Privacy Policy
Collection of Your Data
We may collect information about you in various ways, including personal data (such as name, email address, and telephone number) and usage data (such as your computer's Internet Protocol address, browser type, browser version, pages visited, time and date of visit, time spent on pages, and other diagnostic data).
1. Personal Data
We may collect the following personal data:
- Identification information (e.g., name, date of birth)
- Contact information (e.g., email address, telephone number, postal address)
- Payment information (e.g., credit card information, bank details)
- Health-related information (relevant for retreats)
- Images or videos (with your express consent)
2. Automatically collected information
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Operating system
- Referring/exit pages
- Clickstream data
- Date/time of visit
3. Legal basis for data processing
We process your personal data in accordance with the General Data Protection Regulation (GDPR) on the following legal bases:
- Your consent (Art. 6 para. 1 lit. a GDPR)
- For the performance of a contract or for carrying out pre-contractual measures (Art. 6 para. 1 lit. b GDPR)
- For compliance with legal obligations (Art. 6 para. 1 lit. c GDPR)
- To protect legitimate interests on our part or on the part of third parties, unless your interests or fundamental rights prevail (Art. 6 para. 1 lit. f GDPR)
Use of Your Data
We may use the information we collect about you for various purposes, including to provide and maintain our services, to notify you about changes, to provide customer service, to collect analysis to improve our services, and to monitor the use of our services.
The specific purposes for which we process your personal data include:
- Provision and administration of our services
- Processing your bookings and payments
- Communication with you regarding your inquiries or bookings
- Sending information and marketing communications (with your consent)
- Improving our website and services
- Analysis of the use of our website
- Fulfillment of legal obligations
- Protection of our rights and interests
Duration of data storage
We store your personal data only for as long as is necessary for the purposes for which it was collected or as required by law. After this period, your data will be deleted or anonymized.
Disclosure of Your Data
We may disclose information we have collected about you in certain situations, e.g., to comply with laws, to protect our rights, to protect your safety or the safety of others, to investigate fraud, or to respond to a government request.
We may share your data with the following categories of recipients:
- Employees and team members who need access to provide our services
- Service providers who assist us in providing our services
- Payment processors to process your payments
- Authorities or other third parties if we are legally obliged to do so or to protect our rights
International data transfers
Some of our external service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate security measures are in place to protect your personal data, such as standard contractual clauses of the EU Commission.
Security of Your Data
We use administrative, technical, and physical security measures to protect your personal data. Although we have taken reasonable steps to secure the personal data you provide to us, please note that no security measures are perfect or impenetrable.
Our security measures include:
- Encryption of sensitive data
- Regular security reviews and tests
- Access restrictions for employees and service providers
- Regular backups for data security
- Training of our staff in data protection practices
Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.
GDPR Data Protection Rights
We want to make sure you are fully aware of all your data protection rights. Every user has the following rights: the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object to processing, and the right to withdraw consent.
Your rights in detail
- Right to information: You have the right to know whether we process personal data about you and, if so, to receive access to this data.
- Right to rectification: You can request the correction of incorrect personal data.
- Right to erasure: You can request the deletion of your personal data under certain circumstances.>
- Right to restriction of processing: You can request the restriction of the processing of your personal data.
- Right to data portability: You have the right to receive your personal data in a structured, common and machine-readable format.
- Right to object: You have the right to object to the processing of your personal data.
- Right to withdraw consent: You can withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the withdrawal.
- Right to complain: You have the right to lodge a complaint with a supervisory authority.
To exercise one of these rights, please contact us using the contact details provided in the 'Contact Us' section. We will respond to your request within one month.
Analytics
We may use third-party services to monitor and analyze the use of our website.
We may use the following analysis services:
- Google Analytics: A web analysis service from Google LLC that uses cookies to analyze how users use our website.
- Matomo (Piwik): An open-source web analysis platform that enables data protection-friendly analyses.
You can prevent the collection by Google Analytics by using the Browser add-on for deactivating Google Analytics
Third-Party Websites
Our website may contain links to other websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.
Our website may contain links to other websites that have their own privacy policies. We recommend that you read the privacy policy of every website you visit. We are not responsible for the data protection practices of other websites and have no control over their content or data protection.
Children's Privacy
Our website is not directed at persons under the age of 18. We do not knowingly collect personally identifiable information from children under 18.
Our services are not aimed at persons under the age of 18. We do not knowingly collect personal data from children under 18. If we discover that a child under 18 has provided us with personal data, we will take steps to delete this information from our servers.
Changes to this Privacy Policy
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the 'Last Updated' date at the top of the privacy policy.
We reserve the right to change this privacy policy at any time. If we make significant changes to this privacy policy, we will notify you by posting the new privacy policy on this page and updating the 'Last Updated' date at the top of the privacy policy.
We recommend that you regularly review this privacy policy for changes. Changes to this privacy policy will become effective when they are published on this page.