1. GENERAL INFORMATION ON DATA PROCESSING

Planet Yoga AG (hereinafter also “we”, “us”) obtains and processes personal data concerning you or other persons (so-called “third parties”). We use the term “data” here synonymously with “personal data”.

We are aware that the protection and careful handling of users’ personal data is very important. As data protection is a high priority at Planet Yoga AG, we strictly comply with the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Federal Act on Data Protection (“FADP”) and the revised Swiss Federal Act on Data Protection (“revFADP”) when using this data. Whether and to what extent these laws apply, however, depends on the individual case.

In this privacy policy, we describe what we do with your data when you use planetyoga.ch (hereinafter “website”), obtain our services or products, are otherwise connected with us under a contract, communicate with us or otherwise deal with us. Where appropriate, we will inform you in good time in writing about additional processing activities not mentioned in this privacy policy.

If you transmit or disclose data about other persons to us, we assume that you are authorised to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also make sure that these third parties have been informed about this privacy policy.

​

2. RESPONSIBILITY

Planet Yoga AG (CHE-112.005.915), based in Zurich, is responsible under data protection law for the data processing by Planet Yoga AG described in this privacy policy, unless otherwise communicated in individual cases.

You can reach us for your data protection concerns and to exercise your rights as follows:

Planet Yoga AG

Rüdigerstrasse 15

CH-8045 Zurich

office@planetyoga.ch

Managing Director: Bettina Walter

UID: CHE-112.005.915

​

3. DATA SECURITY

During your visit to our website, we use the widespread TLS encryption method (https) in combination with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or padlock symbol in the address bar of your browser.

In addition, we use other appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

​

4. SCOPE AND PURPOSE OF THE PROCESSING OF PERSONAL DATA

4.1. Visitor and usage data

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

Information about the browser type and version used

The user’s operating system

The user’s internet service provider

The user’s IP address

Date and time of access

Websites from which the user’s system reaches our website

4.2. Web analytics data

We analyse the use of our website with the web analytics tool Google Analytics 4 and with Google Tag Manager. This serves solely to improve the website in terms of usability and to provide useful information about our services. This data is not combined with other personal data sources or passed on to third parties.

No personal evaluation takes place. The analyses are based on anonymised data sets.

​

FURTHER INFORMATION:

Google Analytics 4: We use Google Analytics to measure and analyse the use of our website on the basis of a pseudonymous user identification number. This identification number does not contain any unique data such as names or email addresses. It is used to assign analytics information to a device in order to recognise which content users have accessed within one or several sessions, which search terms they have used, whether they have accessed it again or interacted with our website. The time and duration of use are also stored, as well as the sources that referred users to our website and technical aspects of their devices and browsers. Pseudonymous user profiles are created with information from the use of different devices, and cookies may be used for this. Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides approximate geographical location data by deriving the following metadata from IP addresses: city (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based counterparts). For EU traffic, IP address data is used solely for this derivation of geolocation data before being deleted immediately. It is not logged, not accessible and not used for any other purpose. When Google Analytics collects measurement data, all IP lookups are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; legal basis: legitimate interests (Art. 6(1)(f) GDPR); website: https://marketingplatform.google.com/intl/en/about/analytics/; privacy policy: https://policies.google.com/privacy; data processing terms: https://business.safety.google/adsprocessorterms/; basis for transfers to third countries: EU-US Data Privacy Framework (DPF), standard contractual clauses (https://business.safety.google/adsprocessorterms); right to object (opt-out): opt-out browser add-on: https://tools.google.com/dlpage/gaoptout, ad settings: https://adssettings.google.com/authenticated. Further information: https://privacy.google.com/businesses/adsservices(types of processing and data processed).

​

Google Tag Manager: Google Tag Manager is a solution that allows us to manage website tags through one interface and thus integrate other services into our website (please see the other information in this privacy policy). The Tag Manager itself (which implements the tags) therefore does not create user profiles or store cookies. Google only receives the user’s IP address, which is necessary to run Google Tag Manager; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; legal basis: consent (Art. 6(1)(a) GDPR); website: https://marketingplatform.google.com; privacy policy: https://policies.google.com/privacy; data processing terms: https://business.safety.google/adsprocessorterms; basis for transfers to third countries: EU-US Data Privacy Framework (DPF), standard contractual clauses (https://business.safety.google/adsprocessorterms).

