Legal
Privacy policy
This privacy policy explains how personal data is processed in connection with the Revivingyoga GmbH website, digital platform, class bookings, payments and contact enquiries. It reflects the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR), and notices under US privacy laws (including CCPA/CPRA where applicable).
Last updated: 1 August 2026
1. Controller
The controller responsible for processing is:
Revivingyoga GmbH
UID: CHE-238.007.690
Grabenring 8, 4123 Allschwil, Switzerland
Email: sonia@revivingyoga.com · Phone: +41 76 207 88 02
Please use the same contact details for privacy requests. A formally appointed data protection officer is not currently designated; where legally required, contact details will be provided separately.
2. Scope
This policy applies to www.revivingyoga.com, the related booking/video platform, and offline contacts (e.g. studio, phone, email) insofar as personal data is processed.
3. Categories of personal data
Depending on your use, we may process in particular:
- Identity and contact data (name, email, phone, address)
- Account data (login, password hash, roles, preferences)
- Booking and class data (sessions, attendance, subscriptions, cancellations)
- Payment and billing data (amount, status, transaction references; card data is processed by payment providers)
- Communications (contact form, email, support)
- Technical usage data (IP address, browser/device information, logs, cookies/similar technologies)
- Video-library usage data (access times, unlocked content) where technically necessary
4. Purposes of processing
We process personal data for the following purposes:
- Providing and operating the website and platform
- Entering into and performing contracts (classes, subscriptions, video library, counselling)
- Payment processing and accounting
- Communication, customer support and responding to enquiries
- Security, abuse prevention and troubleshooting
- Complying with legal obligations (e.g. retention)
- With consent: newsletters or marketing messages
- Analysis and improvement of our services in aggregated/anonymised form where possible
5. Legal bases / justifications
Switzerland (FADP)
Processing is based on Art. 31 FADP, in particular consent, performance of a contract or pre-contractual steps, overriding private or public interests, and legal obligation.
EU/EEA (GDPR)
Where the GDPR applies, we rely in particular on:
- Art. 6(1)(b) GDPR – contract / pre-contractual measures
- Art. 6(1)(c) GDPR – legal obligation
- Art. 6(1)(f) GDPR – legitimate interests (operations, security, improvement)
- Art. 6(1)(a) GDPR – consent (e.g. optional cookies, marketing)
United States
For individuals in the US, we process data to fulfil enquiries and contracts, to provide requested services, and — where applicable — in accordance with California and other US privacy notice requirements. We do not sell personal information as defined by the CCPA/CPRA and do not share it for cross-context behavioural advertising for consideration.
6. Recipients and processors
We may disclose personal data to service providers that support our operations, to the extent necessary for the purposes above. These may include in particular:
- Hosting and infrastructure providers
- Payment providers (Stripe) for online payments
- Email/communication services (e.g. Google for sending contact messages)
- Video providers (Vimeo) for the video library
- Videoconferencing services (e.g. Zoom) for online classes
- Accounting, IT and support providers
These recipients process data only as needed and are bound by confidentiality and security obligations. Authorities receive data only when we are legally required to disclose it.
7. International transfers
Personal data may be transferred to countries outside Switzerland or the EEA (e.g. the USA), in particular when using cloud, payment or video services. We implement appropriate safeguards such as adequacy decisions, standard contractual clauses or comparable guarantees, and additional measures where required.
8. Retention
We retain personal data only as long as needed for the purposes above or as required by statutory retention rules (in Switzerland, commercial and tax retention periods typically up to 10 years for business records). Account data is deleted or anonymised after the end of the relationship and expiry of applicable periods, unless overriding interests require longer retention. Contact enquiries are typically kept for the duration of handling plus a reasonable follow-up period.
9. Security
We implement appropriate technical and organisational measures to protect against unauthorised access, loss, misuse and alteration (e.g. access controls, encrypted transmission where customary, role-based permissions). Absolute security on the internet cannot be guaranteed.
11. Your rights (Switzerland / EU)
Depending on applicable law, you have in particular the rights to:
- Access personal data we process
- Rectify inaccurate data
- Erasure / to be forgotten (where applicable)
- Restriction of processing
- Object to processing based on legitimate interests
- Data portability (where GDPR applies)
- Withdraw consent with effect for the future
- Lodge a complaint with a supervisory authority (in Switzerland: Federal Data Protection and Information Commissioner, FDPIC; in the EU: the authority at your place of residence)
To exercise your rights, contact us at the address above. We may request identity verification.
12. Notices for individuals in the United States (including California)
Where US privacy laws (e.g. CCPA/CPRA) apply, the following additional notices apply:
- Categories collected: see section 3
- Business purposes: see sections 4–6
- Sale / sharing: we do not sell personal information and do not “share” it for cross-context behavioural advertising
- Rights: know, delete, correct, limit use of sensitive personal information, and non-discrimination for exercising rights
- Requests: email sonia@revivingyoga.com (we respond within statutory timelines)
We do not knowingly collect personal information from children under 13 (COPPA). Individuals under 16 should use our services only with parental/guardian consent where required by law.
13. Automated decision-making
We do not make automated decisions, including profiling, that produce legal effects concerning you or similarly significantly affect you.
14. Third-party content
Embedded services (e.g. Vimeo player, Zoom, maps) may process data under their own policies. Please review the privacy notices of those providers.
15. Changes
We may update this privacy policy when services, technologies or legal requirements change. The version published on this page with the last-updated date is the controlling version.