1. data protection at a glance

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data collection on this website

Who is the responsible party for the recording of data on this website (i.e. the “controller”)?

The data processing on this website is carried out by the website operator. You can find the contact details in the “Note on the responsible party” section of this data protection declaration.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.

Other data are collected automatically by our IT systems or with your consent when you visit the website. These are mainly technical data (e.g. internet browser, operating system or time of page view). These data are collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order inquiries.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or

erasure of this data. If you have given your consent to the processing of data, you can revoke this consent at any time for the future. In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

2. Hosting

We host the contents of our website with the following provider:

All-Inkl

The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742

Friedersdorf (hereinafter All-Inkl). For details, please refer to the All-Inkl privacy policy:

https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6 Sect. 1 lit. f GDPR. We have a legitimate interest in the most reliable display of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) point a GDPR and Art. 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Contract data processing

We have concluded a contract for contract data processing for the use of the above-named service. This is a contract prescribed by data protection law that warrants that the personal data of our website visitors is processed only in accordance with our

instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and

this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected.

Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We would like to point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. It is not possible to protect data completely from access by third parties.

Note on the responsible party

The party responsible for processing data on this website is:

Kersting Haag

Cabanyal

46011 Valencia

Contact

E-Mail: kerstin@anapanasati-mindfulness.com

The responsible party is the natural or legal person who, alone or together with others,

decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.)

.

Storage duration

Unless a more specific storage period has been specified in this data protection declaration,

your personal data with us until the purpose for the data processing no longer applies. If you

assert a justified request for deletion or revoke your consent to data processing,

your data will be deleted, provided that we have no other legally permissible reasons for storing your

personal data (e.g. tax or commercial law retention periods); in the

latter case, the deletion will take place after these reasons no longer apply.

General information on the legal basis for data processing on this

website

If you have consented to the data processing, we process your personal data on

the basis of Art. 6 (1) point a GDPR or Art. 9 (2) point a GDPR, insofar as special categories of data are processed pursuant to Art. 9 (1) GDPR. In the event of express consent to the transfer of

personal data to third countries, data processing is also carried out on the basis of Art. 49 (1) point a GDPR. If you have consented to the storage of cookies or access to information in

your end device (e.g. via device fingerprinting), the data processing is also carried out

on the basis of § 25 para. 1 TDDDG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your

data on the basis of Art. 6 para. 1 lit. b DSGVO. Furthermore, we process your data if they are necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c DSGVO.

Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO. The following

paragraphs of this data protection declaration.

Recipients of personal data

As part of our business activities, we work together with various external parties. In some cases, personal data also needs to be transferred to these external parties.

We only pass on personal data to external parties if this is necessary in order to fulfill a contract, if we are legally obliged to do so (e.g. passing on data

to tax authorities), if we have a legitimate interest in the disclosure in accordance with Art. 6 (1) point f GDPR or if some other legal basis permits the disclosure. When using contract processors, we disclose personal data of our customers only on the basis of a valid contract for order processing. In the case of joint processing, a contract for joint processing is concluded.

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to

direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, AGAINST THE PROCESSING OF YOUR PERSONAL DATA

OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING IS PROVIDED IN THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS

UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR FOR THE ESTABLISHMENT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR). IF YOUR PERSONAL DATA ARE PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING,

YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR

PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 SEC. 2 GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, data subjects have a right of appeal to a

supervisory authority, in particular in the Member State of their habitual residence, place of work

or place of the alleged infringement. The right to lodge a complaint exists regardless of any

administrative or judicial remedies.

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in fulfillment of a contract

, to yourself or to a third party in a commonly used, machine-readable format.

If you request the direct transfer of the data to another controller,

this will be done only if it is technically feasible.

Information, rectification and erasure

Within the scope of the applicable statutory provisions, you have the right at any time to

information about your stored personal data, their origin and recipients and the

purpose of the data processing and, if applicable, a right to correct or delete this data. For further information on this and

other questions regarding personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted.

You can contact us at any time regarding this. The right to restrict processing applies in

the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need
• time to verify this. During the verification period, you have the right to
• restrict the processing of your personal data.
• If the processing of your personal data was/is carried out unlawfully, you can
• request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise,
• defend or assert legal claims, you have the right to request
• the restriction of the processing of your personal data instead of deletion.
• If you have filed an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between
• your interests and ours. As long as it is not yet clear whose interests
• prevail, you have the right to demand that the processing of your personal data be restricted
• .

If you have restricted the processing of your personal data, these data – apart from

their storage – may only be processed with your consent or for the assertion, exercise or

defense of legal claims or for the protection of the rights of another natural or

legal person or for reasons of important public interest of the European Union or

a member state.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as

orders or requests that you send to us as the site operator,

. You can recognize an encrypted connection by the fact that the address line of the browser changes from

“http://” to ‘https://’ and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot

be read by third parties.

Objection to advertising e-mails

The use of contact data published within the scope of the imprint obligation to send

unsolicited advertising and information materials is hereby rejected. The

site operators expressly reserve the right to take legal action in the event of unsolicited advertising

information being sent, for example by spam e-mails.

