data protection

This data protection declaration explains the type, scope and purpose of the processing
personal data (hereinafter referred to as “data”) within our online offering and with it
associated websites, functions and content as well as external online presences, such as our social media
profiles. (hereinafter collectively referred to as “online offer”). With regard to the used
For terms such as “processing” or “responsible person”, we refer to the definitions in Article 4 of the
General Data Protection Regulation (GDPR).

Silvia Schleupner
(Niyama Yoga)
Bebelplatz 18

50679 Köln

www.verhaltenstherapie-heilpraktiker.de

info@niyamayoga.de

Types of data processed:

– Inventory data (e.g., names, addresses).
– Contact details (e.g., email, telephone numbers).
– Content data (e.g., text entries, photographs, videos).
– Usage data (e.g. websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).

Purpose of processing

– Provision of the online offer, its functions and content.
– Answering contact requests and communicating with users.
- Safety measures.
– Reach measurement/marketing

Terms used

“Personal data” means any information that relates to an identified or identifiable person
natural person (hereinafter “data subject”); A natural person is identified as identifiable
considered to be directly or indirectly, in particular by means of assignment to an identifier such as a name
an identification number, location data, an online identifier (e.g. cookie) or one or more
special characteristics can be identified that express the physical, physiological, genetic,
psychological, economic, cultural or social identity of that natural person.

“Processing” means any operation or operation carried out with or without the aid of automated procedures
Series of operations related to personal data. The term is broad and practically encompassing
any handling of data.

The “responsible person” is the natural or legal person, authority, institution or other body that
alone or jointly with others on the purposes and means of processing personal data
Data decides, referred to.

Relevant legal bases

In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing.
If the legal basis is not stated in the data protection declaration, the following applies: The
The legal basis for obtaining consent is Article 6 Paragraph 1 Letter a and Article 7 GDPR
Legal basis for processing to fulfill our services and execute contractual obligations
Measures and answers to inquiries is Art. 6 Para. 1 lit. b GDPR, the legal basis for this
Processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the
The legal basis for processing to protect our legitimate interests is Article 6 Paragraph 1 Letter f
GDPR. In the event that vital interests of the data subject or another natural person
If the processing of personal data is necessary for a person, Article 6 Paragraph 1 Letter d GDPR serves as
Legal basis.

Safety measures

We ask you to regularly inform yourself about the content of our data protection declaration. We fit them
Data protection declaration as soon as there are changes to the data processing carried out by us
make necessary. We will inform you as soon as the changes result in your participation
(e.g. consent) or other individual notification is required.

Collaboration with processors and third parties

If we provide data to other people and companies as part of our processing
(processors or third parties), transmit it to them or otherwise give them access to the data
grant, this only takes place on the basis of legal permission (e.g. if the data is transmitted
to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 lit. b GDPR, which is necessary for the fulfillment of the contract),
You have consented to this, a legal obligation requires this or based on our right
Interests (e.g. when using agents, web hosts, etc.).

If we allow third parties to process data on the basis of a so-called “order processing contract”
commission, this is done on the basis of Art. 28 GDPR.

Transfers to third countries

If we store data in a third country (i.e. outside the European Union (EU) or the European
Economic Area (EEA)) or in the context of using third-party services or
If data is disclosed or transmitted to third parties, this will only occur if it is necessary to fulfill our obligations
(pre-)contractual obligations, based on your consent, on the basis of a legal obligation or on
based on our legitimate interests. Subject to legal or contractual permissions,
We only process or leave the data in a third country if the special requirements are met
according to Art. 44 ff. GDPR. This means that the processing takes place, for example, on the basis of special guarantees, such as
the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA
through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (see above).
so-called “standard contractual clauses”).

Rights of data subjects

You have the right to request confirmation as to whether the data in question is being processed and
Information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. Art. 16 GDPR the right to complete the data concerning you or the
To request correction of incorrect data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be processed immediately
deleted, or alternatively a restriction on the processing in accordance with Article 18 GDPR
to request data.
You have the right to request that the data relating to you that you have provided to us
in accordance with Article 20 of the GDPR and to request that it be transmitted to other responsible parties.

In accordance with Article 77 of the GDPR, you also have the right to lodge a complaint with the responsible supervisory authority
to submit.

Right of withdrawal

You have the right to revoke your consent in accordance with Article 7 Para. 3 GDPR with effect for the future
withdraw

Right to object

You can object to the future processing of your data in accordance with Art. 21 GDPR at any time
contradict. The objection can in particular be against processing for direct advertising purposes
take place.

Cookies and right to object to direct advertising

“Cookies” are small files that are stored on users’ computers. Within
The cookies can store different information. A cookie is primarily used to store the information
to a user (or the device on which the cookie is stored) during or after his/her
To save a visit within an online offer. As temporary cookies, or “session cookies” or
“Transient cookies” are cookies that are deleted after a user has accessed an online offer
leaves and closes his browser. In such a cookie, for example, the contents of a shopping cart can be stored in one
Online shop or login statuses are saved. Cookies are called “permanent” or “persistent”.
which remain stored even after the browser is closed. For example, the login status
are saved when users visit them after several days. You can also do this in such a way
Cookies are used to store the interests of users for reach measurement or marketing purposes
be used. “Third-party cookies” are cookies that are sent by providers other than this
The person responsible who operates the online offering is offered (otherwise, if it is only theirs).
Cookies are called “first-party cookies”).
We can use temporary and permanent cookies and will clarify this within our framework
Data protection declaration.

