Privacy Policy
Storage of access data in server log files
Data transfer for contract performance
Cross-border transfer of personal data
Data use for advertising purposes
Use of Google Analytics for web analysis
Links to our social media presences
User rights, data security and contact details
Privacy policy
We, YO|YOGA AG, based in Switzerland, Holbrigstrasse 8a, 8049 Zurich, entered in the trade register of the canton of Zurich under the number CHE-114.634.275, are the operator of the website www.jadeyoga.co.uk as well as provider of products and services offered there.
This policy applies if you are based in the United Kingdom (UK).
We are grateful for your interest in our website. We are responsible for the collection, processing and use of your personal data and for the compatibility of the data processing with the respective applicable law, particularly the Data Protection Act 2018 and UK General Data Protection Regulation.
We attach a lot of importance to the protection of your privacy. Hereunder we provide you with detailed information on how we manage your data. Please note that the following information will be reviewed and amended from time to time. Therefore, we recommend checking this data privacy statement regularly.
Storage of access data in server log files
You do not need to physically enter any personal details to access our site. We simply store access data in so-called server log files. The following data is thereby recorded without any action on your part and is stored by us until it is deleted automatically after a maximum of 12 months:
- IP address of the requesting computer,
- name and URL of the requested file,
- date and time of the retrieval,
- the website, from which the access was made,
- operating system of your computer and the browser used by you,
- the status code (e.g. error message),
- name of the requesting provider, and
- the country, from which you have accessed.
The data listed above will be used to enable us to pursue our legitimate interests for the use of our website (connection set-up), to ensure smooth operation of the site, to improve our offer as well as for internal statistical purposes.
The information listed above will not be linked or stored with other personal data. In the event of an attack on the network infrastructure of the website or in case of a suspicion of any other unlawful or improper use of the website, the IP address will be evaluated for clarification and defense and will, if necessary, be used within the scope of criminal proceedings for identification and for civil and criminal actions against the relevant users.
Data collection and use
We collect personal data whenever you disclose it within the scope of your order, when contacting us or when opening a customer account.
a. When opening a customer account
Creating a customer account on our website is voluntary. The personal data needed for the creation of your customer account is as follows:
- E-mail address,
- Password,
- First name,
- Last name,
- Company (if applicable),
- Phone Number,
- Address (billing and shipping),
- City,
- Country,
- ZIP/Postal Code.
We may need your telephone number to give to the courier who will deliver your goods, in case they need to contact you about your delivery. The telephone number will not be used for marketing purposes.
You can view and change the details in your customer account at any time. Your customer account can be deleted at any time by sending a message to: namaste(at)jadeyoga.co.uk.
The legal basis for processing your data for the above purpose is the fulfilment of a contract with you as well as our legitimate interest in optimal administration of the customer relationship with you. You can object to this data processing at any time; this would result in the deletion of your customer account.
b. When using the website as a registered user
When the website is used by logged-in, registered customers, we collect data for statistical reasons and to allow smooth functionality of the online shop. In particular, data is collected about the type, frequency and intensity of the use as well as the duration of our customers’ accounts. The legal basis for the processing of your data is to pursue our legitimate interests to understand how the site is used and improve user experience of the site.
We may also collect data about your purchases in order to personalise our offer to you. The legal basis for the processing of your data for this purpose is to pursue our legitimate interests to increase our sales.
You can object to this data processing at any time; this would however result in the deletion of your customer account.
c. When ordering
If you want to buy a product on our website, we will require the following data for processing the purchase:
- Login data (email and password),
- First name,
- Last name,
- Company (if applicable),
- E-mail address,
- Phone Number,
- Address (billing and shipping),
- City,
- Country,
- ZIP / Postal Code, and
- Information within the scope of the payment.
We will process this data to record your order as requested, to provide the ordered products, to contact you in the event of any uncertainties or problems and to ensure the correct payment. The legal basis for processing your data for these purposes is the fulfilment of a contract with you.
We may require additional information for specific products and offers. If this is the case, we will tell you during the purchase process. When buying Gift Card, you must, for example, also provide an email address for delivery in addition to the above information.
