Privacy Policy
Identification
1.1 Michelle Renee Goodrick (hereinafter Michelle Goodrick), with registered address in Spain, Calle Arjona 10, Escalera 3, 1º Derecha 41001 Sevilla; telephone 647 89 14 15; and email info@karmukayoga.es, is the owner of the website located at the Internet address https://www.karmukayoga.com and its social media accounts (hereinafter, this Website).
1.2. Michelle Goodrick is the owner of the following social media accounts: Instagram Profile
1.3. The person accessing this Website (hereinafter, the User) affirms that they are of the minimum legal age established by the General Data Protection Regulation (16 years) or by the national regulations applicable to them for granting consent in relation to information society services.
1.4. By accessing this Website, the User expressly accepts all clauses of its legal information, this privacy policy, and its cookie policy, as well as all specific conditions established for the use of certain services. If the User does not accept any of the aforementioned clauses, they must refrain from accessing this Website.
Processing of Personal Data as Controller
2.1. Below is more information regarding the different processing activities carried out by Michelle Goodrick as the data controller.
Data provided through the “Contact” section
Who is the controller of your data? Michelle Goodrick (more information in section 1.1).
For what purpose do we process your personal data? We will process the information you provide us, or authorize access to, for the purpose of managing what is indicated in your communication.
How long will we retain your data? The personal data you provide will be retained while your communication is being managed, while the contractual relationship is maintained, or for the time necessary to comply with legal obligations.
What is the legitimacy for processing your data? The legal basis for processing your data is your freely given consent.
To which recipients will your data be communicated? Data will not be transferred to third parties, except for legal obligation or your prior authorization.
What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or erasure, or the restriction of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in section 6).
What data must you provide mandatorily? You are required to provide the data marked with an asterisk (*); if you do not provide us with such data, you will not be able to contact Michelle Goodrick.
Data provided through the “Work with us” section or via the email address info@karmukayoga.com
Who is the controller of your data? Michelle Goodrick (more information in section 1.1).
For what purpose do we process your personal data? We will process the information you provide us, or authorize access to, for the purpose of managing candidates for our job offers.
How long will we retain your data? The personal data you provide will be retained while your application is being managed, while the contractual or pre-contractual relationship is maintained, or for the time necessary to comply with legal obligations.
What is the legitimacy for processing your data? The legal basis for processing your data is your freely given consent.
To which recipients will your data be communicated? Data will not be transferred to third parties, except for legal obligation or your prior authorization.
What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or erasure, or the restriction of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in section 6).
What data must you provide mandatorily? You are required to provide the data marked with an asterisk (*); if you do not provide us with such data, you will not be able to be part of the contact list for candidate management.
Contact through social media
Who is the controller of your data? Michelle Goodrick (more information in section 1.1).
For what purpose do we process your personal data? We will process the information you provide us, or authorize access to, for the purpose of managing social media contacts.
How long will we retain your data? The personal data you provide will be retained while your communication is being managed, while the commercial relationship is maintained, or for the years necessary to comply with legal obligations.
What is the legitimacy for processing your data? The legal basis for processing your data is your freely given consent.
To which recipients will your data be communicated? Data will not be transferred to third parties, except for legal obligation or your prior authorization.
What are your rights when you provide us with your data? You have the right to request from the data controller access to personal data concerning the User, and its rectification or erasure, or the restriction of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in section 6).
What data must you provide mandatorily? You are not required to provide any data to contact Michelle Goodrick through her social media accounts.
Data provided through the “Collaborate” section
Who is the controller of your data? Michelle Goodrick (more information in section 1.1).
For what purpose do we process your personal data? We will process the information you provide us, or authorize access to, for the purpose of managing collaborations.
How long will we retain your data? The personal data you provide will be retained while your application is being managed, while the contractual or pre-contractual relationship is maintained, or for the time necessary to comply with legal obligations.
What is the legitimacy for processing your data? The legal basis for processing your data is your freely given consent.
To which recipients will your data be communicated? Data will not be transferred to third parties, except for legal obligation or your prior authorization.
What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or erasure, or the restriction of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in section 6).
What data must you provide mandatorily? You are required to provide the data marked with an asterisk (*); if you do not provide us with such data, the submission will not be allowed.
Processing of Personal Data as Processor
3.1. The User who enters into a service provision contract with Michelle Goodrick as the data processor authorizes her to process the personal data necessary to provide the requested service.
3.2. For the execution of the services arising from the fulfillment of the purpose of this engagement, the data controllers will make available to Michelle Goodrick the personal data necessary to provide the requested service.
3.3. This agreement will last as long as the contractual relationship is maintained. Once the contractual relationship ends, Michelle Goodrick must return to the controller or transmit to another processor designated by the controller the personal data, and delete any copy in her possession. However, she may keep the data blocked to attend to possible administrative or jurisdictional responsibilities.