4. data collection on this website

Cookies

Our website uses so-called “cookies”. Cookies are small data packages and do

not harm your end device. They are either stored temporarily for the duration of a session

(session cookies) or permanently (permanent cookies) on your end device. Session cookies

are automatically deleted after your visit. Permanent cookies remain on your end device

until you delete them yourself or until they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party

cookies). Third-party cookies enable the integration of certain services from

third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain

website functions would not work without them (e.g. the shopping cart function or the display

of videos). Other cookies may be used to evaluate user behavior or for advertising purposes

.

Cookies that are required to carry out the electronic communication process, to provide

certain functions you want to use (e.g. for the shopping cart function) or to optimize the

website (e.g. cookies for measuring the web audience) (necessary cookies) are

stored on the basis of Art. 6 para. 1 lit. f DSGVO, unless another legal basis is given.

The website operator has a legitimate interest in storing necessary cookies to

technically error-free and optimized provision of its services. If consent to the

storage of cookies and comparable recognition technologies has been requested, the

processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a DSGVO and § 25 para. 1

TDDDG); the consent can be revoked at any time.

You can set your browser so that you are informed when cookies are set and

allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general

and activate the automatic deletion of cookies when closing the browser. If you

deactivate cookies, the functionality of this website may be limited.

This

data protection declaration shows which cookies and services are used on this website.

Contact form

If you send us inquiries via the contact form, your details from the

request form, including the contact details you provided there, will be stored for the purpose of processing the request

and in case of follow-up questions. We will not share this information without your

permission.

The processing of these data is based on Art. 6 para. 1 lit. b DSGVO, provided that your request

fulfilling a contract or is necessary for the implementation of pre-contractual measures.

In all other cases, the processing is based on our legitimate interest in the

effective processing of the requests addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your

consent (Art. 6 Para. 1 lit. a GDPR) provided that this has been requested; the consent can be revoked at any time

.

We will retain the data you provide on the contact form until you request its deletion,

revoke your consent for its storage, or the purpose for its storage no longer pertains

(e.g. after fulfilling your request). Any mandatory statutory provisions,

especially those regarding mandatory data retention periods, remain unaffected by this provision.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request.

We will not share this information without your consent.

The processing of these data is based on Art. 6 para. 1 lit. b DSGVO, provided that your request

is related to the performance of a contract or to carry out pre-contractual measures

. In all other cases, the processing is based on our legitimate interest in the

effective processing of the requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your

consent (Art. 6 para. 1 lit. a DSGVO), provided that this has been requested; the consent is at any time

revocable.

We will retain the data you send to us via contact requests until you request its deletion,

revoke your consent for its storage, or the purpose for its storage no longer pertains

(e.g. after fulfilling your request). Any mandatory statutory provisions,

especially those regarding mandatory data retention periods, remain unaffected by this provision.

5. Social media

Facebook

This website integrates elements of the social network Facebook. The provider of this service is

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The data collected is

also transferred to the USA and other third countries, according to Facebook.

An overview of the Facebook social media elements can be found here:

https://developers.facebook.com/docs/plugins/?locale=de_DE.

If the social media element is active, a direct connection between your device and the

Facebook server is established. Facebook thereby receives the information that you, with your IP address, have visited this

website. If you click on the Facebook “Like button” while you are logged into your Facebook

account, you can link the contents of this website to your Facebook profile.

This allows Facebook to associate your visit to this website with your user account. Please note that

as the provider of this site, we have no knowledge of the content of the data transmitted or how it will be used

by Facebook. For more information, please see Facebook’s privacy policy at

:

https://de-de.facebook.com/privacy/explanation.

This service is used on the basis of your consent in accordance with Art. 6 (1) point a GDPR and Section

25 (1) TDDDG. This consent may be withdrawn at any time.

Insofar as personal data is collected on our website using the tools described here and forwarded to

Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square,

Grand Canal Harbor, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26

GDPR). The joint responsibility is limited exclusively to the collection of

data and its transfer to Facebook. The processing by

Facebook that takes place after the data has been forwarded is not part of the joint responsibility. The obligations incumbent on us jointly

have been set out in a joint processing agreement. The wording of the

agreement can be found at:

https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing

data protection information when using the Facebook tool and for implementing the tool on our website in a manner that is secure under data protection law.

Facebook is responsible for the data security of Facebook products.

You can assert data subject rights (e.g. requests for information) regarding

Facebook, you can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you

assert data subject rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum,

https://de-de.facebook.com/help/566994660333381 and

https://www.facebook.com/policy.php.

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The

DPF is an agreement between the European Union and the United States to ensure compliance

European data protection standards for data processing in the United States. Every

company certified under the DPF is obligated to comply with these data protection standards.

Further information can be obtained from the provider under the following link:

https://www.dataprivacyframework.gov/participant/4452.

Instagram

Functions of the Instagram service have been integrated into this website. These features are

offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If the social media element is active, a direct connection will be established between your end device and the

Instagram server. This means that Instagram receives information about your visit to this website

.

