Privacy Policy

General information

The protection of your personal data is important to me. This Privacy Policy explains what personal data is processed when you visit this website, for what purposes, on what legal basis, and what rights you have.

Controller

The controller responsible for data processing on this website is:

Hosting

This website is hosted by Hostinger. When you visit the website, Hostinger may automatically collect server log data such as your IP address, date and time of access, requested pages, browser type, operating system, and referrer URL, insofar as this is technically necessary for the operation, stability, and security of the website.

Hostinger
Hostinger International Ltd. and/or the relevant Hostinger group entity
Further information: see Hostinger legal documentation.

Access data and server log files

When this website is accessed, information may be automatically processed in server log files. This may include:

• IP address
• date and time of access
• requested page/file
• browser type and browser version
• operating system
• referrer URL
• hostname of the accessing device

This processing is carried out to ensure the technical provision, security, and stability of the website.

The legal basis for this processing is Art. 6(1)(f) GDPR.

Contact by email or contact form

If you contact me by email or via a contact form, the data you provide will be processed for the purpose of handling your request and any follow-up communication.

The contact form on this website is implemented with Contact Form 7 and Conditional Fields for Contact Form 7.

This may include:

• name
• email address
• reason for contact
• message content
• branch-specific inquiry details, depending on the selected inquiry type
• any other information you voluntarily provide

A hidden technical field may also be used for spam protection. This field is not intended for human users and is processed only for the purpose of filtering automated submissions.

When a contact form is submitted, the content may be transmitted through the website’s configured email infrastructure in order to deliver the inquiry to me.

If you choose to book an Exploration Session, you may be forwarded to the external scheduling service Cal.com. In that case, any booking-related data you enter there will be processed through Cal.com for the purpose of arranging the session.

The processing is carried out for the purpose of responding to your inquiry and managing any related communication.

The legal basis is generally Art. 6(1)(b) GDPR, where the inquiry relates to steps prior to entering into a contract or to an existing contractual relationship, and Art. 6(1)(f) GDPR, where processing is necessary for the legitimate interest in responding to inquiries and communicating with website visitors.

Telegram, One Life in Love Bot, and Telegram spaces

One Life in Love uses Telegram to provide public channels, community spaces, bot navigation, Simply Yoga access, paid Membership and Drop-in access, personal invite links, access recovery, and related service communication.

Depending on how you interact with these services, the following data may be processed:

• Telegram user ID and chat ID
• display name
• Telegram username, where available
• commands and messages sent directly to the bot
• selected product or access type
• entitlement or access status
• access start and expiry dates
• technical information needed to operate the bot and grant private Telegram access

This data is processed to provide bot navigation, link Stripe purchases with the correct Telegram account, grant access to private Telegram groups, create one-use invite links, manage Membership and Drop-in access, recover access while a valid entitlement exists, and communicate about purchased services.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary to perform a contract or take steps before entering into a contract, and Art. 6(1)(f) GDPR where processing is necessary for security, reliability, fraud or abuse prevention, and technical operation.

Telegram is an independent platform provider and processes data according to its own privacy policy.

Telegram
Telegram Messenger Inc. and/or the relevant Telegram group entity
Further information: Telegram Privacy Policy

Payments and subscriptions through Stripe

One Life in Love uses Stripe for Simply Yoga Drop-ins and the Simply Yoga Monthly Membership, including payment processing, recurring subscription billing, invoices and receipts, payment status, and the Stripe Customer Portal for Membership management.

Stripe may process the following data:

• name and email address
• billing details and payment method data
• payment amount and transaction data
• subscription data
• invoice and payment status
• fraud and security information

Complete card details are entered directly into Stripe’s payment environment and are not stored by One Life in Love.

One Life in Love may receive and store operational payment identifiers and status information, including:

• Stripe customer ID
• Checkout Session ID
• subscription ID
• invoice and payment status
• product or access type
• paid-through date
• Stripe event identifiers

This data is processed to complete purchases, activate paid access, manage recurring Membership renewals, determine paid-through access, handle cancellations and Membership expiry, manage Telegram access, and keep appropriate records.

The legal basis is Art. 6(1)(b) GDPR for payment processing and contract fulfilment, and Art. 6(1)(c) GDPR where processing is necessary to comply with statutory accounting, tax, or record-retention duties.

Depending on the processing activity, Stripe may act as a processor and/or an independent controller.

The Stripe Customer Portal may be used to update payment methods, view billing history, manage a recurring Membership, and cancel a Membership at the end of the current billing period.