If you have opened a customer account, we will collect, edit and store information about the products and services that you order as well as data on your ordering, purchasing and payment behaviour in connection with your orders in the online shop. The legal basis for this processing of your data is to pursue our legitimate interests in ensuring the optimal administration of the customer relationship with you.
d. When using the contact form
If you contact us using the contact form on the website, we will collect the following data from you:
- Name,
- E-mail, and
- any personal data you submit in the subject and/or the message.
We will use this data to answer the questions asked by you or to provide the services requested by you and if necessary, to contact you via email.
We process this data to meet our legitimate interest in the processing of your contact request.
Data transfer for contract performance
We will forward your personal data if you have explicitly consented to this, if there is a legal obligation for this, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship.
Moreover, we will forward your data to third parties, insofar as this is necessary within the scope of the use of the website and the contract processing, namely the processing of your orders, the processing of your purchases, the delivery of your ordered products and payment thereof, for the provision of the services requested by you as well as the analysis of your user behaviour. The use of the data to be forwarded for this by the third parties will be strictly limited to the specified purposes.
Different third-party service providers will be explicitly mentioned in this data privacy statement (e.g. in the sections "Data use for advertising purposes", "Use of Google Analytics for web analysis" and "Links to our social media presences").
For the purpose of contract performance, we will transfer your data to the delivery company commissioned with the delivery, to the extent required for delivery of the goods ordered.
Our web host, AWS Germany (Adobe Magento Cloud), will have access to the personal data collected through the website. The website is hosted on servers in Germany.
Depending on which payment provider you select during the ordering process, in order to execute payments, we will transfer the payment data collected to the financial institution commissioned with the payment and if need be to any payment service providers that we may have commissioned or the payment service you selected. A number of the selected payment service providers collect this data of their own accord if you open an account there. In this case, you may have to sign -in during the ordering process with your login for the payment service provider. The data privacy statements of the respective payment service provider will apply.
Cross-border transfer of personal data
We are entitled to transfer personal data to the European Economic Area and Switzerland as these countries are deemed to have an adequate level of protection for your personal data.
We are entitled to transfer your personal data to companies in other countries outside of the UK, provided that the statutory provisions regulating the disclosure of personal data to third parties are complied with. These third parties are bound to maintain data privacy to the same extent as us. If the level of protection of personal data in a country is not in accordance with UK data protection laws, we ensure by contract that the protection of your personal data always corresponds to that of the UK.
Individual third-party service providers mentioned in this data privacy statement have their registered offices in the USA, such as Google Analytics and Mailchimp (refer to "Data use for advertising purposes", "Use of Google Analytics for web analysis" and "Links to our social media presences” for more information on these data transfers).
Use of data for advertising purposes
a. Use of data when subscribing to the email newsletter
You will receive a newsletter from us only if you subscribe. You can do this on the website and you will need to provide the following details:
- E-mail address, and
- If you wish, your last name and first name.
If you subscribe to our newsletter, we will use the above data in order to send you our email newsletter regularly with your consent.
We also enrich the above data with data from your registration (language, country, etc.). The purpose of this data enrichment is the segmentation and better personalisation of the newsletter dispatch.
We will use your data for the newsletter until you withdraw your consent. You can unsubscribe at any time by either sending a message to namaste(at)jadeyoga.co.uk or via a designated link in the newsletter.
We work with Mailchimp, an email marketing platform from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. More information on the data protection at Mailchimp can be found here.
Our newsletter may contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1 pixel, invisible graphic, which (like a cookie) is linked with the user ID of the respective newsletter subscriber. Further detail on our use of cookies is provided below.
For every newsletter sent, there is information about the address file used, the subject and the number of newsletters sent. We and Mailchimp can also see which addresses have not yet received the newsletter, to which address it was sent and to which addresses the dispatch has failed. It is also evident as to which addresses have opened the newsletter and which addresses have unsubscribed. We use this data for statistical purposes and for optimising the newsletter with reference to its content and structure. This allows us to align the information and offers in our newsletter better with the individual interests of the recipients. The tracking pixel will be deleted if you delete the newsletter.
