Responsible Person

Website Owner: Michelle Novak
Email: minovayoga@gmail.com

Comments

 When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

This website uses cookies to enhance your browsing experience and to provide certain functionalities. Cookies are small text files stored on your device that help improve the functionality and usability of the site. By using this website, you consent to the use of cookies.

Types of Cookies Used

• Comment Cookies:
  If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

• Login Cookies:
  If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
  When you log in, we will also set up several cookies to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. When you log out of your account, the login cookies will be removed.

• Editor Cookies:
  If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

Managing Cookies
You can disable cookies through your browser settings. However, some features of this website may not function properly if cookies are disabled.

Embedded content from other websites

 Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

What Data is Collected?

We collect the following personal data:

Contact Information

When you submit a message via the contact form (powered by MetForm), we collect your name, email address, and any additional information you provide in the form.

Payment Information

When you purchase courses or services, payment data (e.g., card details) is collected by the third-party payment provider Stripe. This website does not store payment details.

Course Interaction Data

Data related to your interaction with the online courses, such as progress and completion, is collected via LifterLMS.

Device and Browser Data

When you visit the website, basic information about your device, browser, and IP address is collected for functionality and security purposes.

How is the Data Processed

• Data submitted through the contact form is stored locally on our server and used only to respond to your inquiries.
• Payment data is securely processed by Stripe; this website does not retain sensitive payment information.
• Course-related data is stored within the LifterLMS system to manage your access and progress.

Third-Party Services

Your data may be shared with the following third-party services to provide functionality and improve user experience:

• PayPal: For secure payment processing. PayPal complies with GDPR and stores data outside the EU under Standard Contractual Clauses. PayPal Privacy Policy.
• LifterLMS: To manage online course enrollment, progress, and interaction. LifterLMS does not share your data with external parties. LifterLMS Privacy Policy.
• Instagram and YouTube: Embedded social media content may collect data about your interaction with their platforms. Instagram Privacy Policy | YouTube Privacy Policy.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on the website, I also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law.

What rights you have over your data

Under the GDPR, you have the following rights:

• Right to access your data.
• Right to correct incorrect or incomplete data.
• Right to request the deletion of your data.
• Right to restrict data processing.
• Right to data portability.
• Right to object to the processing of your data.

To exercise these rights, please contact me at michellenovak@gmx.de.

Data Retention

Personal data submitted via the contact form will be retained for 6 months after your inquiry is resolved. Course-related data is retained for as long as your account remains active. Payment data is not stored by this website.

Data Transfers to Third Countries

Data processed by Stripe, Instagram, and YouTube may be stored outside the EU. These providers comply with GDPR through mechanisms like Standard Contractual Clauses.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

Where your data is sent

Visitor comments may be checked through an automated spam detection service.me

Updates to this Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page.

Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact Michelle Novak at minovayoga@gmail.com