How your data is handled here

The short of it

You can read every page of Puppy Yoga Ubud without an account. The site sets no cookies and runs no analytics, advertising or tracking scripts. What does reach us is the connection data that any web server sees when it sends you a page, and it is described below.

No booking takes place on this site. When you choose a class you book it on GetYourGuide, and their privacy rules apply there.

Behind this site

Puppy Yoga Ubud
[email protected]

The law does not require us to name a data protection officer, and we have not named one. Questions about your data can go to [email protected].

What the machine writes down

When your browser requests a page or a file, our web server notes the IP address it came from, the date and time, the address requested, the page you were referred from and the text your browser sends to describe itself and your operating system.

These records let us serve the site, keep it steady, spot attacks and misuse, and see how often each page is opened. Basis: Article 6(1)(f) GDPR, our legitimate interest in a site that functions and stays secure. Raw records go after 90 days at the latest, and counts without IP addresses are retained longer. The server belongs to a hosting company that processes this data for us and only as instructed.

The service that sits in front

The pages and the email of this domain pass through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which delivers the site quickly, filters attacks and forwards email to our mailbox. Cloudflare therefore handles your IP address and technical connection data.

Basis: Article 6(1)(f) GDPR, our interest in a fast, secured site. Cloudflare is certified under the EU-US Data Privacy Framework, with the Commission's standard contractual clauses as a second layer. Cloudflare sets out its own practice at cloudflare.com/privacypolicy.

Pictures of the classes

Photographs of the classes come straight from the image servers of GetYourGuide (GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany). To display one, your browser contacts those servers and passes on your IP address, which we cannot influence.

The legal basis is Article 6(1)(f) GDPR: our interest is to show each class with the provider's up-to-date pictures.

When a link takes you to a booking page

Booking links go directly to GetYourGuide and carry our partner number, so that the platform can credit a booking to us.

On GetYourGuide itself, the platform sets its own cookies and processes your data under its own privacy policy. We get commission reports with totals only, with no names, contact details or payment data.

Moving pictures

Videos are embedded in YouTube's privacy-enhanced mode and remain a still picture until you press play; until then your browser makes no contact with YouTube. When play is pressed, the video is fetched from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address and may set cookies.

Your consent is the act of pressing play (Article 6(1)(a) GDPR, Section 25(1) TDDDG). Google's privacy terms: policies.google.com/privacy.

What your browser keeps for us

Your browser holds a handful of small notes so that the site remembers your choices. They remain on your device, and we cannot read them:

• the items you ticked on a list, kept so they are still ticked on your next visit (local storage, until you clear it);
• the currency you choose in the menu, kept so every page shows prices in it (local storage, until you clear it);
• once you start a chat: its reference number, an access key, your email address and a copy of the thread, kept so you can pick it up again (local storage, until you clear it);
• a note that the chat bubble has been displayed, so it stays quiet afterwards (session storage, gone when the tab closes);
• a note that the exit window has been displayed, so it does not reappear (session storage, gone when the tab closes).

Each note is strictly necessary for something you switch on yourself (Section 25(2) No. 2 TDDDG). You can delete them at any moment through your browser settings.

Chatting with us

A chat gives us your name, your email address and your messages. The chat service also records your connection country, a scrambled version of your IP address (a salted hash that cannot be turned back into the address) and the page and language you wrote from.

The thread is kept with Cloudflare (named above), and each message you write is passed on to our account with the messaging service Telegram, which processes it outside the European Union; our answers return the same way. More on this at telegram.org/privacy. We use your email address solely to reply.

The legal basis is Article 6(1)(b) GDPR, since you ask and we answer, and Article 6(1)(f) GDPR for the scrambled IP address, used only against abuse and spam. Each conversation is erased by itself 180 days after its final message.

Writing to the desk by email

An email from you is used to answer you. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where it concerns a contract. We delete the exchange once it ends unless a legal duty obliges us to keep it.

Letter styles and map pictures

The lettering comes from our own server, so no font service hears about your visit. The maps are pictures kept on our own server and drawn from OpenStreetMap data, so viewing or enlarging them contacts no map service. A "Google Maps" link opens Google only if you press it.

The sources we link to

Pages here quote official and expert sources, with a link to each. Those sites receive nothing from you unless you open a link, and from that point their privacy rules apply.

What you can request from us

You can ask which personal data we keep about you (Article 15 GDPR), ask for corrections (Article 16) or deletion (Article 17), ask us to limit how it is used (Article 18) and ask for a copy you can take elsewhere (Article 20). If our legitimate interest is the basis, you can object whenever you wish (Article 21), and a consent you gave can be withdrawn from now on. One short email to [email protected] does it.

You may also complain to a data protection supervisory authority, especially in the EU country where you live or work, or where you think the infringement happened (Article 77 GDPR).

Nothing here decides anything about you automatically, and no profile is built. You have no duty to give us data, although a page cannot reach your screen without technical connection data.