Privacy - Naad Yoga Council

data protection & privacy

Last Updated: August 26, 2026

I. Overview

This Data Protection & Privacy policy explains how Naad Yoga Council e.V. (“the Council,” “we,” “us”) collects, uses, and protects personal data when you visit our website, sign up for our newsletter, register for events or programmes, apply for membership, or otherwise interact with us.

As a registered association (e.V.) based in Germany, we are governed primarily by the EU General Data Protection Regulation (GDPR). Because our community, members, and visitors span multiple countries, this policy also addresses rights available to you under the data protection laws of the UK, Canada, India, and the United States, where applicable.

II. Who We Are

Naad Yoga Council e.V.
Lessingstr. 50, 76135 Karlsruhe, Germany
Register of Associations: VR204101, Siegburg District Court

For any questions about this policy or your personal data, contact us at:
privacy@naadyogacouncil.com

III. What Data We Collect

Depending on how you interact with our website, we may collect:

Contact information you provide directly — such as your name and email address, when you sign up for our newsletter, submit a contact form, apply for membership, or register for an event or programme.
Payment information, when you register for a paid event or membership. Payments are processed by our third-party payment providers (see Section 5); we do not store your full payment card details ourselves.
Technical data, such as your IP address, browser type, and pages visited, collected automatically through cookies and similar technologies (see Section 6).

IV. How We Use Our Data

We use your personal data to:

Respond to inquiries submitted through our contact form
Send newsletters and communications you have subscribed to
Process membership applications
Register you for events and programmes, and communicate related details
Process payments for events, programmes, or membership fees
Maintain the security and proper functioning of our website
Comply with our legal obligations as a registered association

We do not sell your personal data to third parties, and we do not use your data for purposes beyond those described in this policy without your consent.

V. Who We Share our Data WIth

We work with a small number of trusted service providers who process data on our behalf:

Zoho Corporation — we use Zoho’s suite of tools (including Mail, Campaigns, Backstage, Docs, and Meeting) to manage email communication, our newsletter, event registration, document storage, and online meetings. Zoho processes data on our behalf under its own data protection safeguards. Further information is available in Zoho’s GDPR documentation.

PayPal — for certain event, programme, or membership payments, transactions are processed through PayPal. PayPal’s own privacy policy governs how it handles your payment data; we do not have access to your full payment details.

CookieYes — we use CookieYes to manage cookie consent on our website (see Section 6).

We do not share your data with any other third party except where required by law.

Stripe — for certain event, programme, or membership payments, transactions are processed through Stripe. Stripe’s own privacy policy governs how it handles your payment data; we do not have access to your full payment details.

MailPoet — we use MailPoet to send newsletters and email communications from our website. MailPoet processes the email addresses of those who subscribe to our communications.

Eventbrite — for certain events, registration and attendance are managed through Eventbrite. Eventbrite processes the registration data (such as name and email address) of those who register for these events under its own data protection safeguards.

Google Translate (via GTranslate) — we use GTranslate to offer the website in German, French, and Spanish. When you select a translated language, the page content is processed by Google Translate to generate the translation. Google’s own privacy policy governs how it handles this data.

VI. Cookies

Our website uses cookies to support essential functionality and, where applicable, to understand how visitors use the site. You can view exactly which cookies are active, and manage your consent preferences at any time, through the cookie banner displayed on this site.

Cookies fall broadly into the following categories:

Necessary cookies — required for the website to function properly (e.g., session management, security).
Functional and analytics cookies — used, where consented to, to understand site usage and improve our content.

You may withdraw or adjust your cookie consent at any time by returning to the cookie banner settings.

We also use a cookie to remember your selected language when you use the site’s translation feature (via GTranslate), so your preference is retained as you browse.

VII. International Data Transfers

Some of our service providers, including Zoho, MailPoet, Eventbrite, and Google Translate, may process data outside of the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards required under GDPR, such as Standard Contractual Clauses or equivalent protections offered by our providers.

VIII. Your Rights, By Region

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to know why your data is collected, to access it, and to challenge its accuracy.

If you are located in the European Union or European Economic Area, you have rights under the GDPR, including the right to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to withdraw consent at any time, and to lodge a complaint with your national data protection supervisory authority.

If you are located in the United Kingdom, equivalent rights are available to you under the UK GDPR and the Data Protection Act 2018, enforced by the UK Information Commissioner’s Office (ICO).

If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023, including:

Right to Information & Access — request a summary of the personal data we process about you and a list of third parties with whom it has been shared
Right to Correction & Erasure — request that we correct inaccurate data or delete it once the purpose of collection has been fulfilled
Right to Grievance Redressal — a statutory right to raise complaints regarding how your data is handled
Consent — we obtain your specific, informed consent before processing your personal data, and you may withdraw that consent at any time

If you are located in the United States, additional rights may be available to you depending on your state of residence — for example, under the California Consumer Privacy Act (CCPA/CPRA) if you are a California resident.

California Privacy Rights (CCPA Notice)

This section applies solely to residents of the State of California. It explains your rights under the California Consumer Privacy Act (CCPA) and how to exercise them.

Your Rights Under the CCPA

Right to Know — you can request a report showing what personal data we have collected, used, disclosed, or sold about you over the past 12 months.
Right to Delete — you can request that we delete the personal information we have collected from you, subject to certain legal exceptions.
Right to Correct — you can request that we correct inaccurate personal information that we maintain about you.
Right to Opt-Out — you have the right to direct us not to sell or share your personal information at any time.
Right to Non-Discrimination — we will not deny you goods, charge different prices, or provide a different level of service if you choose to exercise your privacy rights.

how to submit a request

To exercise your Right to Know, Delete, or Correct, please submit a verifiable consumer request by emailing us at privacy@naadyogacouncil.com with the subject line “CCPA Privacy Request.”

To exercise any of the rights described above, regardless of your location, contact us at privacy@naadyogacouncil.com. We will respond in accordance with the law applicable to your location.

IX. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law (including German association and tax record-keeping requirements).

X. Children's privacy

Our website and services are not directed at children, and we do not knowingly collect personal data from children without appropriate parental or guardian consent.

XI. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised.

XII. Contact Us

If you have questions about this Data Protection & Privacy policy or how your data is handled, please contact:

privacy@naadyogacouncil.com