Privacy

Who is responsible

Maradevi Oy, Business ID 3323765-3, Fredrika Runebergin katu 1-3 H 16, 06100 Porvoo, Finland. Email info@explore.yoga. Miska Käppi answers every message himself.

What I collect, and why

• When you ask for a place: your name, your email and the line you write about yourself. I use them to answer you about the training. An account is created in Supabase, and a sign-in link is emailed to you through Resend. Legal basis: steps you ask for before a contract (GDPR article 6(1)(b)).
• When you take a place: your name, your email and your payment. Stripe handles the card; I never see the card number. I use them to deliver the training and to keep the accounts. Legal basis: the contract, and accounting law (article 6(1)(b) and (c)).
• In the students' area (we.explore.yoga): your email, to send you the sign-in link, and whether paid access is open. Paid access opens when your group starts. Paying does not open it. Your browser keeps you signed in with a key in its own storage, not a cookie. Legal basis: the contract (article 6(1)(b)).
• In live sessions: your image, voice and words, when they are recorded. The recordings are part of the training and are shared with its groups. Legal basis: the contract (article 6(1)(b)). You can keep your camera off and use only your first name.
• When you withdraw: your name, your email and the payment details you give. Legal basis: consumer law (article 6(1)(c)).
• When you visit the site: the server sees your IP address. The form keeps it briefly in memory to stop repeated sending, and the host keeps short technical logs. Visits are counted with Vercel Web Analytics: the page, where the visit came from, the country and the kind of device, without cookies and without following you from one day to the next. Legal basis: my legitimate interest in knowing how the site is used (article 6(1)(f)). The site uses no cookies.
• If you tick the box on the form: I also send you letters now and then about the tradition and new groups. Legal basis: your consent (article 6(1)(a)). Every letter has a link to leave, and you can also write to me.

Without that box, I write to you only about Yoga Teacher Training, which you asked about.

Who else handles it

• HighLevel (LeadConnector), USA: stores your messages and requests.
• Stripe: takes payments.
• Vercel, USA: hosts this site and counts visits.
• Supabase, USA, data in Frankfurt, Germany: your account and sign-in.
• Resend, USA: sends sign-in emails.
• Bunny.net (BunnyWay d.o.o.), Slovenia: streams the videos.

Data sent to the USA is protected by the EU–US Data Privacy Framework or by the EU standard contractual clauses.

How long I keep it

• A message that does not lead to a place: 12 months from our last exchange.
• Students: for the six months of the training. Accounting records: 10 years for the financial statements and ledgers, and 6 years for the vouchers, as Finnish law requires.
• Recordings of live sessions: as long as they are used in the training, and at most two years.
• Withdrawals: 3 years.
• Letters: until you leave them.

Your rights

You can ask to see your data, correct it, delete it, limit or object to its use, or receive it in a portable form. Write to info@explore.yoga.

You can also complain to the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), at tietosuoja.fi, or to the data protection authority where you live.