Data protection & cookies

Information on data processing within the meaning of EU Directive No. 679/2016

The company Manna Yoga of Manuela Pedevilla informs you about the nature, scope and purpose of its data processing in accordance with EU Directive No. 679/2016 (hereinafter referred to as GDPR), and with reference to the personal and sensitive data of which it will become aware.

1. controller of the data processing:

The data controller is the company Manna Yoga of Manuela Pedevilla, in the person of the legal representative Manuela Pedevilla, with registered office at Großer Graben 15 Brixen, contact details: +39 349 3577944, hello@manna-yoga.com

.

The person responsible for data processing is Manuela Pedevilla and can be contacted by registered letter to Großer Graben 15 Brixen or by e-mail to manna.yoga@pec.it.

2. types of data processed and data subjects:

The personal data of customers and suppliers are processed, as well as the data of persons who voluntarily communicate their personal data to our company (in person, by telephone, by fax or by e-mail), as well as by registering on our website, as well as persons whose data have been taken over by third parties, for example in the collection of external data for business information, public directories, etc., whereby in the latter case it is also exclusively simple personal data.

3. purpose of data processing :

Data processing is carried out exclusively for the following purposes:

a. Fulfillment of the obligations provided for by applicable regulations and laws, including tax and accounting obligations

b. Fulfillment of contractual obligations towards the data subjects

c. Performing activities related to the business activities of our company, such as compiling internal statistics, accounting, keeping customer and supplier accounts

d. Preparation of an offer

e. Sending newsletters

f. Creation of internal statistics

4. legal basis for data processing:

Data processing is carried out in compliance with legal requirements and is based on the following legal bases in accordance with Art. 6 and 7 GDPR: Data processing is carried out to fulfill the agreed services, to carry out contractual measures and to respond to inquiries, to fulfill legal obligations and to safeguard legitimate interests, as well as on the basis of the consent of the data subjects.

5. modality of data processing :

Data processing may be carried out with or without the aid of electronic, in any case automatic, means and includes the collection, storage, organization, retention, retrieval, processing in the narrower sense, modification, selection, selection, comparison, use, linking, blocking, transmission, deletion and storage of data.

Data processing is carried out both by the data controller and by processors and third parties that the data controller has commissioned to process the data to fulfill the purposes provided for in point 3 or in cases where this is regulated by law. The data controller has ensured that processors and third parties also process personal data in accordance with the GDPR.

If necessary, the data will be passed on to domestic and/or foreign natural and/or legal persons, provided that this serves to carry out the activities and purposes specified under point 3. However, there is no general dissemination of personal data.

Specifically, data processing is carried out with the following modalities:

a. User account:

Personal data is collected during registration and processed for the provision of a user account. As part of the registration and login function, the IP address and the time of the respective user action are also stored.

This data will be deleted immediately after termination of the user account, unless it needs to be retained for tax or accounting purposes.

b. Making contact:

When contacting the company using the contact form, email or social media, the user's details are processed to handle the contact request and process it. The information may be stored in a customer relationship management system or a comparable inquiry organization.

The requests will be deleted as soon as they are no longer required, unless the retention of the data serves to fulfill legal obligations.

c. Newsletter:

It is possible to subscribe to a newsletter on this website. By subscribing to the newsletter, the data subject agrees to receive emails and other electronic notifications containing promotional information. Subscription to the newsletter takes place by purchasing a product, whereby the time of registration and confirmation are saved, as well as the IP address and the necessary personal registration data. You can unsubscribe from the newsletter by contacting the website operator by email. (as above, the deletion must be as quick/easy as the registered letter). From this point in time, the personal data concerned will be deleted, unless their retention is necessary to fulfill legal obligations.

d. GoogleTag Manager:

GoogleTag Manager is a solution with which so-called website tags can be managed via an interface in order to be able to integrate Google marketing services into the online offer and which is used on this website. The TagManager itself does not process any personal data; for more detailed information, please refer to the Google services usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html

e. GoogleAnalytics:

This website uses analysis tools from Google Inc. for marketing and optimization purposes. Data is collected and stored in anonymized form. Google Analytics uses cookies, which are text files that are stored on the computer and that enable an analysis of the use of the website by the person concerned. This data is transferred to a Google server in the USA and stored there. The IP address transmitted by the data subject's browser as part of Google Analytics is not merged with other Google data. In addition, the "anonymizeIP" function is used in the code, which guarantees the masking of the IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The data collected is not used to personally identify the visitor to this website, the individual user remains anonymous and no data is passed on to third parties. Google uses this information to compile various reports on website activity on behalf of the website operator.

