PRIVACY POLICY

The controller responsible for data processing on this website is:

Liliana Vásquez Mock
Certified Holotropic Breathwork Practitioner
Breisgauer Str. 13
14129 Berlin
Germany – Alemania

Phone: +49 176 32 215 467
E-Mail: info@lilianavasquezmock.com

Protecting your privacy is very important to us. Below we inform you in detail about how your data is handled.

1. ACCESS DATA AND HOSTING

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which may include, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our website pursuant to Art. 6(1)(f) GDPR.

All access data is deleted no later than one month after the end of your visit.

2. DATA PROCESSING FOR CONTRACT MANAGEMENT AND CONTACT

2.1 DATA PROCESSING FOR CONTRACT MANAGEMENT

We collect personal data when you voluntarily provide it to us as part of an order, booking, or when contacting us (e.g. via contact form, free inquiry, or email). Mandatory fields are marked as such because in these cases we require the data to process the contract or handle your request, and without this information you cannot complete the booking or submit your inquiry.

The data collected can be seen from the respective input forms.

We use the data you provide to process contracts and handle your inquiries (including inquiries regarding warranty or service disruption claims and statutory update obligations where applicable) pursuant to Art. 6(1)(b) GDPR.

Further information regarding the processing of your data, especially the transfer to service providers for payment, booking, and communication processing, can be found in the following sections of this Privacy Policy.

After complete processing of the contract, your data will be restricted for further processing and deleted after the expiration of retention periods required under tax and commercial law pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to further use data as legally permitted and explained in this policy.

2.2 CONTACTING US

As part of customer communication, we collect personal data to process your inquiries pursuant to Art. 6(1)(b) GDPR when you voluntarily provide it to us when contacting us (e.g. via contact form, free inquiry request, or email).

Mandatory fields are marked as such because we require this data to process your inquiry. The data collected can be seen from the respective input forms.

After your request has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data beyond this where legally permitted and explained in this policy.

2.3 EMAIL COMMUNICATION

Our website uses email delivery services and SMTP technologies to ensure reliable and secure email communication.

When you contact us or submit forms on our website, the transmitted data (such as your name, email address, message content, IP address, and technical metadata) may be processed for the purpose of handling your request and ensuring proper email delivery.

The processing is carried out on the basis of Art. 6(1)(b) GDPR (contractual or pre-contractual communication) and Art. 6(1)(f) GDPR based on our legitimate interest in reliable communication and website functionality.

Depending on the configured email provider, data may be processed on external mail servers.

3. SOCIAL MEDIA

OUR ONLINE PRESENCE ON FACEBOOK (BY META), INSTAGRAM (BY META)

If you have given your consent to the respective social media operator pursuant to Art. 6(1)(a) GDPR, your data will automatically be collected and stored for market research and advertising purposes when visiting our online presences on the social media platforms mentioned above. Usage profiles may be created from this data using pseudonyms. These may be used to display advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose.

Detailed information regarding the processing and use of data by the respective social media operator, as well as contact options and your related rights and settings options for protecting your privacy, can be found in the providers’ privacy policies linked below. If you still require assistance, you may contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland regarding your use of our Facebook presence is generally transferred to and stored on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

There is currently no adequacy decision by the European Commission for the USA. Our cooperation is based on the Standard Contractual Clauses of the European Commission. Data processing in connection with visiting a Facebook fan page is carried out on the basis of a joint controller agreement pursuant to Art. 26 GDPR.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland regarding your use of our Instagram presence is generally transferred to and stored on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

There is currently no adequacy decision by the European Commission for the USA. Our cooperation is based on the Standard Contractual Clauses of the European Commission. Data processing in connection with visiting an Instagram fan page is carried out on the basis of a joint controller agreement pursuant to Art. 26 GDPR.

