Status: October 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Virendra Naik, Charlottenstraße 30, 20257 Hamburg, Germany
Email: yogawithviru@gmail.com
2. Overview
This website is a one-page presentation of Virendra Naik’s yoga classes with an embedded booking calendar. The website itself does not use analytics, advertising or tracking tools, and it does not set its own cookies. Fonts and images are delivered from the website itself, not from third-party servers. The only third-party content is the booking calendar described in section 5.
3. Hosting and server log files
The website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the site, the hosting provider processes technical data that your browser transmits automatically, in particular your IP address, the date and time of the request, the requested page, the browser type and the operating system. This is necessary to deliver the website and to keep it secure and stable.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free and secure operation of the website). Netlify, Inc. is certified under the EU–US Data Privacy Framework, so data transfers to the USA are covered by an adequacy decision of the European Commission.
4. Contact by email
If you contact me by email, I process your email address, your message and any other information you give me in order to answer your request. Legal basis: Art. 6 (1) (b) GDPR if your message concerns a class or booking, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). I delete your message once the matter is settled and no statutory retention duty applies.
5. Class booking via Acuity Scheduling
The class calendar and the booking process are provided by Acuity Scheduling, a service of Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA. The calendar is embedded in this page and loads as soon as the page opens. Because of this, your browser connects directly to Acuity/Squarespace servers when you visit the website, and your IP address and technical device information are transmitted to them. Acuity may also set or read cookies or similar technologies in your browser, for example to operate the calendar and to protect it against misuse.
If you book a class, the data you enter (for example name, email address, selected class and time, and any notes) is processed by Acuity Scheduling on my behalf in order to manage the booking, and is shared with me. If you pay for a class during booking, the payment is processed by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), which is connected to the booking calendar and acts as an independent payment service provider. Your payment details are entered directly with PayPal. I do not receive or store them and only learn that the payment was made. PayPal’s own privacy policy applies, available at paypal.com/privacy. The legal basis for the payment is Art. 6 (1) (b) GDPR. Payments that are made outside the calendar (for example in cash or by bank transfer) are processed only with the data needed for that payment.
Legal basis: Art. 6 (1) (b) GDPR for the booking itself; Art. 6 (1) (f) GDPR for making the calendar available when the page loads (legitimate interest in an easy-to-use online booking service). Where cookies or similar technologies are not strictly necessary to provide the calendar you have requested, the legal basis is your consent under § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.
Squarespace, Inc. participates in the EU–US Data Privacy Framework and uses standard contractual clauses for transfers to the USA. Further information: squarespace.com/privacy and acuityscheduling.com/privacy.php. If you prefer not to load the calendar in this page, you can write to me by email to arrange a class.
6. External links
This website contains links to other websites (for example Iyengar Yoga Hamburg and a podcast). No data is transmitted to those sites until you click the link. After that, the privacy policy of the respective site applies.
7. Storage period
I store personal data only as long as necessary for the purpose it was collected for or as long as statutory retention periods require. Server log data is deleted by the hosting provider after a short period in line with its own policy. Booking data is stored for as long as needed to run the classes and to meet any legal obligations.
8. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise your rights, email yogawithviru@gmail.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), datenschutz-hamburg.de.
9. Changes to this policy
I may update this policy when the website or the legal situation changes. The current version is always available on this page.