In this context, data subjects are informed of the possibility to object by installing the browser plugin for deactivating Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de.

f. Google Adwords and conversion measurement:

This website also uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the Privacy Shield Agreement and guarantees to comply with European data protection law.this website uses the Google Adwords online marketing process to place ads in the Google advertising network so that they are displayed to users who are presumed to be interested in the ads. This makes it possible to display ads for and within the online offer of this website in a more targeted manner in order to present users only with ads that potentially correspond to their interests. For this purpose, when websites on which the Google advertising network is active are called up, Google immediately executes a code from Google and so-called marketing tags are integrated into the website, with the help of which an individual cookie, i.e. a small file, is stored on the user's device. This file records which websites the user visits, what content they are interested in, as well as technical information about the browser and operating system and the time of the visit. Google also uses conversion cookies to compile statistics to determine the total number of users who have viewed the ad, but the users themselves cannot be personally identified; Google only processes cookie-related data within anonymized user profiles, unless a user expressly allows Google to process the data without anonymization. Further information on this can be found in Google's privacy policy (https://policies.google.com/technologies/ads).

g. Twitter:

A Twitter widget is integrated into the customer administration of the website to display tweets from the company's Twitter account. This establishes a connection with Twitter and log data is transmitted to Twitter and a cookie is set on the computer of the data subject. Twitter begins deleting, de-identifying or collecting this data after a maximum of ten days; further information on this can be found in the Twitter privacy policy (https://twitter.com/de/pivacy).

h. Facebook:

Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on this website. The Facebook plugins can be recognized by the Facebook logo or the "Like" button. This plugin establishes a direct connection between the data subject's browser and the Facebook server. Facebook thereby receives the information that the person concerned has visited this website and it is possible to link the content of this website to their own Facebook profile using the "Like button". Further information on this can be found in Facebook's privacy policy (https://de-de.facebook.com/policy.php).

i. Instagram:

Social plugins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025 USA are used on this website. These plugins are marked with an Instagram logo. These plugins establish a direct connection between the data subject's browser and the Instagram server, which is located in the USA, and Instagram receives the information that the data subject has accessed the corresponding page. If the data subject is logged in to Instagram, Instagram can assign the corresponding data directly to the respective account. Further information regarding the purpose and scope of data collection by Instagram, as well as the further processing of the data, can be found in Instagram's privacy policy (https://help.instagram.com/519522125107875?helpref=page_content).

j. Social media presence:

Manna Yoga maintains online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about its own services. When accessing the respective networks, the data protection guidelines of the respective operators apply.

k. Forwarding of data to domain registrars:

For the registration of the respective domains of the data subjects, their data must be forwarded to the respective national and international registries of the domains. Only the absolutely necessary personal data is transferred. The data transmitted to the registrars can be queried and viewed by Internet users. The registries prohibit commercial and improper use.

l. Forwarding of data to certificate issuers:

Personal data is transmitted to the certificate issuer for the issuance of an SSL certificate. Only the absolutely necessary data is transmitted. The data subject consents to this data being transferred automatically to the certificate issuer when the certificate is created.

m. Business analyses and market research:

In order to identify market trends and the wishes of contractual partners and users, the available data on business transactions, inquiries, contracts, etc. are analyzed. This involves processing inventory data, communication data, contract data, payment data, usage data and metadata of contractual partners, interested parties, customers and visitors to the online offering. The analyses are used to increase user-friendliness, optimize the offering and improve business efficiency and are not disclosed externally.

n. Cookies:

When you visit this website, session cookies are generated which are only valid during your visit to the website. It is not possible to evaluate these cookies across domains, as advertising networks do, and the cookies are not used to evaluate user behavior.

6. disclosure of data and refusal of disclosure:

The disclosure of personal data is indispensable for the fulfillment of the purposes provided for in point 3, and any refusal on the part of the data subject to disclose the data will have the consequence that the purposes provided for in point 3 cannot be fulfilled.

7. storage of the data:

Unless expressly stated otherwise in this privacy policy, the processed data will be deleted as soon as it is no longer required for the purposes set out in point 3 and there are no longer any legal obligations to retain it. In general, personal data will not be stored for longer than two years.

If deletion is not possible for legal reasons, data processing will be restricted, i.e. the data will be blocked and not used for other purposes.

8. rights of the data subject:

The GDPR allows the data subject to exercise specific rights:

a. Right of access by the controller to the personal data concerned, as well as to rectification or erasure or restriction of processing, and a right to object to processing;

b. Right to receive their own data from the data controller in a structured and intelligible format, where possible, including for the purpose of transferring the data to another data controller;

c. Right to withdraw consent to data processing at any time, provided that the lawfulness of the processing is based on the consent of the data subject and without affecting the lawfulness of processing based on consent before its withdrawal;

d. Right to lodge a complaint with the supervisory authority for data processing.

The rights provided for may be exercised by means of a written communication sent by certified e-mail to the address manna.yoga@pec.it or by registered letter A.R. to the address Großer Graben 15, 39042 Bressanone, Bolzano, ITALY

be exercised.