Legal
Privacy Policy
Last updated: 1 August 2026
Duna Yoga respects your privacy. This page explains, in plain language, what personal data we collect, why we need it, and the rights you have under the GDPR.
1. Who we are
Duna Yoga, Duinstraat 12, 1015 KL Amsterdam, The Netherlands, is the controller of the personal data described on this page. You can reach us at hello@dunayoga.nl or +31 20 123 45 67.
2. What we collect
Contact details you give us — name, email address and, if you share it, your phone number — when you book a class, buy a pass or send us a message.
Booking and payment records, such as which classes you attended and which pass you used. Card details are handled by our payment provider and never stored by us.
Health information you choose to share with a teacher (for example an injury or pregnancy) so we can adapt a class safely.
Basic technical data from this website, such as pages viewed and approximate region, in aggregated form.
3. Why we use it
To manage your bookings, memberships and payments — the legal basis is performance of our agreement with you.
To keep you safe in class and to answer your questions — based on your consent, which you can withdraw at any time.
To comply with Dutch bookkeeping and tax obligations — a legal obligation.
We send a studio newsletter only if you explicitly opt in, and every email contains a one-click unsubscribe link.
4. Sharing your data
We share data only with processors that help us run the studio: our booking platform, payment provider, email provider and accountant. Each is bound by a processing agreement and may only use your data on our instructions.
We never sell your personal data, and we do not share it for advertising purposes.
5. How long we keep it
Booking and account data is kept while your account is active and for two years afterwards. Invoices and financial records are kept for seven years, as Dutch tax law requires. Health notes are deleted as soon as they are no longer relevant, and at the latest when your account closes.
6. Cookies
This website uses functional cookies only — they remember your language and theme preference. We set no advertising or third-party tracking cookies, so no cookie banner is needed.
7. Your rights
You may ask us for a copy of your data, correct it, delete it, restrict or object to its use, or receive it in a portable format. Email hello@dunayoga.nl and we will respond within one month.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Security
Data is transmitted over encrypted connections and stored with access limited to the people who need it to run the studio. If a data breach ever affects your rights, we will inform you and the supervisory authority without undue delay.