Privacy policy

JIVAMUKTI YOGA LUXEMBOURG

PRIVACY POLICY

Last updated: 30 October 2026

1. INTRODUCTION

At Jivamukti Yoga Luxembourg, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, register for yoga classes, purchase class packages or memberships, attend workshops, subscribe to our newsletter, or otherwise interact with us.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Luxembourg data protection laws.

This Privacy Policy applies to personal data processed by Jivamukti Yoga Luxembourg in connection with the services and activities it provides directly.

2. DATA CONTROLLER

The organisation responsible for the processing of your personal data is:

Jivamukti Yoga Luxembourg
65, Avenue de la Faïencerie
L-1510 Luxembourg
Luxembourg

VAT No.: LU28689851

Website: www.jivamuktiyogaluxembourg.com
Email: info@jivamuktiyogaluxembourg.com

For any questions concerning this Privacy Policy or the processing of your personal data, please contact us using the email address above.

3. PERSONAL DATA WE COLLECT

Depending on how you interact with Jivamukti Yoga Luxembourg, we may collect and process the following categories of personal data.

3.1. Personal Identification and Contact Information

This may include:

  • First and last name
  • Email address
  • Telephone number
  • Postal address, where necessary
  • Information voluntarily provided when creating an account, making a booking, or contacting us

3.2. Booking, Attendance, and Membership Information

This may include:

  • Customer account information
  • Class reservations
  • Attendance history
  • Class package purchases and usage
  • Membership details and validity periods
  • Workshop registrations
  • Booking cancellations
  • Relevant transaction and account history

3.3. Payment and Transaction Information

We process information necessary to manage purchases, payments, invoices, refunds, and other financial transactions.

Payments may be processed through third-party payment service providers.

We do not require students to provide payment card information directly by email.

Payment information is handled in accordance with the applicable security and data protection requirements of the relevant payment providers.

3.4. Communications

We may process and retain communications sent to us by email, through our website, or through our booking platform where necessary to respond to enquiries, manage bookings, provide services, or maintain appropriate administrative records.

3.5. Health-Related Information

Students may voluntarily inform their yoga teacher about injuries, pregnancy, or other physical conditions relevant to safe participation in yoga classes.

In certain circumstances, Jivamukti Yoga Luxembourg may request appropriate medical documentation to assess a request for membership suspension or class package extension.

Medical certificates are reviewed solely for the purpose of assessing the relevant request and are not retained by Jivamukti Yoga Luxembourg.

We do not require students to disclose detailed medical diagnoses.

Any health-related personal data is processed only where an appropriate legal basis and an applicable condition under Article 9 of the GDPR are established.

3.6. Website and Technical Information

When you visit our website, certain technical information may be processed, including:

  • IP address
  • Browser type
  • Device information
  • Information necessary for website functionality and security

Additional information may be collected through cookies or similar technologies, depending on the website’s configuration and your applicable cookie preferences.

4. PURPOSES OF PERSONAL DATA PROCESSING

Jivamukti Yoga Luxembourg processes personal data for the following purposes.

4.1. Providing Yoga Services

To create and manage customer accounts, process class bookings, administer memberships and class packages, register participants for workshops, and provide the services requested by students.

4.2. Managing Payments and Transactions

To process payments, purchases, refunds, invoices, and other financial transactions.

4.3. Communicating With Students

To respond to enquiries and provide information relevant to class bookings, membership administration, class cancellations, schedule changes, and other service-related matters.

4.4. Marketing and Newsletters

To communicate information about studio activities, workshops, events, special offers, and other yoga-related services where permitted by applicable law.

4.5. Legal and Administrative Obligations

To comply with applicable accounting, tax, regulatory, and other legal requirements.

4.6. Website Functionality and Security

To maintain the functionality, security, and proper operation of our website and related services.

5. LEGAL BASIS FOR PROCESSING

We process personal data only where an appropriate legal basis exists under the GDPR.

Depending on the purpose of processing, the legal basis may include the following.

5.1. Performance of a Contract – Article 6(1)(b) GDPR

Where processing is necessary to provide services requested or purchased by students, including class bookings, memberships, class packages, and payments.

5.2. Legal Obligations – Article 6(1)(c) GDPR

Where processing is necessary to comply with applicable legal obligations, including accounting and tax requirements.

