At INEA•YOGA, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under the General Data Protection Regulation (GDPR).

1. WHO WE ARE

ineayoga (Brand name)

Athina Tamaresi

Yoga & Psychology AFM 140334372

Souliou 15, 49100 Corfu, Greece

Mina Andriana & Co G.P.

AFM: 802436235

St. George Agyrades,

49080 Corfu, Greece

Email: move@ineayoga.com

INEA•YOGA is responsible for processing your personal data.

2. WHAT DATA WE COLLECT

Depending on how you interact with us, we may collect the following information:

Contact information: Your name, email address, telephone number and postal address.

Booking information: Information necessary to manage your retreat, teacher training or other booking, including dates, accommodation preferences and payment or transaction information.

Personal information you provide to us: Information such as your date of birth and any other information you voluntarily provide when completing a booking form, contacting us or participating in one of our programmes.

Communication data: Information contained in emails, contact forms and other communications with us.

Marketing information: Your preferences regarding newsletters, retreat updates and other marketing communications.

Technical and website data: Depending on your cookie preferences, we may collect information about how you use our website, such as your device, browser, IP address and interactions with our website.

We only collect personal data that is reasonably necessary for the purposes described in this Privacy Policy.

3. How and Why We Use Your Personal Data

We may process your personal data for the following purposes:

To respond to enquiries: We use your contact details and the information contained in your message to answer questions and communicate with you.

To manage bookings and provide our services: We process the information necessary to confirm and administer your booking, communicate important information about your stay or programme and provide the services you have requested.

To process payments and meet accounting obligations: Relevant booking and transaction information may be processed to administer payments, issue invoices and comply with tax, accounting and other legal obligations.

To send newsletters and marketing communications: Where you have subscribed to our newsletter, requested promotional information or otherwise provided valid consent, we may send you information about retreats, courses, events and special offers.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us.

To operate and improve our website and services: We may process limited technical and usage information to maintain our website, understand how our services are used, prevent misuse and improve the experience we provide.

4. LEGAL BASIS FOR PROCESSING

Under the GDPR, we rely on different legal bases depending on why we process your information.

These may include:

Contract: Processing that is necessary to take steps at your request before a booking or to fulfil a booking or other agreement with you.

Consent: For example, where you choose to subscribe to marketing communications or consent to optional cookies or similar technologies.

Legal obligation: Where we need to retain or process information to comply with tax, accounting or other legal requirements.

Legitimate interests: Where processing is reasonably necessary for operating, protecting or improving our business and services, provided that these interests do not override your rights and freedoms.

Where processing is based on consent, you may withdraw your consent at any time.

5. Email marketing

If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may send you occasional emails about retreats, teacher trainings, events, courses and other ineayoga offerings.

You can unsubscribe at any time using the unsubscribe link contained in our emails.

Unsubscribing from marketing does not prevent us from sending you necessary communications relating to an existing booking or service you have requested.

6. Sharing your personal data

We do not sell or rent your personal data.

We may share personal data with trusted service providers where this is necessary to operate our business and provide our services. These may include:

• website and hosting providers
• booking and customer management providers
• payment processors
• email and communication providers
• analytics and technology providers
• professional advisers, accountants or other providers where necessary
• public authorities where disclosure is required by law

These providers may process personal data only for the relevant purposes and subject to applicable data protection requirements.

Circle / PRACTICE NOW

Our PRACTICE NOW community and digital platform are hosted using services provided by CircleCo, Inc. When you create an account or use PRACTICE NOW, information such as your name, email address, profile information, content you post, messages and information about your use of the platform may be processed through Circle. Circle processes certain personal data on our behalf as a service provider and may process certain information independently for its own purposes, as described in Circle's Privacy Policy.

7. International Data Transfers

Some of the service providers we use may process or store personal data outside Greece or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we take appropriate steps to ensure that the transfer is protected in accordance with the GDPR, for example through an adequacy decision or appropriate contractual safeguards where required.

8. Cookies and Website Technologies

Our website may use cookies and similar technologies that are necessary for the website to function.

We may also use optional analytics or marketing technologies. Where consent is required, these technologies are used only in accordance with your cookie preferences.

You can manage or withdraw your cookie preferences through the cookie settings available on our website.

For more information, please see our Cookie Policy or cookie settings.

9. How Long We Keep Your Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.

The applicable retention period depends on the type of information and may include:

• enquiry and communication records for as long as reasonably necessary to manage the enquiry and related correspondence
• booking and transaction records for the duration necessary to provide the service and meet applicable tax, accounting and legal obligations
• marketing information until you withdraw your consent or unsubscribe, subject to limited records we may retain to respect your preference
• technical information according to the applicable cookie or technology retention period

We may retain certain information for longer where required by law or where reasonably necessary to establish, exercise or defend legal claims.

10. How We Protect Your Data

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access to personal information is limited to people and service providers who reasonably need it for the purposes described in this Privacy Policy.

11. Your Rights

Under the GDPR, depending on the circumstances, you may have the right to:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete information
• request deletion of your personal data
• request restriction of processing
• object to certain processing
• withdraw consent at any time where processing is based on consent
• request portability of certain personal data
• lodge a complaint with a competent data protection supervisory authority

To exercise your rights or ask a question about your personal data, contact:

move@ineayoga.com

We will respond in accordance with the time limits required by applicable data protection law.

12. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority or, where applicable, another competent supervisory authority.

Hellenic Data Protection Authority
Kifisias 1 to 3
115 23 Athens
Greece

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal requirements.

The current version will always be published on this page together with the date of the latest update.