1. General Information
   The protection of your personal data is important to us. We process your data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This privacy policy explains which personal data we collect, how we use it, and your rights regarding your data.
   
   
2. Data Collection and Processing
   We collect and process personal data only to the extent necessary for the functioning of our website and the services we offer. The following types of data may be collected:
   
   Contact details (name, email address, phone number) when you reach out to us.

• Booking information when you register for a Retreat or Workshop.
• Technical data (IP address, browser type, operating system) to improve website performance.

3. Purpose of Data Processing
   We process personal data for the following purposes:

• To communicate with you and respond to inquiries.
• To process bookings and payments.
• To ensure website security and prevent fraud.
• To improve our services based on user interactions.

4. Legal Basis for Data Processing
   We process data based on:

• Your consent (Art. 6 (1) lit. a GDPR), where required.
• The necessity for contract fulfillment (Art. 6 (1) lit. b GDPR).
• Legal obligations (Art. 6 (1) lit. c GDPR).
• Our legitimate interest in maintaining and improving our services (Art. 6 (1) lit. f GDPR).

5. Data Security
   We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
   
   
6. Data Sharing
   Your data will not be shared with third parties unless:

• It is necessary to fulfill a contract (e.g., payment providers for booking transactions).
• We are legally required to do so.
• You have given explicit consent.

7. Data Retention
   We store your personal data only as long as necessary for the intended purpose or as required by legal obligations.
   
   
8. Your Rights
   Under GDPR, you have the following rights:

• Right to access your personal data.
• Right to rectification of incorrect or incomplete data.
• Right to deletion of your data (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object to data processing.
• Right to withdraw consent at any time.
  
  To exercise these rights, contact us via puertoespiritu@gmail.com

9. Cookies and Analytics
   Our website may use cookies and analytics tools to enhance user experience. You can manage cookie settings in your browser.
   
   
10. Changes to This Privacy Policy
    We reserve the right to update this policy to reflect changes in legal requirements or our data processing practices. The latest version will always be available on our website.

For further questions regarding data protection, you can contact us at puertoespiritu@gmail.com.