Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when you use our website. Personal data refers to all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is
Clara Serra, Firstwaldstr. 6, 72116 Mössingen, Germany,
Phone: +49 157 89185212,
Email: info@mindfulwithclara.com.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited

• Date and time of access

• Amount of data transmitted in bytes

• Source/referrer from which you accessed the page

• Browser used

• Operating system used

• IP address used (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Cloudflare

We use a content delivery network provided by:
Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are deleted automatically after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

If personal data is also processed through individual cookies used by us, processing takes place in accordance with Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(a) GDPR if consent has been given, or Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the website visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or contacting you and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your inquiry aims at the conclusion of a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been conclusively processed, provided that there are no statutory retention obligations to the contrary.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally.

We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you a newsletter after you have expressly confirmed that you consent to receiving it. You will then receive a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later time.

The data collected by us when registering for the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named above. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this declaration.

6.2 SMS Marketing

On our website, you have the option to subscribe to SMS notifications about current offers, promotions and information about orders placed.

The mandatory information required for sending SMS notifications is your mobile phone number. Providing additional data is voluntary and is used to address you personally.

The so-called double opt-in procedure is used for sending SMS messages, ensuring that advertising SMS messages are only sent to you once you have expressly confirmed your consent to receive SMS messages by activating a verification link sent to the specified mobile phone number.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for SMS notifications, the date and time of registration are also stored in order to be able to trace possible misuse of your mobile phone number at a later time.

The data collected during registration is used exclusively for advertising purposes via SMS messages.

You can unsubscribe from SMS notifications at any time by sending a corresponding message to the controller named above and thereby revoke your consent with effect for the future. After unsubscribing, your mobile phone number will be deleted immediately from the distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this declaration.

7) Site Functionalities

Google Customer Reviews (formerly Google Certified Merchant Program)

We cooperate with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an email survey from Google.

If you give your consent pursuant to Art. 6(1)(a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google seller ratings.

As part of using Google Customer Reviews, personal data may also be transferred to servers of Google LLC in the USA.

You can revoke your consent at any time by notifying the controller responsible for data processing or Google.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

Further information on Google’s data protection provisions can be found here:
https://business.safety.google/intl/de/privacy/

8) Rights of the Data Subject

8.1 Applicable data protection law grants you the following rights vis-à-vis the controller with regard to the processing of your personal data (information and intervention rights), whereby reference is made to the stated legal basis for the respective conditions of exercise:

• Right of access pursuant to Art. 15 GDPR

• Right to rectification pursuant to Art. 16 GDPR

• Right to erasure pursuant to Art. 17 GDPR

• Right to restriction of processing pursuant to Art. 18 GDPR

• Right to notification pursuant to Art. 19 GDPR

• Right to data portability pursuant to Art. 20 GDPR

• Right to withdraw consent pursuant to Art. 7(3) GDPR

• Right to lodge a complaint pursuant to Art. 77 GDPR

8.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREVAILING LEGITIMATE INTERESTS WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY REMAIN RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.

If statutory retention periods exist for data processed on the basis of Art. 6(1)(b) GDPR in the context of contractual or quasi-contractual obligations, this data will be routinely deleted after the retention periods expire, provided that it is no longer required for contract fulfillment or initiation and/or that we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information of this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Privacy Policy kurz von Chat GPT

1. Introduction

Thank you for visiting our website and for your interest in mindfulwithclara.
This Privacy Policy explains how we collect, use and protect your personal data when you use our website.

Personal data means any information that can be used to identify you personally.

Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Clara Serra
Firstwaldstr. 6
72116 Mössingen
Germany

Phone: +49 157 89185212
Email: info@mindfulwithclara.com

The controller decides, alone or together with others, how and for what purpose personal data is processed.

2. Data Collection When Visiting the Website

2.1 Website Access (Server Log Files)

When you visit our website for informational purposes only (without registering or actively providing information), we collect only the data that your browser automatically transmits to our server. This data is technically necessary to display the website correctly.