3.4. The data processor and all its personnel undertake to:
Use the personal data subject to processing, or those collected for its inclusion, only for the purpose of this engagement. Under no circumstances may the data be used for its own purposes.
Process the data in accordance with the instructions of the data controller.
Maintain, in writing, a record of all categories of processing activities carried out on behalf of the controller, which contains:
The name and contact details of the processor or processors and of each controller on whose behalf the processor acts.
The categories of processing carried out on behalf of each controller.
A general description of the appropriate technical and organizational security measures being applied.
Not communicate the data to third parties, unless there is express authorization from the data controller, in legally permissible cases. If the processor wishes to subcontract, they must inform the controller and request their prior authorization.
Maintain the duty of confidentiality regarding the personal data to which they have had access by virtue of this engagement, even after the contract ends.
Guarantee that persons authorized to process personal data commit, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be duly informed.
Keep available to the controller the documentation proving compliance with the obligation established in the previous section.
Guarantee the necessary training in personal data protection for persons authorized to process personal data.
When affected persons exercise their rights of access, rectification, erasure and objection, restriction of processing and data portability before the management, this must be communicated by email to the controller’s address. The communication must be made immediately and in no case later than the next business day following receipt of the request, together, where appropriate, with other information that may be relevant to resolve the request.
Notification of data security breaches: Michelle Goodrick will notify the data controller, without undue delay and through her email address, of any personal data security breaches under her responsibility of which she becomes aware, together with all relevant information for the documentation and communication of the incident. At least the following information will be provided:
Description of the nature of the personal data breach, including, where possible, the categories and approximate number of data subjects affected, and the categories and approximate number of personal data records affected.
Contact details of the contact person for more information.
Description of the likely consequences of the personal data breach.
Description of the measures taken or proposed to address the personal data breach, including, where appropriate, measures to mitigate its possible negative effects. If it is not possible to provide the information simultaneously, and to the extent that it is not, the information will be provided gradually without undue delay.
Michelle Goodrick, at the request of the controller, will communicate these data security breaches to the data subjects as soon as possible, when the breach is likely to result in a high risk to the rights and freedoms of natural persons. The communication must be made in clear and plain language and must include the elements indicated by the controller in each case, at a minimum:
The nature of the data breach.
Contact details of the controller or processor where more information can be obtained.
Describe the likely consequences of the personal data breach.
Describe the measures taken or proposed by the data controller to address the personal data breach, including, where appropriate, measures to mitigate its possible negative effects.
Make available to the controller all information necessary to demonstrate compliance with its obligations, as well as for the performance of audits or inspections carried out by the controller or another auditor authorized by them.
Implement the necessary technical and organizational security measures to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
Return to the data controller the personal data and, where appropriate, the media on which they are contained, once the service has been rendered.
The return must involve the complete deletion of the data existing on the computer equipment used by Michelle Goodrick. However, Michelle Goodrick may retain a copy, with the data duly blocked, as long as responsibilities may arise from the execution of the service.
3.5. It is the responsibility of the data controller to:
Provide the processor with the necessary data so that they can provide the service.
Ensure, before and throughout the processing, compliance with the General Data Protection Regulation by Michelle Goodrick.
Supervise the processing.
Social Networks
4.1. By accessing Michelle Goodrick’s social media accounts, the User accepts the processing of their personal data by these networks according to their privacy policies.
Instagram Privacy Policy.
Guarantee
5.1. The User guarantees that the data provided are true, accurate, complete, and up-to-date, being responsible for any direct or indirect damage or harm that may be caused as a result of the breach of this obligation.
5.2. In the event that the data provided belongs to a third party, the User guarantees that they have informed said third party and obtained their authorization to provide their personal data to Michelle Goodrick.
Rights
6.1. Right of access: The User shall have the right to obtain from Michelle Goodrick confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data.
6.2. Right to rectification: The User shall have the right to obtain from Michelle Goodrick without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the User shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
6.3. Right to erasure: The User shall have the right to obtain from Michelle Goodrick the erasure of personal data concerning them without undue delay, and Michelle Goodrick shall have the obligation to erase personal data without undue delay.
6.4. Right to restriction of processing: The User shall have the right to obtain from Michelle Goodrick restriction of processing.
6.5. Right to data portability: The User shall have the right to receive the personal data concerning them, which they have provided to Michelle Goodrick, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
6.6. Right to object: The User shall have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them. Michelle Goodrick shall no longer process the personal data unless she demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the User or for the establishment, exercise or defense of legal claims.
6.7. Automated individual decision-making, including profiling: The User shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
6.8. Right to withdraw consent: The User shall have the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. It shall be as easy to withdraw consent as to give it.
6.9. The User can exercise their rights with Michelle Goodrick by writing to Michelle Goodrick, Calle Arjona 10, Escalera 3, 1º Derecha 41001 Sevilla, or through the email address info@karmukayoga.com.
6.10. More information about these rights here.