Privacy Statement Shane Yoga
Shane Yoga (hereinafter referred to as “we”, “us”, or “our”) highly values your privacy. This privacy statement explains how we collect, use, store, and protect your personal data, in line with the General Data Protection Regulation (AVG/GDPR).
1. About Shane Yoga
Shane Yoga offers yoga classes, therapy interventions, and mindfulness interventions, focused on mental well-being. For contact information, please visit our website: www.shaneyoga.nl.
2. What personal data do we collect?
We collect the following categories of personal data:
* Contact Information: We collect this information through a questionnaire administered prior to the interventions, including your name, address, email address, and phone number.
* Health Information: We also collect this information through the same questionnaire administered prior to the interventions. These are special categories of personal data, which are processed with the utmost care and strictly according to legal grounds. This information is essential to provide appropriate and safe yoga, therapy, and mindfulness interventions.
* Payment Information: Information necessary for invoicing and payments, such as your bank account number.
* Communication Data: Any correspondence between you and Shane Yoga via email or other channels.
* Additional Information: During interventions, clients may at their own risk choose to share personal stories or experiences. This information is treated exclusively internally and is not directly requested by us, but voluntarily shared by the client.
3. Why do we collect your personal data? (Purposes and legal bases)
We collect and process your personal data for the following purposes, based on the following legal grounds:
* For the performance of our services (agreement and explicit consent):
* To provide yoga, therapy, and mindfulness interventions.
* To manage appointments and communication regarding your participation.
* The processing of your health data is necessary for the provision of healthcare, carried out by a professional who has a duty of confidentiality, and only occurs with your explicit consent.
* For invoicing and administration (legal obligation and legitimate interest):
* Invoices are sent via email and must be paid by a specified date. Processing your contact and payment information is necessary for financial settlement and to comply with our legal administrative obligations (e.g., tax legislation, for which invoices typically must be kept for 7 years). Sending invoices by email is a legitimate interest for the settlement of the agreed-upon services.
* For communication (legitimate interest):
* To send you important information about your appointments or program changes, or to respond to your inquiries.
4. How do we secure your personal data?
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, and alteration. This includes, among others:
* Secure Storage: Your data is stored on secure systems with restricted access.
* Internal Access Restriction: Access to personal data is exclusively reserved for Shane Yoga personnel who need this data for the performance of services.
* Internal Procedures: We have internal procedures for handling your data carefully, including guidelines for the processing and protection of health data collected via the questionnaire.
* Confidentiality: Shane Yoga adheres to the rule of keeping everything confidential between the client and Shane Yoga. This means that information you share, including health information and voluntarily shared stories, remains strictly confidential within our company.
5. How long do we store your personal data?
We store your personal data no longer than is necessary for the purposes for which it was collected, including compliance with legal, accounting, or reporting obligations.
* Invoices: Legal retention period of at least 7 years.
* Health Data: This data is stored as long as necessary for the treatment and thereafter according to the legal retention periods for medical records, unless otherwise agreed or legally required.
6. Do we share your personal data with third parties?
Shane Yoga does not share your personal data with third parties.
As stated, Shane Yoga does not use data processing agreements, except for what the website itself technically requires (for example, the website's hosting provider). We do not share your data with external parties for marketing purposes or other commercial interests. Your data remains exclusively within Shane Yoga.
7. Internal Procedures and Data Breaches
* Internal Procedures: We have internal guidelines for the secure handling of personal data, including procedures for collecting, storing, and processing data via the questionnaire and handling invoices. All employees are aware of these procedures.
* Data Breach Notification: In the unforeseen event of a data breach, where personal data is accidentally or unlawfully lost, altered, accessed, or disclosed, we will act immediately. We will assess the nature and scope of the breach and, if necessary, notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of discovery. If the data breach poses a high risk to your rights and freedoms, we will also inform you.
8. Your Rights
You have the following rights regarding your personal data:
* Right of Access: You can request to know what personal data we process about you.
* Right to Rectification: You can request to correct inaccurate or incomplete data.
* Right to Erasure (Right to be Forgotten): You can request to delete your personal data, unless we have a legal obligation to retain it.
* Right to Restriction of Processing: You can request to restrict the processing of your personal data in certain situations.
* Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
* Right to Object: You can object to the processing of your personal data based on a legitimate interest.
* Right to Withdraw Consent: If the processing of your data is based on your consent (e.g., for health data), you have the right to withdraw it at any time. This will not affect the lawfulness of processing prior to the withdrawal.
9. Liability for Space and Property
Shane Yoga cannot be held liable for theft, loss, or damage to clients' personal property in the space used. Participation in classes and interventions and presence in the space are entirely at your own risk.
10. Intellectual Property
All works, texts, and photos used by Shane Yoga are our intellectual property and are exclusively intended for use by Shane Yoga. It is not permitted to copy, reproduce, adapt, or use these materials in any other way without our express written consent. This also applies to edited or modified versions of our material.
11. Contact Us
If you have questions about this privacy statement or wish to exercise your rights, please contact us using the contact details on our website: www.shaneyoga.nl.
12. Complaints Procedure
If you believe that we are not processing your personal data correctly, we kindly ask you to first contact us using the contact details provided above. We will then carefully handle your complaint and try to reach an appropriate solution. If we cannot resolve the issue together, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
13. Changes to this Privacy Statement
We reserve the right to amend this privacy statement at any time. The most recent version will always be available on our website.
Last updated: July 27th 2025