PRIVACY POLICY

pursuant to Articles 13-14 of EU Regulation 2016/679 (GDPR)

1. Data Controller

Yoga Wherever – Elisabetta Giannotti

Via Giuseppe Mazzini 16, 53043 Chiusi (SI)

VAT: 01627530528 – Tax Code: GNNLBT78R54C662X

Email: info@yogawherever.it

Website: www.yogawherever.it

2. Types of data processed and purposes

a) Navigation data

The computer systems and software procedures used to operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, browser type, operating system, pages visited). This data is used solely to obtain anonymous statistical information on website usage.

b) Data voluntarily provided via the contact form

By submitting the contact form, the user voluntarily provides their personal data (name, email address, message). This data is used exclusively to respond to the received request and is not shared with third parties or stored in any database.

Legal basis: performance of pre-contractual measures or consent of the data subject (Art. 6.1.b/a GDPR)
Retention period: only as long as strictly necessary to handle the request, and in any case no longer than 12 months

c) Cookies and tracking technologies

This website uses technical cookies necessary for its operation. Subject to user consent via the cookie banner, third-party analytical cookies may be activated, including:

Google Analytics 4 (GA4) – provided by Google Ireland Ltd., for statistical analysis of traffic in aggregated form. Data collected is subject to Google’s Privacy Policy (https://policies.google.com/privacy). IP addresses are anonymised before any processing.

For more information on the cookies used, please see our Cookie Policy available on the website.

3. Data processing methods

Personal data is processed by automated means for the time strictly necessary to achieve the purposes for which it was collected. The Data Controller adopts appropriate technical and organisational measures to ensure data security.

4. Data communication and disclosure

Data is not disclosed publicly. It may be communicated to:

Technical service providers (hosting, email) to the extent strictly necessary for service delivery, acting as Data Processors
Google LLC (via GA4), subject to obtaining consent

No data is transferred outside the European Economic Area without adequate safeguards (e.g. Standard Contractual Clauses).

5. Rights of data subjects

Pursuant to Arts. 15-22 GDPR, users have the right to:

Access their personal data
Obtain rectification or erasure of data
Request restriction of processing
Object to processing
Request data portability
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

To exercise these rights, please contact the Data Controller at: info@yogawherever.it