Controller

What We Collect

We collect and process the following categories of personal data:

• a) Contact information (name, email, phone) for bookings and inquiries.
• b) Class attendance and membership status to manage scheduling and loyalty.
• c) Order data for café purchases, including payment references.
• d) Technical data such as IP address, device type, browser, and cookies.

Purpose & Legal Basis

We process personal data to handle bookings, serve café customers, maintain memberships, and comply with business obligations pursuant to Art. 6(1)(b) & (c) GDPR.

Marketing communication occurs only with your explicit consent (Art. 6(1)(a) GDPR).

Technical data helps us keep the website secure, performant, and personalized; this processing is based on our legitimate interests (Art. 6(1)(f) GDPR).

Cookies & Tracking

We use cookies for the following purposes:

You can control most cookies through your browser settings.

Third Parties

Payment processors, email tools, booking systems, and analytics partners process data on our behalf. All third parties are contractually bound to protect your data in accordance with GDPR requirements.

Retention & Your Rights

We retain data only as long as necessary for the stated purposes, including any legal or accounting obligations.

Under GDPR, you have the right to:

• • Access your personal data
• • Rectify inaccurate data
• • Request deletion ("right to be forgotten")
• • Restrict processing
• • Object to processing
• • Data portability

To exercise any of these rights, contact us at hi@zayaclub.com.

If you believe your data protection rights have been violated, you may lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit.