GDPR Compliance

Pure Yoga Studio is committed to compliance with the General Data Protection Regulation (GDPR). This page outlines how we protect your personal data and your rights under this regulation.

Data Controller

Pure Yoga Studio acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Contact details:
Pure Yoga Studio
Prinsengracht 421
1016 HN Amsterdam
Netherlands
[email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you (booking and providing yoga classes)
• Consent: Processing based on your explicit consent (marketing communications)
• Legitimate interests: Processing necessary for our legitimate business interests (website analytics, service improvement)
• Legal obligation: Processing required to comply with legal requirements (financial records retention)

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. We will update your information promptly upon verification.

Right to Erasure

You may request deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where processing was based on consent)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction

You can request that we limit how we use your data while we address your concerns about accuracy or our processing activities.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transfer this data directly to another controller where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by two months, but we will inform you of any extension within the first month.

There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request.

Data Protection Authority

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30
2594 AV Den Haag
Netherlands

International Transfers

We primarily store and process data within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Breach Notification

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and inform the relevant supervisory authority within 72 hours of becoming aware of the breach.

Updates to This Information

We may update this GDPR information periodically. Changes will be posted on this page with an updated revision date.

Last updated: January 2024