Home / Privacy policy
Privacy | Copenhagen
Privacy policy
This policy explains what personal data Warrior Princess Yoga collects when you visit this website, contact us, book a session or join the newsletter, why we collect it, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
Last updated: 17 October 2026
At a glance
Controller
Warrior Princess Yoga, CVR 39425955, run by Julia Grässer
Turesensgade 9, 3tv, 1368 København K, Denmark
Contact
info@warriorprincessyoga.com
+45 31505992
Supervisory authority
Datatilsynet, the Danish Data Protection Agency
We never sell your data.
Who is responsible
The data controller is Warrior Princess Yoga, CVR 39425955, run by Julia Grässer, Turesensgade 9, 3tv, 1368 København K, Denmark. You can reach us at info@warriorprincessyoga.com or +45 31505992.
Our website address is warriorprincessyoga.com.
What data we collect and why
We collect only the data we need for each purpose below. You choose what to tell us, but we cannot reply to you, book you in or invoice you without the details marked as needed.
Giving us your data is voluntary. We do not use automated decision-making or profiling.
Enquiries by form, email or phone
Data: Your name, email address, phone number if you give it, your message and, for company enquiries, the company name and number of participants. Form messages are sent to our mailbox.
Why and legal basis: To reply to you and prepare an offer. The basis is steps you ask us to take before entering a contract (GDPR Article 6(1)(b)) and our interest in answering messages (Article 6(1)(f)).
How long: Until your enquiry is dealt with. If it does not lead to a booking, we delete it within 12 months.
Clients and bookings
Data: Name, contact details, invoice details for companies, what you booked, attendance and payment status. When we offer online booking, bookings run through a booking system such as YOGO (their data processing information), which processes your booking details on our behalf.
Why and legal basis: To deliver and manage your sessions, classes, trainings or company programmes (Article 6(1)(b)).
How long: While you are a client. Invoices and payment records are kept as described below.
Payments and bookkeeping
Data: Invoice and payment information. When we offer online payment, card payments are handled by Stripe, so we cannot see your full card details (Stripe privacy policy).
Why and legal basis: To take payment (Article 6(1)(b)) and to meet our legal duty to keep accounting records under the Danish Bookkeeping Act (Article 6(1)(c)).
How long: Accounting material is kept for 5 years after the end of the financial year it belongs to.
Health information you choose to share
Data: In yoga therapy, breathwork and Chi Nei Tsang sessions you may mention injuries, conditions, medication or pregnancy so the session can be adapted safely. This is health information, a special category of personal data.
Why and legal basis: Only with your explicit consent (Article 9(2)(a)), and only to plan and adapt your session. You never have to share it, and you can withdraw your consent at any time. Our sessions do not replace medical care.
How long: Kept only while you are a client, then deleted. You can ask us to delete it earlier at any time, unless the law requires us to keep it.
Newsletter
Data: Your email address, your name if you give it, when and how you signed up, and whether you open or click emails. The newsletter is sent with Mailchimp.
Why and legal basis: Your consent (Article 6(1)(a)), which is also required by Danish marketing law. You can unsubscribe in every email.
How long: Until you unsubscribe. We then keep a short record that you unsubscribed so you are not added again by mistake.
Security and technical logs
Data: Your IP address, the time, the pages requested and your browser details, recorded by the web server when you visit.
Why and legal basis: To run and protect the website (Article 6(1)(f)).
How long: A short period set by the hosting provider, then deleted.
Comments on blog posts
Data: If comments are open on a post: your name, email address, optional website, your comment, your IP address and browser details. Comments may be checked by an automated spam filter. Your email address may be sent in hashed form to Gravatar to look for a profile picture (Automattic privacy policy).
Why and legal basis: To publish your comment and keep the site free of spam (Article 6(1)(f)). Comments appear only after we have approved them. Saving your details in a cookie is optional and based on your consent.
How long: While the comment is published. We delete it earlier on request.
