To.gether Community Yoga

Privacy Policy

Last updated 18 October 2026

This page explains, clearly and simply, how I handle the personal data you share with me when you visit togethercommunityyoga.com, book a class, create an account or get in touch, and how I use cookies on this site. It is my information notice under Article 13 of the GDPR (EU Regulation 2016/679).

At a glance

  • Who I am: Jacinta Kahle, sole proprietor of To.gether Community Yoga (P.IVA 13510420014), teaching in Turin and online. Questions go to [email protected]. More
  • What I collect: your booking details (name, email, address, and codice fiscale if you have one), payment status, and anything you add to your account or a note. More
  • Why: to book your place, take payment, and issue the electronic invoice (fattura elettronica) Italian law requires. Nothing is used for marketing or sold. More
  • Who sees it: only the services that run the site, payments and email, my accountant, and the Agenzia delle Entrate, which receives every invoice. Some are in the US, under EU-approved safeguards. More
  • How long: bookings, payments and invoices for 10 years, as tax law requires; your account until you delete it; your messages until you ask me to delete them. More
  • Cookies: only the ones the site needs to work. No tracking, so no cookie banner. More
  • Your rights: see, correct, delete or take your data, or complain to the Garante. Just email me. More

The full details follow below.

1. Who I am

The data controller (titolare del trattamento) is Jacinta Kahle, registered as Kahle Jacinta, sole proprietor of the business (ditta individuale) To.gether Community Yoga.

  • Address: Via Alessandria 4, 20144 Milano (MI), Italy
  • Partita IVA: 13510420014
  • Email: [email protected]

2. Privacy Policy

2.1 What data I collect

I only collect what I need to run classes, take payment and issue invoices. Almost all of it comes straight from you.

  • When you visit the site: your IP address, browser type, the pages you open and when, recorded automatically in the site's server logs; and whether you chose English or Italian.
  • When you book a class: your name, email, phone number (optional), home address and, if you have one, your codice fiscale; the class, the price option you chose, how much you paid, and whether you came.
  • If you add a note to a booking: whatever you choose to tell me, such as that it is your first class or a question. Please don't include health information: tell your teacher about any injuries in person.
  • When you pay: payment is handled by Stripe. I never see or store your card details, only a payment reference and whether it went through. Once you have paid, online or in cash, I record what your invoice needs (your name, address, codice fiscale if you have one, the class, the amount and the payment date) and email you a payment confirmation.
  • If you create an account: your email, name and a password, which is stored only in scrambled ("hashed") form so nobody, including me, can read it. You can also save your phone, address and codice fiscale to speed up future bookings.
  • When you write to me through the contact form: your name, email, subject and message. These are emailed to me, not stored on the website.

I do not ask for or record health information. I do not use analytics or advertising trackers, and I never sell your data or use it for marketing.

2.2 How I use your data, and why

The law only lets me use your data when I have a lawful reason (a "legal basis"). I use it to:

  • Book your place and keep you informed: send your confirmation, and tell you if a class is cancelled or moved.
  • Take payment.
  • Issue your invoice and keep my accounts.
  • Run your account: and fill in future bookings for you.
  • Take attendance at the door.
  • Answer your messages.
  • Keep the website secure.
  • Handle a dispute or legal claim: using only the records relevant to it.

I make no automated decisions about you and do no profiling.

2.3 How I protect your data

The whole site runs over an encrypted (HTTPS) connection. Passwords are stored only in hashed form, the site's database cannot be reached from the internet, and only Jacinta can sign in to the admin area. If a breach ever put your data at risk, I would report it to the Garante within 72 hours and tell you directly where the law requires it.

2.4 Who I share your data with

Only with the services I need to run the site and classes. Most act as my processors (responsabili del trattamento): they handle the data on my instructions under a written agreement and may not use it for anything else.

  • IONOS SE (Germany): hosts the website and its database.
  • Cloudflare, Inc. (EU and USA): delivers the website and protects it from attacks; it sees your IP address and the pages you request.
  • Stripe (EU and USA): processes online payments. Stripe is also an independent controller for its own legal duties, such as fraud and anti-money-laundering checks: see Stripe's privacy policy.
  • Resend (USA): sends booking and payment confirmations and contact form messages by email.
  • Microsoft 365 (EU and USA): hosts my business email inbox.

I will soon use an e-invoicing service to prepare and send invoices for me, acting as my processor, and will name it here when I do.

2.5 Transfers outside the EU

The website and its database are hosted in Germany. Cloudflare, Stripe, Resend and Microsoft are US companies, so some of your data may be transferred to the United States. All four are certified under the EU–US Data Privacy Framework, and their data processing agreements with me also include the European Commission's Standard Contractual Clauses. Microsoft stores my email data within the EU. Write to me for a copy of the safeguards that apply.

2.6 How long I keep your data

  • Your bookings and payments, and the invoices for them: 10 years. They are the records behind my invoices and accounts, which Italian tax law requires me to keep.
  • Your account: until you delete it, which you can do yourself from your account page. Your bookings stay, for the reason above.
  • Messages from the contact form: kept in my email inbox as a record of our conversation, until you ask me to delete them.
  • The site's server logs: about two weeks.

When these periods end, I delete the data. If a dispute arises, I may keep the relevant records until it is resolved.

2.7 Your rights

Under Articles 15–22 of the GDPR, you can ask me at any time, free of charge, to:

  • See the data I hold about you and get a copy;
  • Correct anything wrong or out of date;
  • Delete your data, unless the law requires me to keep it (invoices, for example, for 10 years);
  • Limit how I use it while a question about it is being resolved;
  • Receive the data you gave me in a common digital format, or have it sent to someone else;
  • Object to any use based on my legitimate interest;

To exercise these rights, you can email [email protected]. If you have an account, you can also delete it yourself from your account page.

If you are unhappy with how I handle your data, please tell me first so I can put it right. You can also file a complaint with the Garante per la protezione dei dati personali, or to the authority in the EU country where you live or work.

2.8 Do you have to give me your data?

The booking details marked as required (name, email and address) are needed to reserve your place and issue the invoice the law requires: without them I cannot take your booking. If you have an Italian codice fiscale, please give it, because it must appear on your invoice; if you don't have one, leave it blank. Everything else, including your phone number, notes and account, is up to you.

3. Cookie Policy

3.1 What cookies are

Cookies are small text files a website saves in your browser so it can remember things between pages or visits, such as that you are signed in.

3.2 Which types I use

Only technical cookies, which the site needs to work. I use no analytics, advertising or profiling cookies. Under the Garante's cookie guidelines of 10 June 2021, technical cookies need no consent, which is why you will not see a cookie banner here.

3.3 Cookies on this site

  • togetheryoga_session: keeps you signed in to your account. Lasts 1 hour, renewed while you use the site.
  • togetheryoga_locale: remembers whether you chose English or Italian (also saved in your browser's local storage). Lasts 1 year.

When you pay online you are taken to Stripe's own checkout page, which sets its own cookies under Stripe's cookie policy. The site's fonts are stored on its own server, so your browser does not contact Google when you visit.

3.4 How to manage cookies

You can delete or block cookies at any time in your browser settings. If you block the session cookie, you will not be able to sign in.

4. Updates to this policy

If I change how I use your data, I will update this page and the date at the top. If the change is significant, I will also email everyone with an account.

This policy follows the GDPR (EU Regulation 2016/679) and the Italian Codice in materia di protezione dei dati personali (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018).

5. Contact me

For any question about your data or this policy:

To.gether Community Yoga — Jacinta Kahle
Via Alessandria 4, 20144 Milano (MI), Italy
P.IVA 13510420014 · [email protected]