If you are logged into your Instagram account, you can link the contents of this website to your Instagram profile by clicking on the Instagram button

link the contents of this website to your Instagram profile. This allows Instagram to associate your visit to this

website with your user account. We would like to point out that, as the provider of the pages, we

do not receive any knowledge of the content of the transmitted data or its use by Instagram.

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and §

25 para. 1 TDDDG. This consent can be withdrawn at any time.

Insofar as personal data is collected on our website using the tools described here and forwarded to

Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand

Canal Square, Grand Canal Harbor, Dublin 2, Ireland are jointly

responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively

to the collection of the data and its transfer to Facebook or Instagram. The

subsequent processing by Facebook or Instagram is not part of the joint responsibility.

The obligations incumbent on us have been set out in a joint processing agreement.

The wording of the agreement can be found at:

https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing

the data protection information when using the Facebook or Instagram tool and for the

secure implementation of the tool on our website in accordance with data protection law.

Facebook is responsible for the data security of Facebook or Instagram products.

You can assert data subject rights

(e.g. requests for information) regarding the data processed by Facebook or Instagram

directly with Facebook. If you assert the rights of data subjects with us, we are

required to forward these to Facebook.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission.

Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum,

https://privacycenter.instagram.com/policy/ and

https://de-de.facebook.com/help/566994660333381.

You can find more information about this in Instagram’s privacy policy:

https://privacycenter.instagram.com/policy/.

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The

DPF is an agreement between the European Union and the United States to ensure compliance with

European data protection standards for data processing in the United States. Each

company certified under the DPF is obliged to comply with these data protection standards.

Further information can be obtained from the provider at the following link:

https://www.dataprivacyframework.gov/participant/4452.

6. analysis tools and advertising

WP Statistics

This website uses the WP Statistics analysis tool to statistically evaluate visitor access. The provider

is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (

https://veronalabs.com).

WP Statistics allows us to analyze the use of our website. WP Statistics collects, among other things,

log files (IP address, referrer, browser used, origin of the user, search engine used)

and actions that the website visitors have taken on the site (e.g. clicks and views).

The data collected with WP Statistics is stored exclusively on our own server.

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. We have a

legitimate interest in the anonymized analysis of user behavior to optimize both our website

and our advertising. If a corresponding consent has been requested,

the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as

the consent includes the storage of cookies or access to information in the user’s terminal device

(e.g. device fingerprinting) within the meaning of the TDDDG. This consent may be revoked at any time.

IP anonymization

We use WP Statistics with anonymized IP. Your IP address will be truncated so that it

can no longer be directly assigned to you.

7. newsletter

Newsletter data

If you would like to receive our newsletter, we require a valid

e-mail address as well as information that allows us to verify that you are the owner of the

e-mail address provided and that you agree to receive the newsletter. Further

data is not collected or only on a voluntary basis. We use this data exclusively for

sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form takes place exclusively on

the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given to

the storage of your personal data, the e-mail address and the use of this information for sending the newsletter,

for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any

data processing transactions that have taken place to date

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you

unsubscribe from the newsletter and will be deleted from the newsletter distribution list after

you unsubscribe from the newsletter or when it is no longer needed. We

reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of

our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO to delete or block.

Data that has been stored by us for other purposes remains unaffected.

After you have been removed from the newsletter distribution list, your e-mail address will be stored by us or the

newsletter service provider in a blacklist, if necessary, to prevent future

mailings is necessary. The data from the blacklist is only used for this purpose and not merged with

other data. This serves both your interest and our interest in

compliance with the legal requirements when sending newsletters (legitimate interest in the sense of

Art. 6 para. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can

object to the storage if your interests outweigh our legitimate interest.

8. Plugins and tools

YouTube with advanced data protection

This website embeds videos from the website YouTube. The website is operated by Google Ireland Limited

(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites on which YouTube is embedded, a connection to the

YouTube servers. The YouTube server is informed which of our pages you

have visited. If you are logged into your YouTube account, you enable YouTube to

associate your surfing behavior directly with your personal profile. You can prevent this by logging out of

your YouTube account.

We use YouTube in advanced privacy mode. Videos that are played in advanced privacy mode

are not used to personalize your surfing on YouTube, according to YouTube. Ads that are played in advanced privacy mode are also not

personalized. No cookies are set in advanced privacy mode. Instead,

however, so-called local storage elements are stored in the user’s browser, which, similar to cookies,

contain personal data and can be used for recognition. Details about

extended data protection mode can be found here:

https://support.google.com/youtube/answer/171780.

It is possible that further data processing operations may be triggered after a YouTube video has been activated

over which we have no influence.

YouTube is used in the interest of presenting our online offers in an appealing way.

This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding

consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a

DSGVO and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to

information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

Consent can be revoked at any time.

For more information about data protection at YouTube, please refer to their privacy policy at:

https://policies.google.com/privacy?hl=de.

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The

EU-US Data Privacy Framework is an agreement between the European Union and the United States to

ensure compliance with European data protection standards for data processing in the United States. Each

company certified under the DPF is committed to complying with these data protection standards.

Further information can be obtained from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5780.

Source:

https://www.e-recht24.de