Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Andreas Kunze, Yogamanufaktur, Erbsengäßchen 4, 91541 Rothenburg ob der Tauber, Germany, Phone: 0 98 61 - 967 54 88, Email: info@yogamanufaktur.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

When you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website you visited
Date and time of access
Amount of data sent, in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (where applicable, in anonymised form)

Processing takes place in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. Your data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

3) Hosting & Content Delivery Network

For the hosting of our website and the display of its content, we use a provider that supplies its services, either itself or through selected sub-contractors, exclusively from servers located within the European Union.

All data collected on our website is processed on these servers.

We have entered into a data processing agreement with this provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4) Contacting Us

When you contact us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and responding to your enquiry, and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once it is apparent from the circumstances that the matter in question has been conclusively resolved, and provided no statutory retention obligations apply.

5) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required to open an account can be found in the input fields of the relevant form on our website.

Your customer account can be deleted at any time by sending a message to the controller's address given above. After your customer account has been deleted, your data will be erased, provided all contracts concluded via the account have been fully processed, no statutory retention periods conflict with this, and we no longer have a legitimate interest in continued storage.

6) Use of Customer Data for Direct Marketing

6.1 Signing Up for Our Email Newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing any further data is voluntary and is used to personalise our communication with you. We use the so-called double opt-in procedure for sending our newsletter, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receiving it by clicking a verification link sent to the email address provided.

By clicking the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your Internet service provider (ISP), as well as the date and time of registration, so that any potential misuse of your email address can be traced at a later date. The data collected when you sign up for the newsletter is used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter itself, or by sending a corresponding message to the controller named at the beginning of this policy. Once you unsubscribe, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data, or we reserve the right to any further use of data that is legally permitted and about which we inform you in this policy.

6.2 Sending the Email Newsletter to Existing Customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for goods or services similar to those already purchased from our range. Under Section 7(3) of the German Act Against Unfair Competition (UWG), we are not required to obtain separate consent from you for this. In this respect, data processing is based solely on our legitimate interest in personalised direct marketing pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any such emails.

You have the right to object at any time, with effect for the future, to the use of your email address for the advertising purpose described above by notifying the controller named at the beginning of this policy. Doing so will only incur transmission costs based on standard rates. Once we receive your objection, we will stop using your email address for advertising purposes without delay.

6.3 Brevo

Our email newsletters and other promotional email communications are sent via the following provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

Based on our legitimate interest in effective and user-friendly email marketing, we disclose the data you provided when signing up to this provider in accordance with Art. 6(1)(f) GDPR, so that it can carry out the sending of emails on our behalf.

We further reserve the right, solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, to carry out a statistical evaluation of the success of email campaigns using web beacons or tracking pixels embedded in the emails sent, which can measure open rates and specific interactions with the newsletter content. In doing so, device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but is not combined with other data.

You may withdraw your consent to email tracking at any time, with effect for the future.

We have entered into a data processing agreement with this provider, which protects our website visitors' data and prohibits disclosure to third parties.

7) Data Processing for Order Fulfilment

7.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect is disclosed to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

Where we owe you updates for goods with digital elements or for digital products under a corresponding contract, we process the contact details you provided when ordering in order to inform you personally as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for this purpose, i.e. for communications about updates owed by us, and are processed by us only to the extent required for the relevant information.

We further work with the service provider(s) listed below to fulfil your order, who assist us fully or in part with the performance of concluded contracts. Certain personal data is disclosed to these service providers in accordance with the information set out below.

7.2 Disclosure of Personal Data to Shipping Service Providers

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We disclose your email address and/or telephone number to this provider prior to delivery of the goods, for the purpose of coordinating a delivery date or providing delivery notifications, in accordance with Art. 6(1)(a) GDPR, provided you gave your express consent to this during the ordering process. Otherwise, for delivery purposes, we only disclose the recipient's name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. Disclosure only takes place to the extent necessary for delivery of the goods. In this case, it is not possible to coordinate a delivery date with the provider in advance or to receive delivery notifications.

Consent can be withdrawn at any time, with effect for the future, either to the controller named above or to the provider.