​

Google Consent Mode: We use Google’s consent mode. It takes into account your choice in the cookie banner. Without your consent, Google Analytics and Google Ads do not set any cookies. In this case, your browser only sends cookieless signals to Google, for example about a page view, the time, the browser and device type, and the status of your consent; for technical reasons, your IP address is also transmitted. These signals do not contain a user identifier. Google uses them in aggregated form to statistically estimate the use of our website and the success of our advertising (modelling). Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; legal basis: legitimate interests (Art. 6(1)(f) GDPR); further information: https://support.google.com/analytics/answer/9976101

​

4.3. Cookies

We use cookies on our website to make our services user-friendly. Cookies are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone etc.) when you visit our website. The cookies remain stored until you delete them. This allows us to recognise your browser on your next visit.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow them in individual cases. Please note, however, that deactivating cookies means that you may not be able to use all the functions of our website.

The legal basis for the data processed by cookies is Art. 6(1)(f) GDPR.

With regard to storage duration, the following types of cookies are distinguished:

Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left a website and closed their device (e.g. browser or mobile application).

Permanent cookies: Permanent cookies remain stored even after the device has been closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. Unless we provide users with explicit information on the type and storage duration of cookies (e.g. when obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.

​

4.4. Communication data

If you are in contact with us via a contact form, by email, telephone, letter or other means of communication, we record the data exchanged between you and us, including your contact details and the metadata of the communication. If we want or need to establish your identity, we collect data to identify you. Emails in personal mailboxes and written correspondence are generally kept for at least 10 years.

​

4.5. Newsletter

If you sign up for our newsletter, we will immediately send an email containing a hyperlink to the email address you provided. By clicking on this link, you confirm your newsletter subscription (double opt-in procedure). If this confirmation does not take place, we delete the email address from our temporary list and no subscription takes place.

If you confirm the newsletter subscription, you consent to the storage of your email address, including the date of registration, IP address and the list name of the newsletter you requested. We use your email address and the personal data collected at the same time only to manage and send the newsletter you requested.

​

Our newsletters do not contain any obvious or hidden counters, third-party advertising or links to external websites that are not directly related to the content of our newsletter.

Each newsletter contains information on how to unsubscribe from the newsletter.

​

FURTHER INFORMATION:

Wix.com, Inc.: https://www.wix.com/about/privacy

4.6. Registration data

Our offers and services can only be used with a user account or a registration on the Eversports platform (“Eversports”). Planet Yoga AG collects and stores any information that the user provides on Eversports and that is transmitted to Planet Yoga in the course of an online booking, or that the user makes available to Planet Yoga in any other way, for example on site. Planet Yoga uses the user’s personal data to the extent permitted by law and otherwise only with the user’s consent. Where consent is given electronically as part of an online booking via Eversports, Eversports complies with the legal information obligations and records this consent using suitable technical systems. Planet Yoga uses the following personal data of the user: name, email address, telephone number, gender, date of birth, profile pictures, place of residence, booking data, existing products etc.

For our online yoga classes, we also use platforms and applications from other providers to hold the classes. When selecting the conference platforms and their services, we comply with the legal requirements.

FURTHER INFORMATION:

Eversports GmbH: https://www.eversports.ch/h/privacy

Zoom Video Communications, Inc.: https://explore.zoom.us/en/privacy

​

4.7. Social plugins and embedded functions and content

We integrate social plugins and functional and content elements into our website that are obtained from the servers of their respective providers.

All integrated social plugins work via the 2-click procedure; this means that the recording of your browsing behaviour by a plugin only starts once you activate the plugin by clicking on it. If, for example, you are logged in to your account on a social media platform at the same time as visiting our website, the page visit can be assigned to your user account after the plugin has been activated (first click).

