>

Privacy Policy

1. Data Controller

The entity responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Lena Bremm
Freelancer
Email: info@lenabremm.com
Website: https://www.lenabremm.com

2. General Information on Data Processing

I take the protection of personal data very seriously. Personal data is processed on this website exclusively in accordance with legal requirements, in particular the General Data Protection Regulation (GDPR).

Personal data refers to any information relating to an identified or identifiable natural person, such as a name, email address, or IP address.

3. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

  • Art. 6(1)(a) of the GDPR (Consent)
  • Art. 6(1)(b) of the GDPR (Contract or pre-contractual measures)
  • Art. 6(1)(c) of the GDPR (legal obligation)
  • Art. 6(1)(f) of the GDPR (legitimate interest)

4. Hosting and Server-Logfiles

This website is hosted by an external hosting provider. When you visit the website, the hosting provider automatically collects and stores information in server log files. This includes, in particular:

  • IP-adresse
  • Date and time of access
  • Browser type and browser version
  • Operating system
  • Referrer URL

This data is processed to ensure the secure and stable operation of the website, to defend against attacks, and to analyze errors.
The legal basis is Article 6(1)(f) of the GDPR.

5. Contact Form and Email Contact

When personal data is submitted to me via a contact form or by email, this data is processed solely for the purpose of handling the respective inquiry.

The legal basis for the processing is Article 6(1)(b) of the GDPR, provided that the inquiry is for the purpose of entering into a contract, or Article 6(1)(f) of the GDPR for general inquiries.

6. Cookies and Consent-Management

This website uses cookies. Cookies are small text files that are stored on your device.

The use of non-essential cookies is based solely on prior consent in accordance with Article 6(1)(a) of the GDPR. Consent is managed and logged using a cookie consent tool (cookie notice with consent log).

Die Einwilligung kann jederzeit über die Cookie-Einstellungen widerrufen oder angepasst werden.

7. google analytics

This website uses Google Analytics, a web analysis service. Google Analytics uses cookies to help the website analyze how users use the site.

Google Analytics is used exclusively on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR. The information obtained is used for the statistical evaluation of user behavior and the optimization of this website.

It cannot be ruled out that personal data will be transferred to third countries, in particular to the USA. The transfer takes place on the basis of suitable guarantees in accordance with Art. 46 GDPR.

8th Newsletter (MailPoet)

You can subscribe to a newsletter on this website. The MailPoet service is used to send the newsletter.

When registering, the e-mail address and any other voluntary information will be processed. Registration takes place using the double opt-in procedure.

The newsletter can be statistically analyzed (e.g. opening and click rates).
The legal basis is Art. 6 para. 1 lit. a GDPR.

Consent can be revoked at any time, e.g. via the unsubscribe link in the newsletter.

9. freebies against e-mail address

If free content (e.g. PDFs, courses or other materials) is offered in return for an email address, the personal data is processed for the purpose of providing the content and sending the newsletter.

The legal basis is Art. 6 para. 1 lit. a GDPR.

10. sale of digital services

Yoga courses, workshops and online programs are offered via this website.

As part of the ordering process, personal data required for the performance of the contract is processed.
The legal basis is Art. 6 para. 1 lit. b GDPR.

11. payment service provider

External payment service providers are used to process payments:

  • PayPal
  • Stripe (credit card)

As part of payment processing, personal data is transmitted directly to the respective payment service provider. The processing is carried out to carry out the payment transaction in accordance with Art. 6 para. 1 lit. b GDPR.

12. amazon affiliate program (affiliate links)

This website participates in the Amazon affiliate program. Affiliate links are marked as such.

When you click on an affiliate link, a connection to Amazon is established. Personal data, in particular IP address and usage data, may be processed in the process.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in financing the website).

13. embedded content from third-party providers

This website may include content from third-party providers, in particular:

  • Instagram
  • YouTube
  • Google Maps

This content is usually only loaded after consent has been given via the cookie consent tool. When the content is accessed, personal data may be transmitted to the respective providers.

The legal basis is Art. 6 para. 1 lit. a GDPR.

14. data transfer to third countries

When using certain services, personal data may be transferred to third countries outside the EU or the EEA. The transfer takes place exclusively in compliance with the legal requirements of Art. 44 et seq. GDPR.

15. storage period

Personal data is only stored for as long as is necessary for the respective processing purposes or for as long as statutory retention obligations exist. The data will be deleted once the purpose no longer applies or statutory periods have expired.

16. rights of the data subjects

Data subjects have the following rights:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent given (Art. 7 (3) GDPR)

To exercise these rights, contact can be made at any time via the e-mail address provided.

17. right of appeal to the supervisory authority

There is a right to lodge a complaint with a competent data protection supervisory authority if it is assumed that the processing of personal data violates the GDPR.

18 Updating and amending this privacy policy

This privacy policy is valid as of May 2026.
I reserve the right to adapt this privacy policy in the event of legal or technical changes.

Status April 2026

This post is also available in: German