Cookies
Cookies are small files stored on your device. Under the Danish Cookie Order we only set cookies that are not strictly necessary after you have given consent. You can accept or refuse them in the cookie banner, and you can change or withdraw your choice at any time through the cookie settings on this site or by deleting cookies in your browser.
These are the cookies we use. We do not use our own cookies for website statistics or advertising. When you play an embedded video, YouTube sets its own cookies, which can also be used for analytics and advertising by Google. If we add other tools, we will update this policy and ask for your consent first.
| Cookie | Set by | Purpose | Consent | Lifetime |
|---|---|---|---|---|
| cookieyes-consent | This website (CookieYes cookie banner) | Remembers your cookie choice | Necessary | 1 year |
| mcforms-…-sessionId | Mailchimp | Newsletter sign-up pop-up and form | Needs your consent | Session |
| VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-YNID, __Secure-ROLLOUT_TOKEN, __Secure-BUCKET | YouTube (Google) | Play embedded videos, measure bandwidth, security and load balancing | Needs your consent | Up to 6 months |
| YSC | YouTube (Google) | Counts views of embedded videos | Needs your consent | Session |
| ytidb::LAST_RESULT_ENTRY_KEY, __Secure-YEC | YouTube (Google) | Video player settings and fraud protection | Needs your consent | Set by YouTube, can be long |
Embedded content and external links
Some pages show content from other services. When your browser loads it, that service receives your IP address and may collect further data under its own privacy policy.
- YouTube videos, for example on the page about conferences and events. YouTube belongs to Google. Videos load only after you accept the relevant cookies.
- Mailchimp provides the newsletter sign-up form.
We also link to Google reviews, Trustpilot, Instagram, YouTube, LinkedIn and an external shop operated by Spreadshirt. These are separate services with their own privacy policies, and we do not control what they do with your data.
Who we share data with
We do not sell your data and we do not share it for advertising. We use trusted providers who process data on our behalf under data processing agreements:
- our website hosting provider and email provider
- YOGO (online booking, when we use it) and Stripe (online payments)
- Mailchimp (newsletter)
- Google, when you watch an embedded YouTube video
- our accountant or bookkeeper, when we need help with accounts
We only disclose personal data to public authorities when the law requires it, or when it is needed to protect someone’s life or health.
Transfers outside the EU and EEA
Some providers, such as Mailchimp, Stripe and Google (YouTube), may process data in the United States. Where this happens we rely on the EU-US Data Privacy Framework if the provider is certified, or on the European Commission’s standard contractual clauses. You can ask us for more information at info@warriorprincessyoga.com.
How long we keep data
We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires. In summary:
| Data | How long |
|---|---|
| Enquiries that do not lead to a booking | Up to 12 months |
| Client and booking records | While you are a client |
| Accounting material and invoices | 5 years after the end of the financial year |
| Health information you share | While you are a client, or until you ask us to delete it |
| Newsletter | Until you unsubscribe |
| Comments | While published, or until you ask us to delete them |
Security
This website uses an encrypted connection (HTTPS). Access to personal data is limited to people who need it, and we choose providers who take data protection seriously. If a data breach puts your rights at risk, we will tell you and the authorities as the law requires.
Your rights
Under the GDPR you have the right to:
- ask for a copy of the personal data we hold about you
- have wrong data corrected
- have your data deleted, unless we must keep it by law
- ask us to restrict how we use your data
- receive the data you gave us in a common format (data portability)
- object to processing based on our legitimate interests
- withdraw consent at any time. This does not affect what we did before you withdrew.
To use any of these rights, write to info@warriorprincessyoga.com. We reply within one month.
How to complain
If you think we handle your data unlawfully, please tell us first so we can put it right. You also have the right to complain to the Danish Data Protection Agency:
Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark
dt@datatilsynet.dk | datatilsynet.dk
Changes to this policy
We may update this policy, for example when we add a new tool or the law changes. The date at the top of the page shows when it was last updated. This website is meant for adults. If you are under 18, please ask a parent or guardian before you send us personal data.