5.3. Legitimate Interests – Article 6(1)(f) GDPR

Where processing is necessary for legitimate business purposes, such as responding to customer enquiries, maintaining the security of our systems, preventing fraud, and managing our services, provided that these interests are not overridden by the rights and freedoms of the individuals concerned.

5.4. Consent – Article 6(1)(a) GDPR

Where consent is required, including certain marketing communications and the use of non-essential cookies.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

5.5. Special Categories of Personal Data

Where health-related personal data is processed, an additional condition under Article 9 of the GDPR must apply.

We seek to minimise the collection and processing of such information.

6. BOOKING AND PAYMENT PLATFORM – MINDBODY

Jivamukti Yoga Luxembourg uses Mindbody to manage its yoga studio services.

Mindbody supports activities including:

  • Customer registration and account management
  • Class reservations
  • Attendance records
  • Membership and class package administration
  • Payments and transactions
  • Booking confirmations
  • Service-related communications

Personal data entered into Mindbody may be processed by Mindbody in connection with the provision of these services.

We seek to ensure that appropriate contractual and data protection safeguards apply to personal data processed by our service providers.

Students may also consult Mindbody’s own privacy information for further details about its data processing activities.

7. NEWSLETTER AND MARKETING COMMUNICATIONS – MAILCHIMP

Jivamukti Yoga Luxembourg uses Mailchimp to manage and distribute newsletters and marketing communications.

These communications may include:

  • Studio news and announcements
  • Upcoming workshops and events
  • Special offers and promotions
  • Information about our yoga activities and services

Customer contact information may be manually exported from Mindbody and imported into Mailchimp for marketing purposes, where permitted by applicable law.

We process personal data for marketing purposes only where an appropriate legal basis exists.

Where required by applicable law, we obtain consent before sending marketing communications.

Where applicable law permits us to contact existing customers regarding similar products or services without separate consent, we rely on this possibility only where the relevant legal conditions are satisfied, including providing appropriate opportunities to object.

Recipients may unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting:

info@jivamuktiyogaluxembourg.com

Once a recipient has unsubscribed, their decision is respected, and they will not be re-subscribed through subsequent manual contact imports.

Unsubscribing from marketing communications does not affect essential communications relating to existing bookings, memberships, payments, or other services.

8. SHARING PERSONAL DATA WITH THIRD PARTIES

Jivamukti Yoga Luxembourg does not sell personal data.

We may share personal data with third-party service providers where necessary for the operation of our services or where otherwise permitted or required by law.

These providers may include:

  • Booking and membership management providers, including Mindbody
  • Payment processing providers
  • Newsletter and email communication providers, including Mailchimp
  • Website hosting and technical service providers
  • Professional advisers, where necessary
  • Public authorities, where disclosure is required by law

We share only the personal data reasonably necessary for the relevant purpose.

Where service providers process personal data on our behalf, we seek to ensure that appropriate contractual and data protection safeguards are in place.

Personal data may also be disclosed where required by applicable law or where necessary to establish, exercise, or defend legal claims.

9. INTERNATIONAL DATA TRANSFERS

Some of the third-party service providers used by Jivamukti Yoga Luxembourg may process or store personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we seek to ensure that the transfer complies with applicable GDPR requirements.

Depending on the circumstances, international transfers may be based on:

  • An adequacy decision adopted by the European Commission
  • Appropriate safeguards, such as Standard Contractual Clauses
  • Another lawful transfer mechanism recognised under the GDPR

Information regarding applicable international data transfer safeguards may be requested by contacting us.

10. DATA RETENTION

Jivamukti Yoga Luxembourg retains personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

Retention periods depend on the type of personal data and the purpose of processing.

10.1. Customer Accounts and Booking Information

Customer account information, booking records, and membership details are retained as necessary for the administration of our services and customer relationships.

Accounts that are no longer actively used may be marked as inactive within Mindbody.

An inactive account does not necessarily mean that the associated personal data has been deleted.

Personal data will not be retained longer than necessary for the relevant purposes, taking into account applicable legal obligations and any legitimate need to retain records.

10.2. Financial and Accounting Information

Payment, transaction, and accounting records are retained for the periods required by applicable Luxembourg law.