If users do not want cookies to be stored on their computer, they are asked to do so
deactivate the corresponding option in the system settings of your browser. Saved cookies
can be deleted in the browser's system settings. The exclusion of cookies can
Functional restrictions of this online offer may result.

A general objection to the use of cookies used for online marketing purposes
For a variety of services, especially in the case of tracking, this can be done via the US
Page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/.
Furthermore, cookies can be stored by switching them off in the browser settings
can be achieved. Please note that not all functions of this online offer may then be available
can be used.

Deletion of data

The data processed by us will be deleted or stored in accordance with Articles 17 and 18 of the GDPR
Processing restricted. Unless expressly stated in this privacy policy,
The data stored by us will be deleted as soon as it is no longer required for its intended purpose
and the deletion does not conflict with any legal retention obligations. Unless the data
are deleted because they are required for other legally permissible purposes, their processing will continue
restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data
which must be retained for commercial or tax reasons.

According to legal requirements in Germany, storage takes place in particular for 10 years in accordance with §§
147 Paragraph 1 AO, 257 Paragraph 1 Nos. 1 and 4, Paragraph 4 HGB (books, records, management reports, accounting documents,
Commercial books, documents relevant to taxation, etc.) and 6 years in accordance with Section 257 Paragraph 1 Nos. 2 and 3 Paragraph.
4 HGB (commercial letters).

According to legal requirements in Austria, storage takes place for 7 years in particular in accordance with Section 132 Paragraph 1
BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, list of
Income and expenses, etc.), for 22 years in connection with real estate and for 10 years
Documents related to electronically provided services, telecommunications, broadcasting and
Television services that are provided to non-entrepreneurs in EU member states and for which the Mini-One
Stop Shop (MOSS) is used.
Business-related processing

Additionally we process
– Contract data (e.g., subject matter of the contract, term, customer category).
– Payment data (e.g., bank details, payment history)

from our customers, interested parties and business partners for the purpose of providing contractual services
and customer care, marketing, advertising and market research.

Hosting

The hosting services we use serve to provide the following
Services: infrastructure and platform services, computing capacity, storage space and
Database services, security services and technical maintenance services that we provide for the purpose of
to operate this online offering.

We, or our hosting provider, process inventory data, contact data, content data, contract data,
Usage data, meta and communication data from customers, interested parties and visitors to this website
Online offering based on our legitimate interests in efficient and secure
Provision of this online offer in accordance with Article 6 Paragraph 1 Letter f of the GDPR in conjunction with Article 28 of the GDPR
(Conclusion of order processing contract).

Health care services

We process the data of our patients and interested parties and other clients or contractual partners
(uniformly referred to as “patients”) in accordance with Article 6
Paragraph 1 lit. b) GDPR in order to provide you with our
to provide contractual or pre-contractual services. The data processed here, the type, the
The scope and the purpose and necessity of their processing are determined according to the
underlying contractual relationship. The processed data generally includes inventory and
Patient master data (e.g., name, address, etc.), as well as contact details (e.g., email address,
telephone, etc.), the contract data (e.g., services used, products purchased, costs,
Names of contact persons) and payment data (e.g., bank details, payment history, etc.).

As part of our services, we may also use special categories of data in accordance with Article 9 Paragraph 1
GDPR, here in particular information about the health of the patients, possibly with reference to their sexual life or
sexual orientation. For this purpose, if necessary, we will consult Art. 6 Para. 1 lit. a., Art. 7,

Art. 9 Paragraph 2 Letter a. GDPR requires the express consent of the patient and processes the special data
Categories of data otherwise for health care purposes based on Art. 9 Para. 2 lit h.
GDPR, Section 22 Paragraph 1 No. 1 b. BDSG.

If necessary for the fulfillment of the contract or by law, we disclose or transmit the data to
Patients in the context of communication with medical professionals, in the fulfillment of the contract
necessarily or typically involved third parties, such as laboratories, billing offices or
comparable service providers, provided this is consistent with the provision of our services in accordance with Article 6 Para. 1 lit b. GDPR
serves, legally in accordance with Art. 6 Para. 1 lit c. DSGVO is required, our interests or those of
Patients in efficient and cost-effective healthcare as a legitimate interest in accordance with Art.
6 para. 1 lit f. GDPR serves or in accordance with Art. 6 para. 1 lit d. GDPR is necessary. about vital interests
to protect the patient or another natural person or within the scope of consent in accordance with Art.
6 Para. 1 lit. a., Art. 7 GDPR.

