Privacy Policy

We are pleased about your interest in our website. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller Responsible for Data Processing

The Controller responsible for data processing on this website within the meaning of the GDPR is:

Fa. Werner Larsen

Wieckhorster Dorfstr. 7

29640 Schneverdingen

Germany

E-Mail: wlarsen@shadangayoga.com

Phone: +49 (0) 5193-52626

2. Provision of the Website and Creation of Server Log Files

When visiting our website for informational purposes only, our servers automatically store access data in so-called server log files. This includes:

  • Name of the retrieved website and file
  • Date and time of access
  • Transferred data volume and notification of successful retrieval
  • Browser type and version, as well as the user’s operating system
  • Referrer URL (the previously visited page)
  • IP address and requesting provider

This data is evaluated exclusively to ensure trouble-free operation of the site (e.g., to investigate abuse or fraud) and to improve our services. Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a secure website. Log file information is stored for a maximum of 7 days and subsequently deleted, unless further retention is required for evidentiary purposes.

3. Data Processing for Contract Execution, Customer Accounts, and Digital Subscriptions (SureCart & SureMembers)

We collect personal data when you voluntarily provide it to us as part of an order, when contacting us, when opening a customer account, or when purchasing digital products and subscriptions.

3.1 Use of SureCart & SureMembers (Data Processing Agreement & International Data Transfers)

For online order processing, shop operation, payment processing, and the provision of digital content (e.g., video clips, memberships), we use the services of SureCart Inc. (2055 Limestone Rd, STE 200-C, Wilmington, Delaware 19808, USA) along with the SureMembers plugin.

Data entered by you in the checkout and during registration (name, address, email address, IP address, payment details, order details, and subscription status) are processed and stored on SureCart’s infrastructure.

  • Data Processing Agreement (DPA): We have concluded a Data Processing Addendum with SureCart. SureCart processes your data strictly according to our instructions and for contract performance pursuant to Art. 6(1)(b) GDPR.
  • Data Transfers to the USA (Third-Country Transfer): Data may be transferred to SureCart Inc. servers located in the United States. Data transfers to the US are safeguarded through the EU Standard Contractual Clauses (SCCs) issued by the European Commission and the EU-U.S. Data Privacy Framework (DPF), ensuring a level of protection comparable to GDPR standards.

For further information regarding SureCart’s privacy practices, please refer to their privacy policy: https://surecart.com/privacy-policy/.

3.2 Contract Performance

We process the data provided by you for contract fulfillment and handling your inquiries pursuant to Art. 6(1)(b) GDPR. Upon full execution of the contract or deletion of your customer account, your data will be restricted for further processing and erased upon expiration of statutory commercial and tax retention periods (Art. 6(1)(c) GDPR), unless you have explicitly consented to further data usage.

4. Transfer of Data to Payment Service Providers

To process one-time payments and recurring subscription charges within the SureCart checkout, we forward your necessary payment details to the chosen payment service provider pursuant to Art. 6(1)(b) GDPR:

5. Use of Cookies

Our website uses cookies. These are small text files stored on your end device. Some cookies are deleted after the end of the browser session (session cookies). Other cookies remain stored on your device and allow us to recognize your browser on your next visit (persistent cookies).

  • Technically Necessary Cookies: These are deployed based on our legitimate interest (Art. 6(1)(f) GDPR) and § 25(2) TDDDG to ensure essential functionality of the website and checkout process.
  • Non-Essential Cookies (e.g., for analytics, marketing, Amazon, YouTube): These are set only with your explicit prior consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). You may revoke your consent at any time via our cookie settings banner.

6. Amazon Affiliate Program

We participate in the Amazon EU Partner Program. Advertisements and links to Amazon websites are integrated into our site, allowing us to earn advertising fee reimbursements. Amazon sets cookies to track the origin of orders.

Legal Basis: The use of this service and the setting of associated cookies occurs exclusively if you have given us your explicit prior consent via our cookie banner (Art. 6(1)(a) GDPR). For further details, see Amazon’s Privacy Notice: https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJW4TWUZ7VYEA.

7. Integration of YouTube Videos

We have integrated YouTube videos into our online offering (Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Legal Basis: Videos are loaded and connection to YouTube servers is established only after you have granted explicit consent (Art. 6(1)(a) GDPR). Data may be transmitted to servers in the USA during this process. For more information, please see YouTube’s privacy policy: https://policies.google.com/privacy.

8. Rights of the Data Subject

Under applicable data protection laws, you possess comprehensive rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): Right to obtain information regarding your personal data processed by us.
  • Right to Rectification (Art. 16 GDPR): Right to demand immediate rectification of inaccurate data or completion of incomplete data.
  • Right to Erasure (Art. 17 GDPR): Right to request erasure of your data, provided no statutory retention duties apply.
  • Right to Restriction of Processing (Art. 18 GDPR): Right to request restriction of processing under certain legal conditions.
  • Right to Notification (Art. 19 GDPR): Right to be informed regarding rectifications, erasures, or restrictions communicated to recipients.
  • Right to Data Portability (Art. 20 GDPR): Right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent (Art. 7(3) GDPR): Right to revoke previously granted consent at any time with future effect.
  • Right to Lodge a Complaint (Art. 77 GDPR): Right to lodge a complaint with a data protection supervisory authority.

Right to Object (Art. 21 GDPR)

Sofern Ihre personenbezogenen Daten auf Grundlage von berechtigten Interessen gemäß Art. 6 Abs. 1 lit. f DSGVO verarbeitet werden, haben Sie das Recht, Widerspruch einzulegen:

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.

To exercise your right of withdrawal or objection, an email to wlarsen@shadangayoga.com is sufficient.

9. Storage Duration of Personal Data

The retention period for personal data is determined by the respective legal basis, processing purpose, and statutory retention obligations (e.g., commercial and tax retention periods of up to 10 years for order and invoice data under German law). Upon expiration of these periods, data is routinely deleted unless required for contract performance or initiation.

Save to list