Data controller
Antonia Marie Schönegge, NIE Z3923369-B C/ Músic Josep Balaguer 24, Esc. 4, 1.º A, 07004 Palma de Mallorca antonia@private-yoga-mallorca.com
Purpose
We process the data you provide via the contact form or email (name, email, phone, message) for: • Handling your booking request. • Communicating with you before, during and after the session. • Processing the payment for confirmed bookings. • Complying with legal obligations (tax, accounting).
Legal basis
Your consent when submitting the form, the performance of the contractual relationship, and compliance with legal obligations.
Retention
We keep your data only as long as necessary, and afterwards in accordance with statutory retention periods (typically 6 years for tax purposes).
Recipients
We do not share your data with third parties, except where legally required. The following processors may handle data on our behalf: • Resend (contact form email delivery), United States, with EU Standard Contractual Clauses. • Cloudflare Turnstile (spam protection), United States, with EU Standard Contractual Clauses. • Vercel (website hosting and cookieless web analytics), United States, with EU Standard Contractual Clauses. • Stripe (payment processing for confirmed bookings via Stripe Payment Links), Ireland, with transfers to the United States based on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.
Your rights
You have the right to access, rectify, erase, object to or restrict processing of your data, and to data portability. To exercise your rights, contact antonia@private-yoga-mallorca.com with a copy of your ID. You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Cookieless web analytics
We use Vercel Web Analytics on this website to understand which content is used and where our visitors come from. The provider and processor is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Only aggregated usage data is collected: the page visited, the referring page, country, operating system, browser and device type. We also count an event when an enquiry is successfully submitted through the form. That event contains none of the form content, so neither your name nor your email address or message. No cookies are set in the process and no persistent personal identifiers are stored. To tell visits apart, a technical hash is derived from request data; it rotates regularly and does not allow individuals to be recognised over longer periods or across different websites. No user profiles are created. For this reason the measurement requires no consent, and this website deliberately uses no cookie banner. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in comprehensible audience measurement). Where data is transferred to the United States, we rely on the EU Standard Contractual Clauses; processing on our behalf takes place under Vercel's Data Processing Addendum.
Payment processing via Stripe
You pay for confirmed bookings through a personal payment link from Stripe (Stripe Payment Link). The provider is Stripe Payments Europe, Limited, The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland. When you open the payment link and pay, Stripe processes the data required for this: name, email address, payment details (for example card details), billing address where requested, amount, date and technical data such as IP address and device information, which Stripe uses for fraud prevention. We do not receive your full card details; we only see whether and when the payment was made. The legal basis is Art. 6 (1) (b) GDPR (performance of the contract for your yoga class). Fraud prevention by Stripe is based on Art. 6 (1) (f) GDPR (legitimate interest in secure payments). We keep payment records in accordance with statutory retention periods. Stripe may transfer data to Stripe, Inc. in the United States. Stripe is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses apply in addition. More in Stripe's privacy policy: https://stripe.com/privacy
Cookie policy
This website uses only technical cookies necessary for its operation. We do not use analytical or third-party cookies, and our audience measurement is cookieless as well (see the section "Cookieless web analytics"). There is therefore no cookie banner and no consent prompt on this website. Cookie types used: • Technical cookies (necessary, no consent required). Should we introduce cookies requiring consent in future, we will obtain your consent beforehand and update this policy. You can disable cookies via your browser settings at any time.