To prevent the use of the web beacon (tracking pixel) in our newsletter, please set your mail programme such that no HTML is displayed in messages,if this is already not the case by default. On the following pages, you will find explanations as to how you can make this setting for the most common email programmes.
- Mail for Mac (“Load remote content in messages”)
When you register for the newsletter, you will give us your consent to the processing of the data entered for the regular dispatch of the newsletter to the address specified by you. This consent represents our legal basis for the processing of the data for the newsletter.
Where we process data for statistical analysis of usage behaviour and optimisation of the newsletters, we rely on our legitimate interests to improve user experience and improve our services.
b. Re-targeting
We use so-called re-targeting technologies. Your usage behaviour on our website will thereby be analysed so that advertisements that are individually tailor-made for you can be offered on third party websites. Your usage behaviour will be recorded pseudonymously. This is a technique that replaces or removes information that identifies an individual, but if a person or company has access to that information, they can re-identify that individual.
Most of the re-targeting technologies work with cookies (for this, refer to the “Use of cookies” section).
This website uses Doubleclick by Google, a service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for placing advertisements based on the use of previously visited websites. Service provider for the EU, EEA and Switzerland is Google Ireland Ltd., Gordon House, Barrow Street, Dublin, 4, Ireland (“Google”).
For this, Google uses the so-called DoubleClick cookie, which allows recognition of your browser when visiting other websites. The information generated by the cookie about the visit to these websites (including your IP address) is transferred to a Google server in the USA and saved there (you will find additional information on transfers of personal data into the USA below in the “Use of Google Analytics for web analysis” section).
Google will use this information to evaluate your use of the website with respect to the advertisements to be placed, to compile reports about the website activities and advertisements for the website operators and to provide other services that are associated with the website use and the Internet use. Google will also transfer this information to third parties if this is legally prescribed or if third parties process this data on behalf of Google. Google will however, under no circumstances, link your IP address with other data of Google. We ensure by contract that the protection of your personal data always corresponds to that of the UK. More information on Google’s data protection can be found here.
You can prevent the re-targeting at any time by rejecting or deactivating the relevant cookies in the menu bar of your web browser (for this, refer to the “Use of cookies” section below).
The legal basis for processing your data in this way is your consent. You can withdraw your consent at any time (refer to the “Use of cookies” section below).
Use of cookies
In order to make a visit to our website more attractive and facilitate the use of certain features, we use "cookies" on our website. Cookies are small files that are stored on your device and save specific settings and data for exchange with our system via your browser.
Some of the cookies that we use are deleted again at the end of the browser session, in other words after you close your browser (so-called "session cookies"). Other cookies remain on your terminal and enable us to recognise your browser the next time you visit the website (“persistent cookies”). Cookies do not damage the hard drive of your computer.
For example, we use cookies to identify you as a registered user without you having to log in separately. The use does not mean that we receive new personal data about you as an online visitor.
Please keep in mind that certain cookies are already set when you access our website. Most web browsers accept cookies automatically. You can configure your browser in such a manner that you are notified about the setting of cookies and decide in the individual case whether to accept them or not or exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our website may, however, be reduced.
Internet browsers allow you to control the storage of cookies on your PC. This is described in the Help menu of each browser and explains how to change your cookie settings. You can find the description for the respective browsers under the following links:
- Microsoft Windows Internet Explorer
The legal basis for the processing of the data for the aforementioned purposes lies in our legitimate interest in ensuring the functionality and optimising the website. You can object to the processing at any time. The opt-out option has been pointed out previously.
Use of Google Analytics for web analysis
This website uses Google Analytics, a web analysis service provided by Google. Google Analytics uses methods that allow analysis of your use of the website, such as so-called "cookies", text files that are stored on your computer. The information generated by the cookie about your use of this website, such as:
- Browser type/version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Time of the server request
- Device
The information is usually transferred to a Google server in the USA and stored there. Due to the activation of IP anonymisation (“anonymizeIP”) on this website, the IP address will be shortened within the UK, Member States of the European Union or in other contracting states acceding to the Agreement on the European Economic Area and in Switzerland before transmission to the USA. The anonymised IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data. Only in exceptional cases is the full IP-address transmitted to a Google server in the USA and shortened there. In these cases, we ensure through contractual guarantees that Google adheres to a sufficient level of data protection.
