top of page

Privacy Policy

The party responsible for data processing is:

Josepha Schmidt
Bierstadter Straße 29
65189 Wiesbaden
Germany
info@mindfulness-retreat-vacation.com

We appreciate your interest in our website. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your data.

1. Access Data and Hosting

You may visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offering. This serves to safeguard our overriding legitimate interests in a correct presentation of our services in accordance with Art. 6(1) sentence 1 lit. f GDPR. All access data is processed only for as long as necessary to achieve the purposes described above.

Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected via forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Israel, United Kingdom, USA.

The adequacy decision for the USA applies as a basis for data transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

Our service providers are located and/or use servers in the following countries: Brazil, Mexico, India, Ukraine.
For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on the following safeguards: Standard Contractual Clauses of the European Union.

2. Data Processing for Contact and Customer Communication

Contacting Us

When you contact us, we collect personal data to process your inquiries in accordance with Art. 6(1) sentence 1 lit. b GDPR, if you voluntarily provide this data when contacting us (e.g. via contact form, live chat tool, or email). Mandatory fields are marked as such because in these cases we need the data to process your request. Which data is collected can be seen from the respective input forms.

Once your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to further use of the data as permitted by law and explained in this policy.

After full processing of your customer inquiry, your data will be restricted for further processing and deleted after expiry of tax and commercial retention periods in accordance with Art. 6(1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data or we reserve the right to further use permitted by law.

Live Chat Tool Ascend by Wix

For customer communication, we use the live chat tool Ascend by Wix, provided by Wix.com Ltd., 40 Nemal St., Tel Aviv 6350671, Israel (“Wix”). This serves to safeguard our overriding legitimate interests in effective and improved customer communication in accordance with Art. 6(1) sentence 1 lit. f GDPR. Wix acts on our behalf as a processor.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA applies as a basis for data transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

Our service providers are located and/or use servers in the following countries: Brazil, Mexico, India, Ukraine.
For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on the following safeguards: Standard Contractual Clauses of the European Union.

3. Cookies and Other Technologies

3.1 General Information

To make visiting our website attractive and to enable certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session ends (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

Protection of Privacy on End Devices

When using our online services, we use technologies that are strictly necessary to provide the expressly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require consent in this respect.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if consent is not granted, parts of the website may not be fully usable. Any consent you have given remains valid until you change or reset the relevant settings on your device.

Subsequent Data Processing by Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain website functions (e.g. website preference settings). These technologies collect and process IP address, time of visit, device and browser information, and information about your use of our website (e.g. preference information). This serves our overriding legitimate interests in an optimized presentation of our offering in accordance with Art. 6(1) sentence 1 lit. f GDPR.

We also use technologies to fulfill legal obligations to which we are subject (e.g. to prove consent to the processing of personal data), as well as for web analytics and online marketing. Further information on this, including the legal basis for data processing, can be found in the following sections of this privacy policy.

If you have given consent to the use of these technologies in accordance with Art. 6(1) sentence 1 lit. a GDPR, you may withdraw your consent at any time by contacting us using the contact details provided in this privacy policy.

3.2 Use of the Wix Consent Manager Tool

We use the Wix Consent Manager Tool on our website to inform you about cookies and other technologies used on our website and to obtain, manage, and document your consent where required. This is necessary to fulfill our legal obligation under Art. 6(1) sentence 1 lit. c GDPR in conjunction with Art. 7(1) GDPR to be able to demonstrate your consent.

The Wix Consent Manager Tool is provided by Wix.com Ltd., 40 Nemal St., Tel Aviv 6350671, Israel (“Wix”). After you submit your cookie declaration on our website, Wix’s web server stores your IP address, the date and time of your declaration, browser information, language, the URL from which the declaration was sent, and information about your consent behavior. In addition, a cookie is set that contains information about your consent behavior.

Your data will be deleted after 365 days unless you have expressly consented to further use of your data or we reserve the right to further use permitted by law and explained in this policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA applies as a basis for data transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

Our service providers are located and/or use servers in the following countries: Brazil, Mexico, India, Ukraine.
For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on the following safeguards: Standard Contractual Clauses of the European Union.

4. Use of Cookies and Other Technologies for Web Analytics and Advertising Purposes

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for individual technologies, this is done on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. Once the purpose ceases and the use of the respective technology ends, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future.

Further information on withdrawal options can be found in the section “Cookies and Other Technologies.” Additional information, including the basis of our cooperation with the individual providers, can be found under each technology. If you have any questions about the providers and the basis of our cooperation with them, please contact us using the details provided in this privacy policy.

Use of Google Services

We use the technologies described below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Unless otherwise stated for individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy notices.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection.

Our service providers are also located and/or use servers in countries outside the EU and EEA for which no adequacy decision exists. Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

Google Analytics

For website analysis purposes, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose.

