Privacy policy

This website is deliberately simple: no forms, no cookies, no analytics and no third-party content. Some personal data is still processed; here is what and why.

1. Controller

Sebastian Faust [full legal name] · NIF/NIE: [NIE] · [full address], Spain · E-mail: [e-mail address] · Phone and WhatsApp: +34 699 27 63 28

2. Visiting the website

To show you this website, the server has to process your IP address and some data sent by your browser (for example the requested page, the date and time, and the browser type). This website does not keep access logs of this data. Only technical server error messages may be logged temporarily; they are used solely for security and operation.

• Purpose: delivering the website and keeping it secure and working.
• Legal basis: legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR).
• This data is not used for statistics or profiling and is not combined with other data.

The website is hosted on a server in Germany, in the data centre of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), which processes the data only on the controller’s behalf under a data processing agreement pursuant to Art. 28 GDPR. [confirm hosting provider before publishing]

3. Contact via WhatsApp or Instagram

This website only contains plain links to WhatsApp and Instagram. While you browse it, no data is sent to Meta. Only when you click one of these links do you leave this website; WhatsApp or Instagram then opens. From then on, WhatsApp Ireland Limited or Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) process your data under their own responsibility, in line with their terms and privacy policies. This may involve transfers to the USA; WhatsApp LLC and Meta Platforms, Inc. are certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission.

If you message me, I process the data you give me: your name or username, your phone number, the content of our messages and your booking details.

• Purpose: answering your enquiry and, where applicable, organising and running sessions.
• Legal basis: steps at your request before entering into a contract, and performance of the contract (Art. 6(1)(b) GDPR); for general questions, my legitimate interest in replying (Art. 6(1)(f) GDPR).
• Retention: chats that do not lead to a booking are deleted no later than 6 months after the last message; chats relating to sessions no later than 12 months after the last session, unless the law requires me to keep certain data longer (e.g. invoices).

Please do not send detailed health information via WhatsApp or Instagram.

4. Information about your health

Before a session I will ask about possible contraindications. If you tell me anything about your health, I use it only to assess whether the session is suitable for you and to look after your safety, based on your explicit consent (Art. 9(2)(a) GDPR). You can withdraw your consent at any time, without affecting the lawfulness of earlier processing; in that case I may not be able to offer the session. I delete this information no later than 12 months after the last session.

5. Invoicing

If I issue an invoice, I process the data required to meet my tax and accounting obligations (Art. 6(1)(c) GDPR) and keep it for the statutory periods.

6. Recipients

Apart from those already mentioned (the hosting provider and, if you use them, WhatsApp and Instagram), I only disclose data to authorities where legally required (e.g. the Spanish tax agency). I do not sell data or use it for advertising.

7. Cookies

This website does not use cookies or similar tracking technologies. See the cookie policy.

8. Your rights

You can request access, rectification, erasure, restriction of processing and data portability, object to processing and withdraw any consent at any time by writing to [e-mail address] or to the postal address above. Where processing is based on my legitimate interest, you can object on grounds relating to your particular situation.

If you believe I have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the data protection authority of the EU country where you habitually live.

9. Other information

Providing your data is voluntary, but without it I cannot reply to you or arrange a session. There is no automated decision-making or profiling.