Stripe
Stripe group companies and/or the relevant Stripe entity
Further information: Stripe Privacy Policy and Stripe Privacy Center

Local schedule and timezone display

The One Life in Love schedule page can display practice times in your local timezone. Your timezone is detected through your device or browser; no geolocation permission is requested. The timezone conversion happens locally in your browser, the detected timezone is not stored by One Life in Love, and no location profile is created for this purpose.

Newsletter

If you subscribe to the newsletter on this website, the data you enter in the newsletter form will be processed in order to send you occasional reflections, updates, and offerings from One Life in Love.

The newsletter signup currently requires the following information:

• first name
• email address
• confirmation that you wish to receive newsletter emails

Newsletter subscriptions are managed through Brevo.

The newsletter signup uses a double opt-in procedure. After entering your details, you will receive an email asking you to confirm your subscription. Only after you confirm your subscription will your email address be added to the newsletter list.

In connection with your newsletter subscription, the following may in particular be processed:

• first name
• email address
• subscription status
• consent status
• date and time of confirmation
• unsubscribe status
• technical delivery information relating to newsletter emails
• where applicable, newsletter interaction data such as opens, clicks, and unsubscribe events

A hidden technical field may also be used for spam protection during newsletter signup. This field is processed only for the purpose of filtering automated submissions.

A welcome email and later newsletter emails are sent through Brevo after confirmed subscription.

You can unsubscribe from the newsletter at any time by using the unsubscribe link included in newsletter emails. Unsubscribing does not affect the lawfulness of processing carried out before withdrawal.

The legal basis for newsletter processing is your consent under Art. 6(1)(a) GDPR.

To document lawful consent and manage newsletter compliance, subscription status and proof of consent may also be processed on the basis of Art. 6(1)(f) GDPR.

Cookies and similar technologies

This website currently uses only technically necessary cookies where needed for essential website functions.

This may include, for example, a short-lived cookie used to display a status message after newsletter signup or other technically necessary cookies required by WordPress or core site functions.

This website does not currently use analytics or marketing cookies of its own.

If non-essential cookies or similar technologies are introduced later, this Privacy Policy should be updated accordingly and, where required, consent should be obtained before such technologies are used.

Third-party services and processors

This website currently uses the following external service providers in connection with personal data processing:

• Hostinger, for website hosting and related server infrastructure
• Brevo, for newsletter list management, double opt-in confirmation, welcome and newsletter email sending, and unsubscribe handling
• Cal.com, for exploration session scheduling and appointment booking
• Stripe, for payment processing, recurring subscription billing, payment records, and Membership management
• Telegram, for bot interaction, service communication, and access to public and private Telegram spaces

These providers may process personal data to the extent necessary for the services they provide. Their roles depend on the service and processing activity; a provider may act as a processor and/or an independent controller.

Further information is available in the respective provider privacy documentation and, where applicable, data processing agreements.

External links

This website contains links to external websites and platforms, including social platforms and messaging services. If you click such a link, you leave this website and the respective external provider becomes responsible for any related data processing on its own website or platform.

I have no influence over the content or privacy practices of those external services.

Legal bases of processing

Where personal data is processed, the legal basis may in particular be:

• Art. 6(1)(a) GDPR: your consent
• Art. 6(1)(b) GDPR: performance of a contract or steps prior to entering into a contract
• Art. 6(1)(c) GDPR: compliance with legal obligations
• Art. 6(1)(f) GDPR: legitimate interests, in particular the secure operation of the website, communication with visitors, spam prevention, and documentation of lawful consent

Storage period

Personal data is stored only for as long as necessary for the respective purpose or as required by law.

In particular, contact inquiries are stored for as long as necessary to process the inquiry and any related follow-up communication, newsletter data is stored until you unsubscribe or otherwise withdraw your consent, and data documenting consent and subscription status may be retained for longer where necessary to demonstrate lawful processing or comply with legal obligations.

Payment, subscription, and contract-related data may be retained for the duration of the contractual relationship and for longer where statutory accounting, tax, legal, or documentation obligations require it.

Telegram access and entitlement data is retained only for as long as necessary to provide and administer the service and resolve access or contractual issues.

Your rights

Under applicable data protection law, you have the right to:

• request information about your stored personal data
• request correction of inaccurate data
• request deletion of your data
• request restriction of processing
• object to processing
• receive your data in a portable format, where applicable
• withdraw consent at any time with future effect

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully.

Changes to this Privacy Policy

I reserve the right to amend this Privacy Policy if this website, its functions, the services used, or the legal situation changes.