If you visit our website from the EU, your IP address is stored on a server located in the EU for the derivation of location data and then immediately deleted before traffic is forwarded for processing on other Google servers. Data processing is carried out on the basis of a data processing agreement with Google.

For optimized marketing of our website, we have enabled the data-sharing settings for “Google products and services.” This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. The data sharing with Google is based on an additional agreement between joint controllers. We have no influence over Google’s subsequent data processing.

For optimized marketing, we also use the so-called User-ID function. This allows us to assign a unique, permanent ID to your interaction data across one or more sessions on our online platforms and thus analyze your user behavior across devices and sessions.

If you do not give consent for the use of Google Analytics pursuant to Art. 6(1) sentence 1 lit. a GDPR, no cookies will be stored or read on your device, and the data processing described above will not take place. To close gaps in web analysis through behavioral and conversion modeling, pings containing data (user agent, consent information, screen resolution, IP address) are sent to Google.

Google AdSense

Our website markets advertising space for third-party ads via Google AdSense. These ads are displayed to you in various places on this website. The so-called DoubleClick cookie enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website), as well as the automatic assignment of a pseudonymous user ID used to determine interests based on visits to this and other websites.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website. This enables interest-based advertising through the automatic collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website), using a pseudonymous cookie ID and based on the pages you have visited.

Further data processing only takes place if you have activated the “personalized advertising” setting in your Google account. If you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior when you reach our website via a Google Ads advertisement. Cookies may be used and data collected (IP address, time of visit, device and browser information, and information about your use of our website based on predefined events such as page visits or newsletter sign-ups), from which usage profiles are created using pseudonyms.

If you do not give consent for the use of Google Ads pursuant to Art. 6(1) sentence 1 lit. a GDPR, no cookies will be stored or read on your device and the data processing described above will not take place. To close gaps in web analysis through behavioral and conversion modeling, pings containing data (user agent, consent information, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to derive your IP country.

Google Maps

For the visual display of geographical information, Google Maps collects data about your use of the Maps functions, in particular IP address and location data, transmits it to Google, and processes it further. We have no influence on this subsequent data processing.

YouTube Video Plugin

To embed third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the enhanced privacy mode we use, transmitted to Google, and processed by Google only when you play a video.

5. Social Media

5.1 Social Buttons from Instagram (by Meta), WhatsApp

Our website uses social buttons from social networks. These are integrated into the page solely as HTML links, so no connection to the servers of the respective provider is established when our website is accessed. When you click one of the buttons, the website of the respective social network opens in a new browser window, where you can, for example, activate the like or share button.

5.2 Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube, LinkedIn

If you have given your consent to the respective social media operator pursuant to Art. 6(1) sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms listed above. Usage profiles are created using pseudonyms and may be used, for example, to place advertisements within and outside the platforms that presumably match your interests. Cookies are generally used for this purpose.

Detailed information on the processing and use of data by the respective social media operators, as well as contact options and your rights and settings to protect your privacy, can be found in the privacy notices of the providers linked below. If you still require assistance, you may contact us.

Facebook (by Meta) is operated by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our Facebook (by Meta) presence is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA applies as a basis for data transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

Instagram (by Meta) is operated by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our Instagram presence is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

YouTube is operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically collected by Google about your use of our YouTube presence is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Information automatically collected by LinkedIn about your use of our LinkedIn presence is generally transmitted to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

6. Contact Options and Your Rights

6.1 Your Rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us;

  • pursuant to Art. 16 GDPR, the right to request the correction of inaccurate or completion of incomplete personal data stored by us without undue delay;

  • pursuant to Art. 17 GDPR, the right to request the deletion of your personal data, unless further processing is required

    • for exercising the right of freedom of expression and information;

    • to comply with a legal obligation;

    • for reasons of public interest; or

    • for the establishment, exercise, or defense of legal claims;

  • pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data where

    • the accuracy of the data is contested by you;

    • the processing is unlawful but you oppose deletion;

    • we no longer need the data, but you require it for legal claims; or

    • you have objected to processing pursuant to Art. 21 GDPR;

  • pursuant to Art. 20 GDPR, the right to receive your personal data in a structured, commonly used, and machine-readable format or to request transmission to another controller;

  • pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. You may generally contact the supervisory authority of your habitual residence, place of work, or our company headquarters.

Right to Object

Where we process personal data on the basis of overriding legitimate interests as explained above, you may object to such processing with effect for the future. If processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If processing is carried out for other purposes, you only have the right to object for reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

This does not apply to processing for direct marketing purposes. In such cases, we will no longer process your personal data for this purpose.

6.2 Contact Options

If you have questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, revoke consent, or object to a specific data use, please contact us directly using the contact details provided in our legal notice.

bottom of page