This includes:

• Visited website pages

• Date and time of access

• Amount of data transferred

• Referrer URL (source of access)

• Browser type

• Operating system

• IP address (if applicable, in anonymized form)

This data is processed based on our legitimate interest in ensuring the stability and functionality of the website (Art. 6(1)(f) GDPR).
The data is not shared or used for other purposes. We reserve the right to review this data later if there are indications of unlawful use.

2.2 SSL / TLS Encryption

For security reasons and to protect confidential data transmission, this website uses SSL or TLS encryption.
You can recognize an encrypted connection by “https://” and the lock symbol in your browser.

3. Hosting & Content Delivery Network (CDN)

Cloudflare

We use a content delivery network (CDN) provided by:

Cloudflare Inc.
101 Townsend St., San Francisco, CA 94107, USA

Cloudflare helps us deliver website content (such as images and scripts) faster and more securely.
Processing is based on our legitimate interest in improving website performance and security (Art. 6(1)(f) GDPR).

We have concluded a data processing agreement with Cloudflare to ensure the protection of visitor data.
For transfers to the USA, Cloudflare complies with the EU–US Data Privacy Framework, ensuring an adequate level of data protection.

4. Cookies

We use cookies to make our website user-friendly and functional. Cookies are small text files stored on your device.

There are two types of cookies:

• Session cookies – deleted automatically when you close your browser

• Persistent cookies – remain on your device to save preferences

If cookies process personal data, this is done on the basis of:

• Art. 6(1)(b) GDPR (contract performance)

• Art. 6(1)(a) GDPR (your consent)

• Art. 6(1)(f) GDPR (legitimate interest in functionality and usability)

You can manage or disable cookies in your browser settings.
Please note that disabling cookies may limit website functionality.

5. Contacting Us

When you contact us (e.g. via contact form or email), personal data is collected.
The specific data collected depends on the contact form used.

Your data is used only to process your request and for related communication.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding)

• If the request relates to a contract: Art. 6(1)(b) GDPR

Your data will be deleted once your request has been fully processed, unless legal retention obligations apply.

6. Direct Marketing

6.1 Email Newsletter

If you subscribe to our newsletter, we will send you information about our offers and services.

• Required data: your email address

• Additional information: optional

We use the double opt-in procedure. This means:

1. You register for the newsletter

2. You confirm your subscription via a confirmation email

By confirming, you give your consent under Art. 6(1)(a) GDPR.

We also store your IP address, date and time of registration to prevent misuse.

You can unsubscribe at any time using the link in the newsletter or by contacting us directly.
After unsubscribing, your email address will be deleted unless further use is legally permitted or you have given explicit consent.

6.2 SMS Marketing

You may also subscribe to SMS notifications about offers, promotions or order-related information.

• Required data: mobile phone number

• Additional data: optional

SMS messages are sent using the double opt-in procedure via a verification link.

Legal basis: Art. 6(1)(a) GDPR

You can unsubscribe from SMS notifications at any time by contacting us.
After unsubscribing, your number will be deleted unless further storage is legally permitted.

7. Website Features

Google Customer Reviews

We participate in the Google Customer Reviews program, provided by:

Google Ireland Limited
Gordon House, 4 Barrow St
Dublin, D04 E5W5
Ireland

After a purchase, you may be asked whether you want to receive a review email from Google.

If you consent (Art. 6(1)(a) GDPR), your email address will be shared with Google for this purpose.
Your review may be displayed in Google Customer Reviews and Google Seller Ratings.

Personal data may be transferred to Google servers in the USA.
Google complies with the EU–US Data Privacy Framework.

You can withdraw your consent at any time.

More information:
https://business.safety.google/intl/de/privacy/

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to notification (Art. 19 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

• Right to lodge a complaint (Art. 77 GDPR)

Right to Object

If we process your personal data based on legitimate interests, you may object at any time for reasons related to your personal situation.

If your data is used for direct marketing, you may object at any time.
In this case, your data will no longer be processed for marketing purposes.

9. Data Retention

Personal data is stored only as long as necessary, depending on:

• Legal basis

• Purpose of processing

• Statutory retention periods (e.g. tax or commercial law)

• Consent-based data: stored until consent is withdrawn

• Contract-related data: stored according to legal retention obligations

• Legitimate-interest data: stored until you object

Data will be deleted once it is no longer required for its original purpose.