Privacy Policy
Last updated: June 17, 2026
1. Controller
The controller responsible for processing your personal data on this website is:
Lyssara
Musterstraße 12
10115 Berlin, Germany
Email: [email protected]
Phone: +49 30 1234567
Lyssara has not appointed a Data Protection Officer. For privacy-related enquiries, please contact [email protected].
2. What data we collect
When you submit the sign-up form on lyssara.top, we collect:
- Name — to address you when we contact you about class bookings.
- Phone number — to call you back regarding session availability and consultation.
When you visit our website, we may also process:
- Technical data (IP address, browser type, device information) — only if you consent to analytics cookies.
- Cookie identifiers — if you accept analytics or marketing cookies.
- Cookie consent records — to document your cookie preferences (strictly necessary).
3. Purposes and legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Processing your class sign-up and callback request | Name, phone | Art. 6(1)(a) — consent (checkbox on form) / Art. 6(1)(b) — steps prior to contract |
| Responding to privacy requests | Contact details you provide | Art. 6(1)(c) — legal obligation; Art. 6(1)(f) — legitimate interest |
| Website analytics (if consented) | Usage data, cookie IDs | Art. 6(1)(a) — consent |
| Advertising measurement and remarketing (if consented) | Cookie IDs, conversion data | Art. 6(1)(a) — consent |
| Storing cookie consent choice | Consent preferences, timestamp | Art. 6(1)(c) — legal obligation (accountability) |
4. Recipients of data
We may share your data with:
- Hosting provider — to operate this website (server located in the EU/EEA where possible).
- Google Ireland Limited — if you consent to analytics or marketing cookies (Google Analytics, Google Ads).
- Meta Platforms Ireland Limited — if you consent to marketing cookies (Meta Pixel for Facebook/Instagram advertising).
We do not sell your personal data to third parties.
5. Transfers outside the EEA
If you consent to Google or Meta tracking tools, data may be transferred to the United States. These providers use Standard Contractual Clauses (SCCs) and supplementary measures as required under GDPR Chapter V.
6. Retention periods
- Sign-up requests (name, phone): stored for up to 12 months after your last contact, unless a longer period is required for contract fulfilment or legal claims.
- Cookie consent logs: 12 months from the date of consent.
- Analytics/marketing data: according to the respective provider's retention settings, typically 14–26 months, only if you have consented.
7. Mandatory form fields
Name and phone number are required to process your sign-up request. If you do not provide them, we cannot contact you about class availability. The Privacy Policy consent checkbox is also mandatory.
8. Your rights
Under GDPR, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion where applicable ("right to be forgotten").
- Restriction — limit processing in certain circumstances.
- Data portability — receive data you provided in a structured format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time, without affecting prior lawful processing. Contact [email protected] or use Cookie Settings for cookie consent.
We respond to requests within 30 days (Art. 12(3) GDPR).
9. Right to lodge a complaint
You may lodge a complaint with a supervisory authority. For Lyssara (registered in Berlin), the competent authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
https://www.datenschutz-berlin.de/
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
11. Data security
This website uses HTTPS encryption. Access to stored sign-up data is restricted to authorised Lyssara staff. We implement appropriate technical and organisational measures to protect your information.
12. Changes to this policy
We may update this Privacy Policy when our processing activities change. The current version is always available on this page.