The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union. This applies to the data you have given the Ashram and what we then do with your data.
Why we need your information
We ask you for information as it helps us to:
We might also use your information to help us improve the courses that we provide and help meet the future needs of people who attend the ashram. We can also make sure that your ashram experience is of the highest standard and improve what we offer if this falls short. Your information helps us to investigate any concerns if you raise a complaint.
We ensure that we always have a lawful basis for using your information, for example:
Your information is kept on a secure server and is kept confidential within those tutoring and administering the course/stay.
Who do we share your information with outside of the Ashram?
Under no circumstances do we sell or pass on information to third parties. We would only share in exceptional circumstances, or if we are legally required to do so.
Under GDPR you have a number of important rights. For further information please go here.
Key rights include the following:
Right to access
You have the right to request access to the data we hold and also to know what we do with this information. The Ashram is obliged to provide you with this information within 28 days of your request at the latest.
Right to erasure
We will only collect the minimum amount of personal data necessary and hold it for the minimum time required. You have the right to withdraw your permission for the ashram to use your data and ask for it to be erased, by contacting the Ashram verbally or in writing.
Mandala Yoga Ashram will only request you for information that is relevant and necessary for the purposes of booking a course or staying at the Ashram. We will only store your information thereafter so as to facilitate any future course bookings or stays. At anytime you have a number of rights under GDPR in relation to your data including the Right to Access and the Right to Erasure. The Ashram is obliged to respond to these requests no later than 28 days after the request is made.
Further information regarding your rights in relation to GDPR can be found on the link given above.