4. CONTACT OPTIONS AND YOUR RIGHTS

4.1 YOUR RIGHTS

  • Pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us;
  • Pursuant to Art. 16 GDPR, the right to request immediate correction of inaccurate or completion of your personal data stored by us;
  • Pursuant to Art. 17 GDPR, the right to request deletion of your personal data stored by us;
  • Pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data;
  • Pursuant to Art. 20 GDPR, the right to receive your personal data in a structured, commonly used, and machine-readable format;
  • Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.
RIGHT TO OBJECT

Where we process personal data based on our overriding legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing with future effect.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.

4.2 KONTAKTMÖGLICHKEITEN

Bei Fragen zur Erhebung, Verarbeitung oder Nutzung Ihrer personenbezogenen Daten, bei Auskünften, Berichtigung, Einschränkung oder Löschung von Daten sowie Widerruf erteilter Einwilligungen oder Widerspruch gegen eine bestimmte Datenverwendung wenden Sie sich bitte direkt an uns über die Kontaktdaten in unserem Impressum.

5. Plugins

5.1 Calendly

We use the appointment scheduling service “Calendly” on our website.

The provider is Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA.

When you book an appointment via Calendly, the data you enter (such as your name, email address, phone number, and any additional voluntary information) is transmitted to Calendly and processed there. In addition, technical data such as your IP address, referrer URL, device information, and timestamps may also be processed.

The use of Calendly is intended to provide a simple and efficient way to schedule appointments.

The processing is carried out on the basis of Art. 6(1)(b) GDPR (pre-contractual measures and appointment scheduling) as well as Art. 6(1)(f) GDPR based on our legitimate interest in user-friendly appointment management.

Data may be transferred to and processed on servers located in the United States. According to Calendly, the provider uses Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

For more information, please refer to Calendly’s privacy policy: https://calendly.com/legal/privacy-notice

5.2 Cookie Consent Management with Cookiebot

We use the consent management service “Cookiebot” to manage and document user consent for cookies and similar technologies on our website.

The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Cookiebot helps us comply with legal obligations under applicable data protection laws by storing and documenting users’ consent preferences.

When visiting our website, Cookiebot may process the following data:

Consent status and preferences
IP address (in anonymized form where applicable)
Browser and device information
Date and time of consent
URL accessed

The legal basis for this processing is Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management).

Consent data is stored in order to fulfill our legal obligation to provide proof of consent.

For more information, please refer to Cookiebot’s privacy policy: https://www.cookiebot.com/en/privacy-policy

5.3 Wordfence Security

We use the security plugin “Wordfence” on our website to protect against unauthorized access, cyberattacks, and malicious activities.

The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.

Wordfence processes technical data such as IP addresses, browser information, login attempts, visited URLs, and security-related event data in order to detect and prevent security threats.

For this purpose, cookies may be used and server log data may be analyzed.

The use of Wordfence is based on Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our website against misuse, attacks, and unauthorized access.

It cannot be excluded that data may be transferred to servers located in the United States. According to the provider, appropriate safeguards such as Standard Contractual Clauses (SCCs) are used where required.

Further information can be found in Wordfence’s privacy policy: https://www.wordfence.com/privacy-policy/

5.4 Caching and Performance Optimization

This website uses caching and performance optimization technologies to improve loading times and user experience.

For this purpose, we use the WordPress plugin “WP Rocket” provided by WP Media.

Caching may temporarily store technical information in your browser or on the server to ensure faster page delivery and optimized website performance.

The use of these technologies is based on Art. 6(1)(f) GDPR due to our legitimate interest in providing a technically optimized and efficient website experience.

Further information can be found here: https://wp-rocket.me/privacy-policy/

5.5 Activity Log

For security, maintenance, and administrative purposes, this website stores activity logs related to actions performed within the website system.

These logs may include information such as:

IP addresses
Login attempts
User account activities
Changes made within the website
Timestamps and technical event data

The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in ensuring the security, stability, and proper administration of the website.

The stored log data is only accessible to authorized administrators and is not shared with third parties unless legally required.