10.3. Marketing Information

Marketing contact information is retained while there is an appropriate legal basis and a continuing purpose for its processing.

Where a recipient unsubscribes, the information necessary to respect that decision may be retained to prevent unwanted future communications.

10.4. Medical Certificates

Medical certificates provided in connection with requests for membership suspension or class package extension are reviewed for the relevant purpose and are not retained by Jivamukti Yoga Luxembourg.

10.5. Deletion Requests

Individuals may request the deletion of their personal data, subject to applicable legal exceptions.

Such requests may be submitted to:

info@jivamuktiyogaluxembourg.com

11. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies to support website functionality, security, and user experience.

Cookies are small files or identifiers that may be stored on or accessed through your device when you visit a website.

Depending on the website’s configuration, cookies may include the following categories.

11.1. Strictly Necessary Cookies

These cookies are required for essential website functions, such as security, navigation, and the operation of certain website features.

Where the applicable legal exemption applies, strictly necessary cookies do not require prior consent.

11.2. Analytics Cookies

Analytics cookies may be used to understand how visitors interact with the website and to improve its performance.

11.3. Marketing Cookies

Marketing cookies may be used to support advertising activities or measure the effectiveness of marketing campaigns.

Where required by applicable law, non-essential cookies and similar technologies will only be used after obtaining the visitor’s consent.

Visitors must be able to refuse or withdraw consent as easily as they provide it.

Information about the cookies actually used on the website, including their purposes, providers, and retention periods, should be made available through the website’s cookie information and consent management tools.

12. YOUR RIGHTS UNDER THE GDPR

Subject to the conditions and limitations established by applicable law, you have the following rights regarding your personal data.

12.1. Right of Access

You may request confirmation of whether we process your personal data and obtain access to that information.

12.2. Right to Rectification

You may request correction of inaccurate or incomplete personal data.

12.3. Right to Erasure

You may request deletion of your personal data where the applicable legal conditions are met.

12.4. Right to Restriction of Processing

You may request that the processing of your personal data be restricted in certain circumstances.

12.5. Right to Data Portability

Where applicable, you may request to receive your personal data in a structured, commonly used, and machine-readable format.

12.6. Right to Object

You may object to certain processing activities, including processing based on legitimate interests.

You may object to the processing of your personal data for direct marketing purposes at any time.

12.7. Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12.8. Automated Decision-Making

Where applicable, you have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

12.9. Exercising Your Rights

To exercise any of these rights, please contact:

info@jivamuktiyogaluxembourg.com

We will respond to requests in accordance with the time limits and requirements established by the GDPR.

We may request appropriate information to verify your identity before processing a request.

13. DATA SECURITY

Jivamukti Yoga Luxembourg takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

We seek to ensure that personal data is accessible only to authorised persons who require access for legitimate purposes.

We also take reasonable steps to select service providers that implement appropriate data protection and security measures.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

14. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services.

These websites operate independently and may have their own privacy policies and data processing practices.

Jivamukti Yoga Luxembourg is not responsible for the independent privacy practices of third-party websites.

We encourage visitors to review the relevant privacy information before submitting personal data to external services.

15. COMPLAINTS AND SUPERVISORY AUTHORITY

If you have concerns about how your personal data is processed, we encourage you to contact us so that we can review your request.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Luxembourg, the supervisory authority is:

Commission nationale pour la protection des données (CNPD)

Website: cnpd.public.lu

This right is without prejudice to any other administrative or judicial remedy available under applicable law.

16. CHANGES TO THIS PRIVACY POLICY

Jivamukti Yoga Luxembourg may update this Privacy Policy to reflect changes in its activities, services, technology, or applicable legal requirements.

The latest version will be made available on our website.

Where required by law, we will provide additional notice or obtain consent before introducing new processing activities.

17. CONTACT INFORMATION

For questions about this Privacy Policy or the processing of personal data, please contact:

JIVAMUKTI YOGA LUXEMBOURG

65, Avenue de la Faïencerie
L-1510 Luxembourg
Luxembourg

Email: info@jivamuktiyogaluxembourg.com

Website: www.jivamuktiyogaluxembourg.com


END OF PRIVACY POLICY