Privacy notice

Last updated: 10 August 2026

This notice explains which personal data may be processed when you visit this website, why it is processed and which rights you have. The website is primarily intended for parents, legal guardians, educators and other interested adults.

1. Data controller

2. Hosting and server logs

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. As a data processor, IONOS processes the connection and log data technically required to deliver and secure the website. This may include the IP address, date and time of access, requested page or file, referrer URL, browser type, operating system, device type, transferred data volume and HTTP status.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and user-friendly operation of the site, including detecting technical faults and misuse. According to IONOS, visitor data made available for web analytics is anonymised and stored for eight weeks. No personal visitor profiles are created for advertising purposes. Further information is available in IONOS's information about data processing for web-hosting products.

3. Cookies and similar technologies

The public website does not use analytics, marketing or advertising cookies. There is no third-party audience measurement or advertising profiling. A technically necessary session cookie is used only in the protected administration area to secure the site operator's login. It is not used for advertising. A consent banner is therefore not currently included.

4. Contact by email

The contact form does not transmit or store information on this website. Selecting the button only opens the email application configured on your device with a prepared message. Personal data such as your name, email address, subject and message is processed by the email providers involved only if you actually send that email. The info@innertreeflow.de mailbox is hosted by IONOS.

Enquiries about a yoga course or steps prior to entering a contract are processed under Article 6(1)(b) GDPR. General enquiries are processed under Article 6(1)(f) GDPR, based on the legitimate interest in responding to them. Data is deleted after the enquiry has been completed unless statutory retention requirements or other legitimate reasons require longer storage. Please do not send health data or confidential information about children by unencrypted email.

5. Blog and media

Blog posts, images, audio and PDF files are stored on and delivered from the IONOS webspace. There are no public comments, visitor accounts or visitor uploads. Viewing a post or file only generates the technical data described in the hosting section above.

6. Protected administration area

The password-protected administration area is intended solely for the site operator. A secure hash of the administrator password, a technically necessary session cookie, published posts and uploaded files are stored on the IONOS webspace. The password itself is not stored in plain text. The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in securely managing the website.

7. Recipients, transfers and retention

Personal data is shared only where necessary: with IONOS for web-hosting and email services, with the sender's email provider when an email is sent, with public bodies where required by law, or with other recipients where valid consent has been given. Personal data is not sold. IONOS states that the web-analytics data for these hosting products is not transferred to third parties or third countries.

Data is retained only for as long as necessary for the relevant purpose. Server and security data is retained according to IONOS's technical and contractual requirements and is then deleted or anonymised. Email enquiries are deleted after completion unless statutory retention duties apply. Published blog posts and media are retained until they are removed from the blog.

8. Your rights

Subject to the applicable legal requirements, you may have the right to:

• access your personal data (Article 15 GDPR),
• rectify inaccurate data (Article 16 GDPR),
• erase your personal data (Article 17 GDPR),
• restrict processing (Article 18 GDPR),
• data portability (Article 20 GDPR),
• object to processing based on legitimate interests (Article 21 GDPR), and
• withdraw consent with future effect (Article 7(3) GDPR).

To exercise your rights, email info@innertreeflow.de. You also have the right to lodge a complaint with a data-protection supervisory authority.

9. Supervisory authority

10. Encryption, automated decisions and updates

The website is delivered over an encrypted HTTPS connection. There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR. This notice will be updated if the website's features, service providers or legal requirements change.