Privacy policy

Last updated: 25 October 2026

1. Controller

YaaHolidays, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA
Email: [email protected]

Representative in the European Union (Art. 27 GDPR): YaaHolidays Digital Ireland Limited, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland

2. The key points

3. Visiting the website and searching

When you visit YaaSearch or search, your browser sends technically necessary data: IP address, date and time, the requested address including your search term, the previously visited page and the browser identifier. We use this data to deliver the page and the search results, to ensure security and to find errors. The legal basis is Art. 6(1)(f) GDPR.

Our server logs every request. The IP address is stored in shortened form (for IPv4 without the last block, for IPv6 only the first 48 bits), so that it can no longer be linked to a person. The logs are deleted after seven days at the latest. We do not link search terms to people.

4. Chosen language

If you choose a language or answer the “Auf Deutsch ansehen?” prompt, your browser stores that choice in its local storage (localStorage) so that the prompt does not appear again. Only the language code is stored, for example “en”. It is not sent to us, and you can delete it at any time in your browser settings. The legal basis is Section 25(2)(2) TDDDG, as storing it is necessary for the function you asked for.

5. Cloudflare

All requests pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare establishes the encrypted connection and protects the site against attacks. In doing so, Cloudflare processes the data listed in section 3. The legal basis is Art. 6(1)(f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework. More information: cloudflare.com/privacypolicy.

6. Hosting

Our server is operated by Hostinger International Ltd. and is located in a data centre in Germany. Hostinger processes the data only on our behalf (Art. 28 GDPR).

7. Sponsored ads

Some results are preceded by ads marked “Sponsored”. We count how often an ad is shown and clicked so that we can keep to agreed quotas. So that each visitor counts only once per day, we create a non-reversible check value from the IP address, the browser identifier and a random value that changes daily. We do not store the IP address or the browser identifier. The check value is deleted after one day, the random value after two days. All that remains is the total per ad and day. The legal basis is Art. 6(1)(f) GDPR.

8. Images and links to other websites

Your browser loads preview images directly from the website of the business concerned, and images of ads from yaaholidays.com. The server of that website learns your IP address; the address of YaaSearch is not sent. When you click on a result, you leave YaaSearch. The operator of the other website is responsible for the data processing there.

9. Information about businesses and teachers

YaaSearch reads publicly available information from the businesses’ own websites: name, address, phone, email, website, opening hours, menus, classes, dates and a preview image. For yoga teachers, this can be information about a person. We use it so that travellers can find local offers and contact the provider directly. The legal basis is Art. 6(1)(f) GDPR. We respect the robots.txt of every website. We store the data for as long as it is on the website; backups are encrypted. Anyone who does not want to appear in YaaSearch can object at any time; a short email is enough.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing under Art. 21 GDPR. Please write to us at the address above. You can also lodge a complaint with a data protection supervisory authority, in particular in the country where you live.