7.3 Use of Payment Service Providers

PayPal

One or more online payment methods offered by the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method offered by this provider for which we render performance in advance, your payment data provided during the ordering process (including name, address, bank and card details, currency, and transaction number), as well as information about the content of your order, will be disclosed to this provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is disclosed solely for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.

If you select a payment method for which we render performance in advance, you will also be asked during the ordering process to provide certain personal details (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, and, where applicable, details of an alternative means of payment).

In such cases, to safeguard our legitimate interest in assessing your creditworthiness, this data is forwarded by us to the provider for the purpose of a credit check, in accordance with Art. 6(1)(f) GDPR. Based on the personal data you provide, along with further data (such as shopping basket contents, invoice amount, order history, and payment experience), the provider assesses whether the payment method you selected can be granted, taking into account payment and default risk.

The credit report may contain probability values (so-called score values). Where score values form part of the credit report's outcome, they are based on a scientifically recognised mathematical-statistical procedure. Among other factors, address data is used, but not exclusively, in the calculation of score values.

You may object to this processing of your data at any time by contacting us or the provider directly. However, the provider may remain entitled to process your personal data where this is necessary for the contractual processing of payment.

7.4 Electronic Withdrawal Function for Distance Contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal via an electronic withdrawal function, in accordance with the applicable withdrawal provisions.

When using the withdrawal function, in addition to details identifying the contract to be withdrawn from, further personal information such as the consumer's first and last name and email address must be provided or confirmed.

The collection of this information and its transmission to us takes place in accordance with Art. 6(1)(b) GDPR, and only to the extent necessary for the proper processing of the withdrawal. The personal data provided is likewise used, on the basis of Art. 6(1)(b) GDPR, to confirm receipt of the withdrawal declaration by email. A further legal basis for the processing is Art. 6(1)(c) GDPR. We are legally required to provide an electronic withdrawal function for chargeable consumer distance contracts.

8) Website Functionalities

8.1 Facebook Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interaction with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "two-click" or "Shariff" solution. This integration ensures that when you access a page of our website containing such plugins, no connection is made to the provider's servers at that point. Only once you activate the plugins, thereby giving your consent to the data transfer in accordance with Art. 6(1)(a) GDPR, does your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged into an existing user profile, certain information about the device you are using (including your IP address), your browser, and your browsing history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.

You can withdraw your consent at any time by deactivating the activated plugin again, by clicking on it once more. However, withdrawal has no effect on data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with this provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

8.2 Instagram Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interaction with content on the social network.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with this provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

8.3 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA

When you access a page of our website containing such a plugin, your browser establishes a direct connection to the provider's servers, at the latest when the video is played, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.

If playback of an embedded video is started via the plugin, the provider also sets cookies to collect information about user behaviour, compile playback statistics, and prevent fraudulent use.

If you are logged into a user account with the provider while visiting our website, your data will be directly linked to your account when you click on a video. If you do not wish this data to be linked to your account, you must log out before clicking the playback button.

All the aforementioned processing operations, in particular the setting of cookies to read information stored on the device you are using, only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time, with effect for the future, by deactivating this service via the "cookie consent tool" provided on the website.

8.4 Google Customer Reviews (formerly the Google Trusted Store Programme)

We work together with Google as part of the "Google Customer Reviews" programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This programme enables us to collect customer reviews from users of our website.

In this context, after using our services, you will be asked on our website whether you would like to take part in an email survey conducted by Google.

If you give your consent in accordance with Art. 6(1)(a) GDPR, we will forward your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. Your rating will then be combined with our other ratings and displayed in our Google Customer Reviews badge as well as in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. In connection with the use of Google Customer Reviews, personal data may also be transmitted to Google LLC's servers in the USA.

You can withdraw your consent at any time by contacting the controller responsible for data processing or by contacting Google directly.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

9) Data Subject Rights

9.1 Applicable data protection law grants you the following rights (rights of access and intervention) with respect to the controller regarding the processing of your personal data; the specific requirements for exercising these rights are set out in the legal basis referenced in each case:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

WHERE YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing, and, where applicable, any relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data is routinely deleted once the retention period has expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, such data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 12.08.2026, 09:44:44