Yoga by Svaneke Harbour, Bornholm

Privacy Policy & Cookie Policy

Last updated: July 2026

This privacy and cookie policy outlines how we process personal data when you use the website svanekeyogashala.dk.

Who are we?

Svaneke Yoga Shala is a yoga studio at Svaneke Harbour on Bornholm. We offer yoga classes, courses, drop-in sessions, workshops, private sessions, yoga in the great outdoors, and the option to hire the shala.

Data Controller
MARKHUS ApS
Kjeldsebyvej 3
3760 Gudhjem
Denmark

CVR no.: DK46310497

E-mail lene@svanekeyogashala.dk
Website https://svanekeyogashala.dk

The studio’s address: Gruset 1, 3741 Svaneke

When we use the terms “we”, “us” or “Svaneke Yoga Shala” in this policy, we are referring to MARKHUS ApS as the data controller.

2. What is this policy about?

Here we explain how we process personal data when you:

  • visiting our website
  • write to us via the contact or enquiry form
  • booking hold, course or other services via our booking system
  • Contact us by email
  • Follow links to our Facebook page

We also describe which cookies and similar technologies are used in connection with the website.

3. What information do we process?

3.1 When you contact us via the website form

On pages such as Contact and Rent the hall, you can send a request. We typically collect:

  • Name
  • Email address
  • Your message
  • Information about which page/form the request originates from

Message is sent to our email (lene@svanekeyogashala.dkThe content is not automatically saved in the website's database. Your email address is used as the reply-to address so we can get back to you.

Purpose To respond to your enquiry and follow up on requests regarding teams, hall hire etc.
Legal basis: GDPR Art. 6(1)(f) (legitimate interest in responding to enquiries) and/or (b) (measures preceding an agreement), when you enquire about a specific service.

3.2 When booking via EasyPractice

Booking, overview of sessions, login and payment are handled via our booking system EasyPractice (system.easypractice.net). When you book or register there, EasyPractice collects the information necessary for booking, payment, membership/login and communication about sessions – typically name, contact details, booking history and payment-related information.

We are the data controllers for the processing that occurs in connection with customers and teams. EasyPractice processes the information as our data processor (and in certain cases, under its own terms for its platform).

Purpose To administer bookings, holidays, payments and relevant customer communication.
Legal basis: GDPR Art. 6(1)(b) (performance of a contract) and (c) (legal obligations, e.g. accounting), where relevant.

Also read EasyPractice's own information on privacy and cookies on their platform.

3.3 When you write to us by email

If you contact us directly by email, we will process the information you send in order to reply to you.

Purpose Correspondence and customer care.
Legal basis: GDPR Art. 6, para. 1, sub-para. f and/or sub-para. b.

3.4 Technical information and misuse protection

For to protect contact forms from spam and abuse, we temporarily process limited technical information, including a hash based on the IP address and browser information (user agent). We do not store the full IP address for this purpose, but rather a privacy-preserving hash for a short period (rate limiting and duplicate check).

Purpose Operational security and protection against misuse.
Legal basis: GDPR art. 6, para. 1, lit. f (legitimate interest in protecting website and email reception).

3.5 Newsletter

Newsletter sign-up is not currently active on the website. If we later offer a newsletter, we will obtain your consent and update this policy.

3.6 Social Media

If you follow a link to our Facebook page or interact with us there, information will also be processed by Meta Platforms Ireland Limited under Facebook's own terms and privacy policy. We do not control Facebook's cookies or tracking on their platform.

4. Cookies and similar technologies

4.1 What are cookies?

Cookies are small text files that are stored on your device. Similar technologies can include, for example, third-party scripts that are loaded when you visit the site.

4.2 Necessary / technical cookies

Our own website does not use marketing or statistics cookies. However, WordPress and your browser may use necessary technical cookies for operation, security and – if you are logged in as an administrator – site management.

