Who is responsible for your data
Suggested text: Our website address is: http://tribodhiyoga.eu.
For the purposes of the General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD), Tribodhi Yoga is the data controller for the personal data described below. When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
What personal data we collect
We collect personal data in the following ways:
a) When you fill out a form on this website (e.g. to reserve your place on a training or ask a question):
- Full name
- Email address
- Phone number
- Any additional information you choose to include (e.g. which persona/option you selected)
b) Automatically, through your use of the website:
- IP address, browser type, device type, and general usage data, collected via standard website analytics/cookies
- Advertising and interaction data, if you arrived via a Meta (Facebook/Instagram) ad, via the Meta Pixel
c) When you contact us directly (e.g. via WhatsApp or email):
- Whatever information you choose to share with us in that conversation
We do not collect payment card details through this website. Payment for trainings is handled directly with you (deposit via bank transfer, balance in cash or transfer), not processed or stored by this site.
Why we process your data (purpose and legal basis)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your reservation request or inquiry | Consent (you submitting the form) / Pre-contractual steps, if you’re inquiring about booking |
| Sending you information about your training booking | Performance of a contract, once you’ve reserved a place |
| Sending occasional marketing/promotional emails (only if you opt in) | Consent |
| Website analytics and improving the site | Legitimate interest |
| Ad performance measurement (Meta Pixel) | Consent, via the cookie/tracking banner |
You can withdraw consent at any time (see Section 7).
Who we share your data with
We do not sell your personal data. We may share it with:
- WPForms / your form plugin provider — processes form submissions on our behalf
- Your web hosting provider — stores the site and any submitted data
- Meta (Facebook/Instagram) — if you interact with our ads, limited data is shared with Meta for ad performance measurement, governed by Meta’s own privacy policy
- Google — this site loads fonts directly from Google’s servers (Google Fonts), which means your browser connects to Google when the page loads; if we use Google Analytics, that also applies
- Any professional advisors (accountant, lawyer) where legally necessary
- Authorities, where required by law
International data transfers
Some of the providers above (Meta, Google) may process data outside the European Economic Area. Where this happens, it is done under an approved legal mechanism such as the EU-US Data Privacy Framework or Standard Contractual Clauses, as required by GDPR Chapter V.
How long we retain your data
- Form submissions from people who don’t book: kept for 24 months in case you follow up, then deleted
- Data from confirmed participants: kept for the duration of your training plus 5 years, as required for accounting/tax purposes under Spanish law (typically 4-6 years for tax-relevant records)
- Marketing consent: kept until you unsubscribe or withdraw consent
Your rights
Under GDPR and LOPDGDD, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data («right to be forgotten»)
- Restrict how we use your data
- Object to processing, including for marketing purposes
- Data portability — receive your data in a portable format
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, contact us at [YOUR EMAIL]. We will respond within one month, as required by law.
If you believe we have not handled your data properly, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.
Cookies
This site uses cookies to function properly and, if enabled, to measure ad performance and site usage. You can control or disable cookies through your browser settings or through the cookie consent banner on this site, where offered.
Security
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure.
Changes to this policy
We may update this policy from time to time. The «Last updated» date at the top will reflect the most recent version. Significant changes will be communicated where appropriate.
Contact
Questions about this policy or your data can be sent to connect@tribodhiyoga.com