PRIVACY POLICY
Introduction
At The OM LAB, we take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website www.the-om-lab.com ("Website") or contact us in relation to our yoga, sound healing, workshops, immersions, and private lesson services.
The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
Controller
The controller responsible for data processing on this website is:
The OM Lab
Janina Schneider
Steady and Aligned Yoga
Steinheilstrasse 2
80333 Munich
Germany
Email:
privacy@the-om-lab.com
Supervisory Authority
You have the right to lodge a complaint with a competent data protection supervisory authority. In Bavaria, the competent supervisory authority under the GDPR for private-sector organisations is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to access your stored personal data
- Right to rectification of incorrect or incomplete data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
If you wish to exercise any of these rights, please contact us at:
privacy@the-om-lab.com
Legal Basis for Data Processing
We process your personal data on the basis of:
- Art. 6 (1) lit. a GDPR – Consent
- Art. 6 (1) lit. b GDPR – Performance of a contract or pre-contractual measures
- Art. 6 (1) lit. c GDPR – Compliance with a legal obligation
- Art. 6 (1) lit. f GDPR – Legitimate interest
Processing is necessary to provide our services, respond to inquiries, manage bookings, maintain website functionality, and comply with legal obligations.
What Data We Collect
We may collect the following personal data:
Contact Data
When you contact us through our contact form, newsletter signup, email, WhatsApp, or other communication channels, we may collect:
- First and last name
- Email address
- Phone number
- Message content
- Booking or inquiry details
Health Information
In connection with private lessons, workshops or other services, you may choose to provide information about injuries, physical limitations, health conditions, pregnancy or other health-related circumstances that may be relevant to your participation.
We use this information only where necessary to adapt the practice appropriately and support your safe participation.
As health information constitutes a special category of personal data under the GDPR, we process such information only where permitted by law, including on the basis of your explicit consent pursuant to Art. 9 (2) lit. a GDPR where required.
Health information is treated confidentially and is not used for marketing purposes.
Technical Data
When you visit our website, certain technical data is processed automatically in connection with the operation and security of the website.
This may include:
- IP address
- Browser type and version
- Operating system and device information
- Referrer URL
- Date and time of access
- Requested pages or resources
This data is processed primarily to ensure the technical operation, stability and security of the website.
How We Receive Your Data
Your personal data is collected when:
- You contact us via contact form or email
- You subscribe to our newsletter
- You communicate with us via WhatsApp
- You use our website
- You interact with us through our Instagram presence
- You voluntarily provide health-related information in connection with a booking, inquiry or participation in our services
Purpose of Data Processing
We process your personal data for the following purposes:
- Responding to inquiries and customer support
- Managing bookings and private sessions
- Providing yoga classes, immersions, workshops, and sound healing services
- Sending newsletters and relevant updates (only with consent)
- Improving website functionality and user experience
- Website security and technical administration
- Compliance with legal obligations
Newsletter
If you subscribe to our newsletter, we use your email address exclusively for sending updates, offers, and information related to our services.
You may unsubscribe at any time using the unsubscribe link in every newsletter or by contacting us directly.
The legal basis is your consent under Art. 6 (1) lit. a GDPR.
WhatsApp Communication
If you contact us voluntarily via WhatsApp, we process your telephone number, message content and any other information you provide in order to respond to your inquiry.
Depending on the nature of your inquiry, processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
WhatsApp is a service of Meta Platforms. When using WhatsApp, personal data may also be processed by WhatsApp/Meta in accordance with its own privacy terms.
Further information can be found in
WhatApp's Privacy Policy.
Instagram
Our website contains links to our Instagram presence. If you follow these links, you will leave our website and be redirected to Instagram.
When you use Instagram or interact with our Instagram presence, personal data may be processed by Meta Platforms in accordance with its own privacy terms.
Further information can be found in
Instagram’s Privacy Policy.
Calendly
We use Calendly, a scheduling and booking tool provided by Calendly LLC, to manage appointments, private sessions, workshops, and retreat bookings.
When you book an appointment through Calendly, personal data such as your name, email address, phone number (if provided), booking details, and any information submitted during the booking process may be processed.
The legal basis for processing is Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures) and, where applicable, Art. 6 (1) lit. f GDPR (legitimate interest in efficient scheduling and customer communication).
Further information can be found in
Calendly’s Privacy Policy.
Stripe
We use Stripe Payments Europe Ltd. as our payment service provider for processing online payments.
When making a payment, personal data such as your name, billing address, payment details, email address, and transaction information may be processed by Stripe.
The legal basis for processing is Art. 6 (1) lit. b GDPR (performance of a contract).
Further information can be found in Stripe’s Privacy Policy.
Hosting and Website Builder
Our website is operated using the Homepage Builder provided by United Domains. In connection with the provision and operation of the website, United Domains uses services provided by IONOS SE and Duda Inc.
When you access the website, technical information may be processed in order to deliver the website and ensure its security, stability and technical operation. This may include information such as the requested page or file, referrer URL, browser and device information, date and time of access and IP address or an anonymised form of the IP address.
United Domains and IONOS may process server and access log data for security and technical purposes.
The legal basis for this processing is Art. 6 (1) lit. f GDPR, based on our legitimate interest in providing a secure, stable and technically functional website.
Local Fonts
This website uses locally hosted fonts to ensure a consistent visual presentation. No connection to external font providers is established when you visit this website.
Cookies
This website uses cookies and similar technologies that are necessary for the technical operation and functionality of the website.
Where additional technologies or third-party services requiring consent are used, they will only be activated in accordance with applicable data protection requirements.
Data Retention
We store personal data only as long as necessary for the respective purpose or as required by legal retention obligations.
Once the purpose no longer applies and statutory retention periods expire, the data will be deleted.
Data Sharing with Third Parties
We do not sell your personal data.
Data may be shared only when necessary with:
- Hosting providers
- Technical service providers
- Newsletter providers
- Payment providers
- Booking systems
- Authorities where legally required
All service providers are selected carefully and process data only in accordance with applicable data protection laws.
Data Transfers Outside the EEA
Where personal data is transferred to recipients outside the European Economic Area (EEA), such transfers are made only in accordance with the requirements of the GDPR.
