Privacy Policy
Introduction and Purpose: We take the protection of your personal data seriously. This Privacy Policy explains which personal data we collect when you visit and use our website and how we use and protect this data. We handle personal data in accordance with applicable data protection regulations, including Regulation (EU) 2016/679 (GDPR). The data controller of the personal data collected on this website is [Name Surname], s.p., based in Ljubljana, Slovenia (hereinafter referred to as the controller or we).
What Personal Data We Collect: When you fill out a contact form on our site, we collect the personal data you provide:
Name and surname
Email address
Telephone number
Message content (all information included in the message field)
Your experience with Iyengar yoga or fascial therapy (this information is collected through an additional question/option in the contact forms for these two services)
We generally do not collect special categories of personal data (e.g., health information) and kindly ask you not to include such sensitive data in the form. If you nevertheless choose to disclose such sensitive personal data (e.g., health issues), we will treat it as your explicit consent to process this data solely for the purpose of responding to your inquiry.
Purpose and Legal Basis of Processing: We will use the personal data you provide through the contact form solely to respond to your inquiry, provide you with the requested information about our services (Iyengar yoga courses, fascial therapy, or psychological counselling), and, if necessary, arrange an appointment or next steps. The legal basis for processing is your consent (expressed by submitting the data) and our legitimate interest in providing communication with you to fulfil your request (GDPR Art. 6(1)(a) and (f)). If your inquiry leads to the use of our services, processing may also be based on taking steps prior to entering into or for the performance of a contract (GDPR Art. 6(1)(b)). We will not use your personal data for any other purpose unless we obtain your explicit consent.
Cookies and Analytics: Our website uses an independent, internal analytics tool to monitor the number of visitors and usage patterns (e.g., which subpages are visited, time spent on the site, bounce rate). We do not use any third-party analytics services (such as Google Analytics) that would transmit your data to external providers – all statistics are collected and processed solely by us. The information we collect is aggregated and does not allow for individual identification; it is used exclusively to improve the website and user experience.
The website may also store cookies (small text files) on your device to ensure the operation of essential website functions and our analytics. These cookies (if used) collect information in an anonymised manner. We do not use cookies for advertising purposes and do not track your activity across other websites. By continuing to use our website, you consent to the use of these cookies. You may reject or delete cookies in your browser settings; however, in such cases, some website functionalities may not work correctly.
Data Disclosure to Third Parties: We treat your personal data confidentially. We do not sell, market, or share your personal data with third parties for their own purposes. Your data is used solely for communication with you and to provide our services. Data may be disclosed to third parties only if necessary for the website’s operation or to perform services – e.g., to our contractual processors such as website hosting providers or email system providers – and only to the extent needed for their service provision. We have data protection agreements with such partners, obligating them to protect your data at least to the same extent as we do. Your personal data may also be disclosed if required by law (e.g., based on a court order or request from a government authority). We will not share your personal data with third parties for their marketing purposes without your explicit permission.
Data Retention: We will store your personal data only as long as necessary to fulfil the purpose for which it was collected. Data provided through the contact form will be stored until communication with you is concluded or your inquiry is fulfilled, after which it will be deleted from our records. We regularly review the personal data we store and delete or anonymise data that is no longer necessary. If we are legally obliged to retain certain data longer (e.g., accounting documents if you become a client), we will store such data in accordance with statutory deadlines and delete it securely afterward.
Data Security: We use appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, or destruction. Our website is hosted on a secure server, and data transmission is encrypted (we use HTTPS protocol). Access to personal data is limited to the website controller and authorised persons who require such data to fulfil the described purposes and are bound by confidentiality obligations. While no data transmission or storage over the internet is 100% secure, we apply commercially reasonable and industry-standard security measures to protect your data as best as possible from risk.
Data Subject Rights: In accordance with GDPR and applicable laws, you have the following rights regarding your personal data:
Right of access: you may request confirmation whether we process your personal data and obtain access to it (including a copy).
Right to rectification: you may request correction of inaccurate or completion of incomplete personal data.
Right to erasure: you may request deletion of your personal data when there is no longer a legal basis for its processing (“right to be forgotten”).
Right to restriction of processing: in certain cases, you may request temporary restriction of your data processing (e.g., if you dispute data accuracy or processing lawfulness).
Right to data portability: you have the right to receive the personal data you provided in a structured, commonly used, and machine-readable format and transmit it to another controller, where technically feasible (applicable when processing is based on consent or contract and carried out by automated means).
Right to object: you may object to the processing of your personal data based on our legitimate interests, unless we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims. You may also object to direct marketing processing at any time.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
You can exercise your rights at any time by contacting us via email at info@sarmitebriede.com or sending a request by post to our mailing address. We will respond to your request within the legally prescribed period (typically within one month). We may require additional identification to prevent unauthorised disclosure. Note that certain requests may be denied or limited if required by law (e.g., if the request is clearly unfounded or excessive, or if we must retain data due to legal obligations).
If you believe that the processing of your personal data violates the law, you have the right to lodge a complaint with the data protection authority. In Slovenia, this is the Information Commissioner (Dunajska 22, 1000 Ljubljana, www.ip-rs.si). If you reside in another EU country or if the violation occurred there, you may also lodge a complaint with the relevant supervisory authority in that country.
Contact Information: For any questions regarding this Privacy Policy or the processing of your personal data, as well as to exercise your rights, you can contact us:
Email: info@sarmitebriede.com
Phone: +386 40 623 637
Changes to the Privacy Policy: We reserve the right to update or adapt this Privacy Policy from time to time based on changed circumstances or legal requirements. When we update the content, we will revise the last updated date at the top or indicate the new effective date. We recommend reviewing this Privacy Policy before submitting any personal data to ensure you are informed about any changes. Your continued use of the website after publication of the updated Privacy Policy indicates your acceptance of the changes.
