Privacy Policy

1. Data Controller

Pursuant to Art. 13 of the EU Regulation 2016/679 (GDPR), we inform you that the Data Controller for personal data collected through this website is:

2. Types of Data Collected

The personal data collected by Bliss Yoga's website, either independently or through third parties, includes:

• Contact and identifying data: First name, last name, email address, phone number provided voluntarily via booking forms or direct WhatsApp redirection.
• Usage and technical data: IP address, usage data, browser type, connection time, and operating system parameters (collected in an anonymous and aggregated form).
• Sensitive / health data: When booking yoga retreats or vacations, you may be asked for details about dietary intolerances or specific physical conditions, solely to ensure your safety. This data is processed only with your explicit consent.

3. Purposes of Data Processing

Your personal data is processed for the following purposes:

1. Booking and Registration Management: To process registrations for retreats, yoga vacations, workshops, or events organized by Bliss Yoga APS.
2. Responding to Contact Requests: To answer emails or messages sent voluntarily by users via email or WhatsApp.
3. Administrative and Legal Compliance: To comply with administrative, insurance, tax, and legal obligations related to our non-profit association (APS) status and core institutional activities.
4. Statistics and Optimization: To analyze website visits in an aggregated and completely anonymous way to improve navigation and user experience.

4. Legal Basis of Processing

Bliss Yoga APS processes your personal data based on the following conditions:

• Performance of a contract or pre-contractual measures: When processing is necessary to provide the booking service or to respond to your information request.
• Your consent: For processing sensitive data (e.g., food allergies for retreats) or enabling non-essential cookies.
• Compliance with a legal obligation: When processing is required by current civil, tax, or Italian non-profit sector (Third Sector) laws.

5. Data Retention Period

Personal data is processed and stored for as long as strictly necessary to fulfill the purposes for which it was collected:

• Contact data linked to general inquiries is kept for a maximum of 12 months after the inquiry is resolved.
• Data related to registrations for retreats, events, or regular courses is stored for the period required by administrative, accounting, and insurance laws (typically 10 years).

6. Your Rights

As a data subject, you have the right to exercise your GDPR rights at any time (Arts. 15-22):

• Request access to your personal data and receive a copy of it.
• Obtain the rectification of inaccurate data or complete incomplete data.
• Obtain the erasure of your data (right to be forgotten) when there are no longer any legal retention requirements.
• Request the restriction of processing or object to the processing itself.
• Request the portability of your data in a structured, readable format.
• Withdraw your consent at any time.

To exercise these rights, please send a written request to: blissgrosseto@gmail.com. You also have the right to lodge a complaint with the competent Data Protection Authority (for Italy, the Garante della Privacy: www.garanteprivacy.it).