4.3 Third-party services on the website

When you use certain parts of the site, content from third parties will load, which may set cookies or process technical data:

  • EasyPractice On booking and calendar pages, EasyPractice's booking/calendar solution (iframe and scripts) is loaded. EasyPractice may set cookies that are necessary for login, booking, session, and payment. See EasyPractice's own cookie and privacy policy.
  • Google Fonts Typefaces are loaded from Google Fonts (fonts.googleapis.com). Google may therefore receive technical information such as your IP address.
  • Google Maps — On pages where a map is displayed (e.g. contact/info), a map embed from Google Maps is loaded. Google may set cookies and process usage data according to Google's policies.
  • Facebook — We link to Facebook. The gallery itself on the website shows local photos and is not a Facebook plugin. When you proceed to Facebook, Facebook's rules apply.

4.4 Statistics and Marketing

We do not use Google Analytics, Meta Pixel, Hotjar, or similar statistics/marketing tools on the website in its current setup.

4.5 How to manage cookies

You can delete or block cookies in your browser's settings. Please note that booking, login and card functions may work poorly or not at all if necessary cookies are blocked.

You can also use browsers or extensions that restrict third-party scripts.

5. Recipients of information

We do not share your information with third parties. We may transfer processing to:

  • EasyPractice — booking, reservations, payment and associated customer management
  • Hosting and e-mail provider — website operation and e-mail sending/receiving
  • Google — fonts and map embeds when these features are loaded
  • Public authorities — if we are legally obliged to do so

Where required, we enter into data processing agreements with relevant suppliers.

6. Transfer to countries outside the EU/EEA

Some providers (e.g. Google and Meta/Facebook) may process data outside the EU/EEA. In such cases, the transfer is carried out in accordance with applicable rules, typically via the EU Commission's standard contractual clauses or another lawful transfer mechanism with the provider. EasyPractice and other providers should be assessed based on their current documentation.

7. How long do we store information for?

  • Contact forms The message is sent via email and is not stored in the website's database. Email correspondence is retained for as long as it is relevant to the dialogue and our legitimate interests, after which it will be deleted or archived according to standard practice.
  • Abuse protection (hash/rate limit) Short-lived — typically minutes to hours.
  • Booking and customer information in EasyPractice: Following EasyPractice's functionality and our need for appointment fulfilment, accounting, and any legal requirements (e.g. the Bookkeeping Act).
  • Biscuits After the individual cookie/provider's lifespan.

8. Safety

We have put in place reasonable technical and organisational measures to protect personal data, including restricted access to website administration, spam protection on forms, and the use of recognised booking and hosting systems. No digital transmission is 100 % secure, but we strive to keep the risk low.

9. Your Rights

Under data protection laws, you generally have the right to:

  • Insight into the personal data we process about you
  • Correction of incorrect information
  • Erasure in certain cases (“the right to be forgotten”)
  • Limitation of treatment in certain cases
  • Data portability, where processing is based on an agreement or consent and occurs automatically
  • Objection to processing based on legitimate interests
  • Withdrawal of consent, if treatment is based on consent (without affecting the lawfulness of prior treatment)

You can contact us at lene@svanekeyogashala.dk, if you wish to assert your rights.

You also have the right to complain to the Danish Data Protection Agency.

The Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
www.datatilsynet.dk

10. Children

The website and bookings are primarily aimed at adults. We do not knowingly collect personal data from children for marketing purposes. For teams or activities where children are participating, specific arrangements will be made directly with the parent/guardian.

11. Changes

We may update this privacy and cookie policy as our practices, systems, or legislation change. The latest version will be published on this page with an updated date.

12. Contact

If you have questions about privacy, cookies, or your rights, feel free to write to:

MARKHUS ApS
Kjeldsebyvej 3, 3760 Gudhjem
E-mail lene@svanekeyogashala.dk

Brief cookie overview

Type Example Purpose Note
Necessary WordPress/session (in operation) Operations and security Dropped off by the platform when needed
Functional EasyPractice Booking, login, calendar When using booking/calendar
Third party Google Fonts / Google Maps Fonts / card display Loaded on relevant pages
Statistics — — Not in use at the moment.
Marketing — — Not in use at the moment on own site
Cookie-indstillinger