Legal

Privacy Policy

Last updated: October 2026. This policy explains the nature, scope, and purpose of the processing of personal data on this website.

This English version is provided for convenience. The German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Hosting (GitHub Pages)

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When the pages are accessed, GitHub processes technically necessary connection data in server log files, including the IP address, date and time of access, the page requested, and technical information about the browser. This processing serves the secure and stable provision of the website and is based on our legitimate interest under Art. 6(1)(f) GDPR. Data transfers to the USA are based on the Standard Contractual Clauses or the EU-US Data Privacy Framework. More information: GitHub Privacy Statement.

3. Fonts

The fonts used are served locally from this server. No connection is made to third-party servers (such as Google Fonts), and no personal data is transferred to third parties for this purpose.

4. Getting in touch

If you contact me by email or WhatsApp, the information you provide (e.g. name, email address or phone number, content of the message) is stored to handle your request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (initiating or performing a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding). For WhatsApp, the privacy policy of WhatsApp Ireland Ltd. also applies. The data is deleted as soon as it is no longer needed and no statutory retention obligations apply.

5. Booking via Cal.com

For online booking I use the service Cal.com (Cal.com, Inc., USA). The booking buttons on this website are simple links: only when you click them are you forwarded to Cal.com. There, the details you enter when booking are processed (name, email address, phone number, requested time, and optional information about your request), along with technical connection data. The appointment is saved in my Google Calendar, and online calls take place via Google Meet (Google Ireland Ltd.). The legal basis is Art. 6(1)(b) GDPR (initiating or performing a contract). Please do not share health data in the booking form that is not needed for the appointment. More information: Cal.com privacy policy.

6. External links and media

This website contains links to YouTube, Instagram, WhatsApp, and the websites of the yoga studios Yoga Palais Erfurt and Ekatra Erfurt. These are simple links: only when you click them do you leave this website and get forwarded to the respective service, whose privacy policy then applies. No content from these services is embedded, and no data is transferred to them unless you click the links. The videos and images shown on the homepage are loaded locally from this server; there is no connection to a video platform.

7. Cookies, analytics, and tracking

This website does not set cookies for analytics or marketing purposes and uses no web analytics services or tracking.

8. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.

9. Your rights

Under the GDPR, you have the following rights:

• Access to the data stored about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)

An informal message to the address above is enough to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

10. Withdrawal of consent

You can withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.