​

FURTHER INFORMATION:

Adobe Fonts: provision of font files for a user-friendly presentation of our website; service provider. (https://fonts.adobe.com)

Monotype Fonts: provision of font files for a user-friendly presentation of our website; service provider. (https://www.monotype.com)

atipo foundry Fonts: provision of font files for a user-friendly presentation of our website; service provider. (https://www.atipofoundry.com)

Facebook/Meta: https://www.facebook.com/privacy/policy

Instagram: https://help.instagram.com/155833707900388

4.8. Market research and marketing

We use the data you provide solely to improve the user experience and to further develop our products and services. The results consist exclusively of aggregated and anonymous data.

With your registration on Eversports, we may also use your personal data for personalised advertising.

​

4.9. Cloud services

We use software services that are accessible via the internet and run on their providers’ servers (so-called “cloud services”, also known as “software as a service”) to store and manage content (e.g. document storage and management, exchange of documents, content and information with certain recipients or publication of content and information).

In this context, personal data may be processed and stored on the providers’ servers insofar as it is part of communication with us or is otherwise processed by us as set out in this privacy policy. This data may include, in particular, users’ master data and contact details, data on transactions, contracts, other processes and their content. The providers of the cloud services also process usage data and metadata, which they use for security purposes and to optimise their services.

If we use the cloud services to provide forms or other documents and content for other users or publicly accessible websites, the providers may store cookies on users’ devices for web analytics purposes or to remember users’ settings (e.g. in the case of media control).

​

FURTHER INFORMATION:

• Dropbox International Unlimited Company: https://www.dropbox.com/privacy

​

5. DURATION OF DATA STORAGE

We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes require, or as long as storage is technically necessary. If there are no legal or contractual obligations to the contrary, we delete or anonymise your data after the storage or processing period has expired as part of our usual processes.

 

6.TRANSFER OF PERSONAL DATA

In the course of our processing of personal data, the data may be transferred to or disclosed to other bodies, companies, legally independent organisational units or persons. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.

Data transfer within the organisation: We may transfer personal data to other units within our organisation or grant them access to this data. Where this transfer takes place for administrative purposes, it is based on our legitimate business and commercial interests, or takes place if it is necessary to fulfil our contractual obligations or if the data subjects have given their consent or there is a legal permission.

​

7. INTERNATIONAL DATA TRANSFERS

Under the so-called “Data Privacy Framework” (DPF), the EU Commission has also recognised the level of data protection for certain companies from the USA as secure in its adequacy decision of 10 July 2023. You can find the list of certified companies and further information on the DPF on the website of the US Department of Commerce at https://www.dataprivacyframework.gov.

In accordance with the Swiss Federal Act on Data Protection (FADP), we only disclose personal data abroad if adequate protection of the persons concerned is guaranteed (Art. 16 FADP). If the Federal Council has not determined that adequate protection exists (list: https://www.bj.admin.ch/bj/en/home/staat/datenschutz/internationales/anerkennung-staaten.html), we take alternative safety measures. These may include international treaties, specific guarantees, data protection clauses in contracts, standard data protection clauses approved by the Federal Data Protection and Information Commissioner (FDPIC), or binding corporate rules previously recognised by the FDPIC or a competent data protection authority of another country.

According to Art. 16 FADP, exceptions for the disclosure of data abroad may be permitted if certain conditions are met, including the consent of the data subject, the performance of a contract, public interest, the protection of life or physical integrity, data made public, or data from a register provided for by law. These disclosures are always made in accordance with the legal requirements.

​

8. YOUR RIGHTS (RIGHTS OF DATA SUBJECTS)

You have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, data portability, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling.

You also have the right to withdraw any consent you have given to the use of your personal data at any time.

If you believe that the processing of your personal data by us is in breach of the applicable data protection regulations, you can lodge a complaint with the data protection authority.

​

9. CHANGES AND UPDATES TO THIS PRIVACY POLICY

This privacy policy is not part of a contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.

​

Last updated: 28.10.2026