The information is used to evaluate your use of the website, in order to compile reports on the activities on our website and to provide other services associated with the use of the website for the purpose of market research and customising the website. Google will also transfer this information to third parties if this is legally prescribed or if third parties process this data on order. According to Google, the IP address will, under no circumstances, be linked with other data relating to the user.
Furthermore, you can prevent the collection of the cookie-generated data (including your IP address) about your use of the website by Google and the processing of this data by Google by downloading and installing the browser plug-in provided under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
The legal basis for the processing of the data for the aforementioned purposes is your consent. You can withdraw your consent at any time.
Links to our social media presences
On our website, you will find links to social media networks. These are plugins provided by the service provider, which transmit data to the service provider when loading the website without influence of the users. The interfaces to the social media networks will only contain a link to the social media network. No user data will be transmitted from the website to the social media network.
The links will lead to the following networks:
- Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA
When you call up a link to one of our social media profiles, a direct connection will be established between your browser and the server of the social network concerned. The network will thus receive the information that you, with your IP address, have visited our website and called up the link. When you call up a link to a network while being logged in to your account with the network concerned, the contents of our website can be linked with your profile with the network; this means that the network can directly assign your visit to our website to your user account. If you want to prevent this, you should log out before using the corresponding links. An assignment will take place in any case if you log in with the network concerned after using the link. Information on Instagram’s data policy can be found here.
Retention periods
We will retain your personal data only as long as is necessary to supply your goods and track the delivery, and to carry out the further processing activities within our legitimate interests (as described above). We will retain contractual data for a longer period, if required by law, such as accounting regulations and tax regulations. According to these regulations, business communication, concluded contracts and accounting records must be retained for up to 10 years. We will not access this data if we no longer need it to supply our goods and services to you. The data may then only be used for billing and tax purposes.
User rights, data security and contact details
a. User rights
You can any time object to data processing, particularly to data processing in connection with direct marketing (e.g. against advertising emails). You will also have the following rights:
Right to information: You will have the right to obtain confirmation as to whether we are processing your personal data, and a copy of it. You can do this at any time and free of charge You can check which of your personal data is being processed by us, and that we are using it according to the applicable data protection regulations.
Right to correction: You will have the right to have incorrect or incomplete personal data corrected and to be informed about the correction. In this case, we will inform the recipients of the data concerned about the changes made unless this is impossible or associated with disproportionate effort.
Right to deletion: You will have the right to have your personal data deleted under certain circumstances.
Right to object: You will have the right to object to processing of your personal data where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Right to restriction of the processing: Under certain conditions, you will have the right to demand restriction or suspension of the processing of your personal data.
Right to data transfer: You will have the right under certain circumstances to receive the personal data, which you have provided to us, from us free of charge in a readable format.
Right to withdraw consent: You will have the right to withdraw an issued consent at any time. Processing activities in the past based on your consent will however not become illegal as a result.
b. Data security
We take appropriate technical and organisational security measures to protect your personal data that is stored with us from manipulation, partial or complete loss and unauthorised access by third parties. Our security measures are constantly being improved in line with technological developments.
When you register yourself with us as a customer, the access to your customer account will be possible only upon entering your personal password in each case. You should always treat your password as confidential and close the browser window once you have ended the communication with us, particularly if you are using a shared computer.
We also take data protection within our organisation very seriously. Our employees and the service providers commissioned by us are obligated by us to maintain confidentiality and to comply with the data protection regulations. Moreover, they are granted access to personal data only to the necessary extent.
c. Contact details
If you have any questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data as well as for revocation of issued consents or objection to a specific use of data, or if you are not happy with the way that we have handled your personal data, please directly contact our contact person for data protection law by sending an email to namaste(at)jadeyoga.co.uk.
If you are still not happy, you have the right to make a make a complaint to the Information Commissioner’s Office see: https://ico.org.uk/global/contact-us/