Privacy Policy

1. Introduction

dayofrkvfv B.V. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dayofrkvfv.top or use our services at our yoga studio located at Dorpsstraat 9, 4818 ST Breda, Netherlands.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Date of birth and age
• Health and medical information relevant to yoga practice
• Payment information and billing details
• Class booking and attendance records
• Communication preferences
• Emergency contact information

3.2 Technical Information

When you visit our website, we automatically collect:

• IP address and location data
• Browser type and version
• Device information
• Website usage data and analytics
• Cookies and similar tracking technologies

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To provide yoga classes, workshops, and related services
• Communication: To respond to inquiries, send confirmations, and provide customer support
• Health and Safety: To ensure your safety during classes and provide appropriate modifications
• Payment Processing: To process payments and manage billing
• Marketing: To send newsletters and promotional materials (with your consent)
• Legal Compliance: To comply with legal obligations and protect our rights
• Website Improvement: To analyse website usage and improve our services

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To fulfil our contractual obligations when you book classes
• Legitimate Interest: For business operations, customer service, and website analytics
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with tax, accounting, and other legal requirements
• Vital Interest: To protect health and safety in emergency situations

6. Data Sharing and Disclosure

We may share your personal information with:

• Service Providers: Payment processors, booking systems, and IT support providers
• Healthcare Providers: In case of medical emergencies (with your consent or when legally required)
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Customer Records: 7 years after last service for tax and legal compliance
• Health Information: 7 years after last class attendance
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months maximum

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent for processing at any time

To exercise these rights, contact us at privacy@dayofrkvfv.top. We will respond within one month.

9. Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about our cookie usage, please refer to our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training.

11. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

12. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

15. Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.