (to enable proper website navigation), to analyze your interaction with us, to save your user preferences, to measure how you use the services we provide, and to improve them. We may also show you ads based on your browsing habits and profile.

To manage or disable cookies, click the “Settings” button.
To consent to their use and confirm that you have read the provided information, click the “Accept” button.
You can get more information by consulting our Cookie Policy.