The data will be deleted if the data is used to fulfill contractual or legal duties of care
as well as dealing with any warranty and comparable obligations is no longer necessary, whereby
the necessity of retaining the data is reviewed every three years; Otherwise, these apply
legal retention obligations.

Administration, financial accounting, office organization, contact management 
We process data as part of administrative tasks and the organization of our operations,
Financial accounting and compliance with legal obligations, such as archiving. Here we process
the same data that we process as part of the provision of our contractual services. The
The basis for processing is Article 6 Paragraph 1 Letter c. GDPR, Art. 6 Para. 1 lit. f. GDPR. From processing
Customers, interested parties, business partners and website visitors are affected. The purpose and our interest
The processing lies in administration, financial accounting, office organization, archiving of data,
i.e. tasks related to maintaining our business activities, carrying out our tasks and
to provide our services. The deletion of data with regard to contractual services and the
contractual communication corresponds to the information provided in these processing activities.

We disclose or transmit data to the tax authorities, consultants such as tax advisors or
Auditors and other fee offices and payment service providers.

Furthermore, based on our business interests, we store information about suppliers,
Organizers and other business partners, e.g. for the purpose of later contact. This majority
We generally store company-related data permanently.

contact

When you contact us (e.g. via contact form, email, telephone or via social media).
the user's details for processing the contact request and its processing in accordance with Art. 6 Para. 1 lit. b)
GDPR processed. The user information can be stored in a customer relationship management system
(“CRM system”) or comparable inquiry organization.

We delete the requests if they are no longer necessary. We check the necessity every two
Years; The statutory archiving obligations also apply.

Online presence in social media

We maintain online presences within social networks and platforms in order to communicate with those active there
Communicate with customers, interested parties and users and inform them about our services
can. When accessing the respective networks and platforms, the terms and conditions apply
Data processing guidelines of their respective operators.

Unless otherwise stated in our data protection declaration, we process the data of
Users if they communicate with us within social networks and platforms, e.g. posts
write on our online presence or send us messages.
Integration of third-party services and content

Within our online offering, we rely on our legitimate interests (i.e. interest
in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1
lit. f. GDPR) content or service offers from third parties in order to use their content and services, such as.
Integrate videos or fonts (hereinafter referred to as “content”).

This always assumes that the third party providers of this content perceive the IP address of the user, as they
Without the IP address, the content could not be sent to their browser. The IP address is therefore for the
Representation of this content required. We strive to only use content that is relevant to them
The provider only uses the IP address to deliver the content. Third-party providers can also do this
so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or
Use for marketing purposes. The “pixel tags” can provide information such as visitor traffic on the website
Pages of this website are evaluated. The pseudonymous information can also be stored in cookies on the
The user's device is stored and, among other things, technical information about the browser and
Operating system, referring websites, visiting time and other information about the use of our website
online offer, as well as linked to such information from other sources.
Google Maps

We use the maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheater
Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, IP addresses
and location data belong to the users, but not without their consent (usually within the framework of the
settings on their mobile devices). The data can be processed in the USA.
Data protection declaration: https://www.google.com/policies/privacy/, opt-in
Out: https://adssettings.google.com/authenticated.

Use of Facebook social plugins

We use based on our legitimate interests (i.e. interest in analysis, optimization and
economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR) Social Plugins
(“Plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal
Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can
Represent interaction elements or content (e.g. videos, graphics or text contributions) and are attached to one of the
Facebook logos recognizable (white “f” on blue tile, the terms “Like”, “Like” or one
“Thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and
The appearance of the Facebook social plugins can be viewed here
be: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and thereby offers a guarantee that
to comply with European data protection law (https://www.privacyshield.gov/participant?
id=a2zt0000000GnywAAC&status=Active).

When a user calls up a function of this online offer that contains such a plugin, their device builds
a direct connection to the Facebook servers. The content of the plugin is sent directly from Facebook
transmitted to the user's device and integrated into the online offering. This can be done from the
User profiles are created from the processed data. We therefore have no influence on that
Scope of the data that Facebook collects with the help of this plugin and therefore informs users accordingly
our level of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page

of the online offer. If the user is logged in to Facebook, Facebook can view the visit
assign to his Facebook account. When users interact with the plugins, for example the Like button
If you press a button or make a comment, the relevant information will be sent directly from your device

Facebook transmitted and stored there. If a user is not a member of Facebook, this still exists
the possibility of Facebook finding out and storing your IP address. According to Facebook, in
Germany only stores an anonymized IP address.

Purpose and scope of data collection and further processing and use of the data by Facebook
as well as the relevant rights and setting options to protect the privacy of users,
You can find this in Facebook's data protection information: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to provide data via this online offer
collected about him and linked to his member data stored on Facebook, he must protect himself from the
When using our online offering, log out of Facebook and delete your cookies. More settings
and objections to the use of data for advertising purposes are within the Facebook profile settings
possible: https://www.facebook.com/settings?tab=ads or via the US
Site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The
Settings are platform-independent, i.e. they are used for all devices, such as desktop computers or mobile devices
Devices taken over.

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke

.