Introduction
With the following data protection declaration, we would like to inform you about which types of your personal data (hereinafter also referred to as "data") we process for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").

The terms used are not gender-specific.

As of: September 25, 2022

Table of contents

Introduction

Person responsible

Overview of processing

Relevant legal bases

Security measures

Transfer of personal data

Data processing in third countries

Deletion of data

Use of cookies

Provision of the online offer and web hosting

Contact and inquiry management

Presences in social networks (social media)

Change and update of the data protection declaration

Rights of the data subjects

Definitions of terms

Person responsible
Yasemin Oyan
Im Chrummbächli 12
8805 Richterswil

E-mail address:

yoga@yaseminoyan.com

Overview of processing
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of data processed
Contact details.

Content data.

Usage data.

Meta/communication data.

Categories of data subjects

Communication partners.

Users.

Purposes of processing

Contact requests and communication.

Security measures.

Management and response to requests.

Feedback.

Marketing.

Provision of our online offer and user-friendliness.

Information technology infrastructure.

Relevant legal bases
Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. If more specific legal bases are also relevant in individual cases, we will inform you of these in the data protection declaration.

Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 Clause 1 Letter b) GDPR) - The processing is necessary for the fulfillment of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject.

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR) - Processing is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Switzerland. This includes in particular the Federal Data Protection Act (DSG). The DSG applies in particular if no EU/EEC citizens are affected and, for example, only data from Swiss citizens is processed.

Security measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, transfer, securing availability and separation of data. Furthermore, we have set up procedures that ensure the exercise of data subject rights, the deletion of data and reactions to data threats. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

TLS encryption (https): In order to protect the data you transmit via our online offering, we use TLS encryption. You can recognize encrypted connections of this type by the prefix https:// in the address bar of your browser.

Transmission of personal data
As part of our processing of personal data, it may happen that the data is transmitted to other bodies, companies, legally independent organizational units or persons or that it is transferred to them.