Privacy policy
Data controller
Heike Herold, Yoga 108, Sidwaldstrasse 18, 9652 Neu St. Johann, Switzerland. Contact: heike@yoga-108.ch, +41 79 709 29 72.
Data we collect
We collect what you give us through the contact or voucher form: your name, email address, phone number (needed for a voucher order, optional in the contact form), your message and, for a yoga coaching enquiry, any health information you choose to share. Health information is sensitive personal data under Art. 5 lit. c nDSG and is only processed if you volunteer it yourself; no form requires it.
Purpose of processing
We use this data to answer your enquiry, arrange a trial class, yoga coaching session or voucher, and to stay in touch with you for as long as needed.
Legal basis
For enquiries through our forms, we rely on your consent given by submitting the form (Art. 6(1)(a) GDPR) and on our legitimate interest in replying to you (Art. 6(1)(f) GDPR); for health information you volunteer, your explicit consent additionally applies (Art. 9(2)(a) GDPR, Art. 6 nDSG).
Recipients and processors
Hosting: Amazon Web Services (AWS S3 + CloudFront), Amazon Web Services, Inc. (USA), in a data centre in Zurich (region eu-central-2).
Forms and email: An AWS Lambda function sends your enquiry through Amazon SES in Frankfurt (EU) to the inbox at our email provider in Switzerland. Emails to heike@yoga-108.ch also pass through Amazon SES in Frankfurt and are forwarded to that inbox. After you submit a form, you get an automatic confirmation at the email address you entered.
US transfer: because AWS is a US company, data may be transferred to the US; we rely on appropriate safeguards (the Swiss-U.S. Data Privacy Framework or EU Standard Contractual Clauses).
Spam protection on the forms
To keep spam out of the forms, we use Cloudflare Turnstile, a service of Cloudflare, Inc. (USA). When you click into a form, your browser loads a check from Cloudflare. It uses technical details such as your IP address and browser information to tell whether a person is filling in the form, and shows a box to tick only when it isn’t sure. It sets no cookies, but it stores an entry in your browser’s local storage. Cloudflare doesn’t see what you write in the form. Cloudflare states that it doesn’t use this data to identify people or build profiles. The data may also be processed in the USA.
Server logs
Visiting this website causes our hosting (Amazon CloudFront/S3) to automatically record technical access data, including your IP address, the time of access and the page requested; these logs exist only to keep the site running securely and to diagnose faults, and aren’t combined with any other data.
Retention
We keep your enquiry as long as needed to handle it, generally no longer than two years. Incoming emails to heike@yoga-108.ch are held at AWS in Frankfurt for up to 30 days so they can be delivered, then deleted.
Your rights
Access, correction, deletion, restriction of processing and data portability; you can also withdraw any consent you’ve given at any time, with effect for the future, and object to our processing of your data. Contact us using the details above.
Right to complain
You can lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC/EDÖB, edoeb.admin.ch); if the GDPR applies to you, the data protection authority in your EU member state.
Cookies
This website uses no cookies and no analytics tool.
Maps
This website shows no embedded map. On the Studio and Contact pages, an “Open in Google Maps” link takes you to Google Maps. Only then do you leave this website, and Google’s privacy policy applies.
Contact for privacy questions
Last reviewed: 2 November 2026