This legal text is available in English and German.
1. Controller
The controller responsible for data processing on this website is Isabel Burkhard, Anglerstraße 15, 80339 München, Germany, email contact@sati.earth.
2. Your rights
You have the right to:
- access the personal data we hold about you (Art. 15 GDPR)
- have it corrected (Art. 16) or deleted (Art. 17)
- restrict its processing (Art. 18)
- receive it in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw any consent at any time, with effect for the future (Art. 7 (3))
You also have the right to lodge a complaint with a data protection supervisory authority. For us this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
3. Hosting and server logs
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit, the server automatically records technical data: IP address, date and time, page requested, browser and operating system. We need this to deliver the website securely. Legal basis: Art. 6 (1)(f) GDPR. Log files are deleted after 14 days. We have a data processing agreement with the host. Our email (contact@sati.earth) also runs on Hostinger.
4. Cookies and consent
We use the consent tool Real Cookie Banner to ask for and record your consent. Essential cookies are needed for the website to work and are always active. Any other cookies are only set if you agree. Your choice is stored in a cookie in your browser and as a consent record (pseudonymous ID, date, time and choice) on our server, so we can prove your consent as required by Art. 7 (1) GDPR. Consent records are deleted after twelve months. Legal basis: § 25 (2) no. 2 TDDDG for essential cookies, § 25 (1) TDDDG together with Art. 6 (1)(a) GDPR for all others, and Art. 6 (1)(c) GDPR for the consent record. You can change your choice at any time via "Cookie settings" in the footer.
5. Statistics
We use Koko Analytics to count page views. It runs on our own server, with its cookie option switched off, and stores no personal data or IP addresses. Nothing is read from or stored on your device. Legal basis: Art. 6 (1)(f) GDPR, our interest in understanding how the website is used.
6. Contact form and email
Messages from our website forms (contact form, programme finder, feedback) are stored in a protected database on our website server at Hostinger (section 3) and reach us as an email. When you contact us, we process your name, email address, organisation, phone number if you give it, and your message to answer your enquiry and, where relevant, to prepare a proposal or contract. Legal basis: Art. 6 (1)(b) GDPR for enquiries before a contract, otherwise Art. 6 (1)(f). We delete enquiries that don't lead to a contract twelve months after our last contact. If a contract follows, invoices and related business records are kept for the statutory periods of the German Commercial and Tax Codes (up to eight years for invoices and accounting records, six years for business letters), and then deleted.
6b. Contracts, invoices and payment
When you book a service, we process your name, address, billing details and the service booked to carry out the contract and to invoice it. Payment is made by bank transfer, so your bank details reach us through the transfer. Legal basis: Art. 6 (1)(b) GDPR, and Art. 6 (1)(c) GDPR together with § 147 AO for keeping invoices.
7a. Programme finder
Your answers in the programme finder are processed in your browser. They reach us only if you choose to send your summary. We then store your answers and suggested path together with your name, email address and phone number, so we can reply and suggest a next step. They are handled like a message through the contact form (section 6), including the legal basis and deletion periods.
7b. Stay connected and the SATI Network
If you fill in our "Stay connected" form, we process the details you give us (such as name, email, where you are based, your work, skills, qualifications, interests and, if you choose, phone, WhatsApp and social media) to stay in touch with you and to keep an organised directory of the people we collaborate with. Legal basis: your consent, Art. 6 (1)(a) GDPR. The details are stored on our own website server at Hostinger (section 3). We don't share them with third parties. We delete them when you withdraw your consent, or at the latest three years after our last contact.
If you also agree to receive occasional news about events, workshops and collaboration opportunities, we send them by email only after you have confirmed your address (double opt in). Every email contains a way to unsubscribe.
If you are a practitioner in the SATI Network, we publish your profile page only with the content you have approved, and remove it whenever you ask.
7c. Feedback
If you send us feedback through the feedback button, we process your message, the page it refers to and, if you add it, your email address, to improve our website and services. Legal basis: Art. 6 (1)(f) GDPR. We delete feedback twelve months after receiving it.
8. Booking calls and sessions
We arrange calls and sessions by email, after you contact us through a form on this website (section 6). We do not use an online booking tool at the moment. If we add one, we will update this policy before it goes live.
9. Fonts
The fonts on this website are hosted locally on our server. No connection to external font servers such as Google is made.
10. Sessions and health information
For individual sessions such as Zenthai Shiatsu, we may ask about health conditions so we can work safely. This is sensitive data under Art. 9 GDPR. We only process it with your explicit consent (Art. 9 (2)(a)), keep it confidential, and delete it three years after your last session, the general limitation period for possible claims. You can withdraw your consent at any time.
11. Workshops and photos
For workshops we process participant names and contact details to deliver the session (Art. 6 (1)(b) GDPR) and delete participant lists twelve months after the workshop, unless they are part of an invoice. The reflection survey is anonymous. We only take or publish photos with the consent of the people shown (Art. 6 (1)(a) GDPR), and you can withdraw that consent at any time.
12. Working with David Codesido
Sessions are delivered together with David Codesido, who works from Portugal, within the EU. Where needed to deliver a service, we share your name and booking details with him, on the basis of a written agreement that binds him to confidentiality and data protection.
13. LinkedIn
Links to our LinkedIn profiles are plain links. LinkedIn only receives data if you click them.
14. Encryption
This website uses TLS encryption. You can tell by "https://" and the lock symbol in your browser's address bar.
15. Do you have to provide data?
You don't have to provide personal data to use this website. To answer an enquiry or carry out a booking, we need your name and email address. Without them, we cannot respond or deliver the service.
16. No automated decisions
We don't use automated decision making or profiling according to Art. 22 GDPR.
17. Your right to object
Where we process your data on the basis of legitimate interest (Art. 6 (1)(f) GDPR), you can object at any time for reasons arising from your particular situation (Art. 21 GDPR). We will then stop, unless we can show compelling legitimate grounds that override your interests, or the processing serves legal claims. An email to the address above is enough.
18. Changes
We update this policy when our services or the law change. The version published here applies.