Privacy Policy

1. Responsible Entity

Responsible for the processing of personal data on this website:
Julia Dencker - The Peaceful Path
Steinweg 46, 06484 Quedlinburg, Germany
Email: contact@the-peaceful-path.com

2. General Information about Data Processing

The protection of your personal data is very important to me. Data processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This Privacy Policy applies to the following:

• https://the-peaceful-path.com

• https://the-peaceful-path.com/en

• All subpages and profiles on LinkedIn, Instagram, Facebook, YouTube (Google), Spotify, Steady, Wonderlink, and Lnk.Bio.

• Data processing via payment providers (PayPal, Stripe, Klarna).

Legal Bases for Data Processing:

• Consent (Art. 6 para. 1 lit. a GDPR): For specific consents such as newsletter subscriptions or cookie settings.

• Contract Fulfillment (Art. 6 para. 1 lit. b GDPR): For data necessary to process orders or inquiries.

• Legal Obligation (Art. 6 para. 1 lit. c GDPR): E.g., tax compliance.

• Legitimate Interest (Art. 6 para. 1 lit. f GDPR): For security and functionality of the website.

3. Hosting and Technical Infrastructure

This website is hosted by Hostinger International Ltd.

Data Processed: IP addresses, server logs (temporarily stored).
Purpose: To operate and secure the website.
Hostinger Privacy Policy: https://www.hostinger.com/privacy-policy

4. Processing of Personal Data

a) Contact Form, Downloads, and Shop Transactions

• Data: Name, email address, phone number (optional), organization (optional).

• Purpose: Responding to inquiries, sending digital resources, processing purchases.

• Legal Basis: Contract fulfillment (Art. 6 para. 1 lit. b GDPR).

b) Newsletter

• Data: Name and email address.

• Purpose:

  • Monthly updates for Steady members.

  • Up to 12 times per year updates for other buyers and interested parties.

• Legal Basis:

  • Consent (Art. 6 para. 1 lit. a GDPR) for Steady.

  • Legitimate interest (Art. 6 para. 1 lit. f GDPR) for periodic emails.

c) Embedded Content (YouTube, Spotify)

• Data: Cookies, usage data (processed by platforms).

• Privacy Policies:

  • YouTube (Google): https://policies.google.com/privacy

  • Spotify: https://www.spotify.com/privacy
    Note: Google collects data whenever YouTube is accessed.

d) Payment Providers in the Shop

• Data: Name, payment information, order data.

• Purpose: Processing payments via PayPal, Stripe, Klarna.

• Privacy Policies:

  • PayPal: https://www.paypal.com/privacy

  • Stripe: https://stripe.com/privacy

  • Klarna: https://cdn.klarna.com/privacy

e) Steady (Membership Area)

• Data: Name, email address, payment details (processed by Steady).

• Purpose: Managing memberships.

• Privacy Policy: https://steadyhq.com/privacy

f) Wonderlink and Lnk.Bio

• Data: IP address, device data, click behavior.

• Purpose: Making links to content and offers accessible.

• Privacy Policies:

  • Wonderlink: https://wonderlink.io/privacy

  • Lnk.Bio: https://lnk.bio/privacy-policy

5. Cookies and Tracking

• Tools Used: Cookie banner for obtaining consent.

• Data: Tracking data, cookie preferences.

• Legal Basis: Consent (Art. 6 para. 1 lit. a GDPR).

6. Data Processing on Social Media Platforms

I manage pages on Instagram, Facebook, and LinkedIn.

Privacy Policies:

• Instagram: https://privacycenter.instagram.com/policy

• Facebook: https://www.facebook.com/privacy/policy

• LinkedIn: https://linkedin.com/legal/privacy-policy

7. User Rights

As a user, you have the following rights regarding the processing of your personal data:

• Right to Access (Art. 15 GDPR):
  You have the right to request confirmation of whether your personal data is being processed. If so, you are entitled to the following information:

  • The purposes of processing.

  • The categories of personal data being processed.

  • The recipients or categories of recipients to whom your data has been or will be disclosed.

  • The planned storage duration or, if not possible, the criteria used to determine the storage period.

• Right to Rectification (Art. 16 GDPR):
  You have the right to request the correction of inaccurate or the completion of incomplete personal data without undue delay.

• Right to Erasure (Art. 17 GDPR):
  You have the right to request the deletion of your personal data if:

  • The data is no longer necessary for the purposes for which it was collected.

  • You withdraw your consent, and there is no other legal basis for processing.

  • You object to the processing (see point 5).

  • The processing is unlawful.

• Right to Restriction of Processing (Art. 18 GDPR):
  You have the right to request the restriction of processing your data if:

  • You contest the accuracy of the data (for the duration of the verification).

  • The processing is unlawful, but you oppose erasure and request restriction instead.

  • I no longer need the data, but you require it for establishing, exercising, or defending legal claims.

  • You have objected to the processing (for the duration of the balancing of interests).

• Right to Object (Art. 21 GDPR):
  You may object to the processing of your personal data at any time if it:

  • Is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

  • Is carried out for the purpose of direct marketing.
    Upon objection, your data will no longer be processed unless I can demonstrate compelling legitimate grounds for the processing.

• Right to Data Portability (Art. 20 GDPR):
  You have the right to receive the data you provided to me in a structured, commonly used, and machine-readable format or to request its transmission to another controller.

• Right to Withdraw Consent (Art. 7 para. 3 GDPR):
  If you have given consent for processing, you may withdraw it at any time with future effect.

• Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR):
  You have the right to file a complaint with a data protection authority, particularly in the Member State of your residence, workplace, or where the alleged violation occurred, if you believe that the processing of your personal data violates the GDPR.

Competent Supervisory Authority:
State Commissioner for Data Protection Saxony-Anhalt
Leiterstraße 9, 39104 Magdeburg, Germany
Website: https://datenschutz.sachsen-anhalt.de/

8. Changes to this Privacy Policy

This Privacy Policy was last updated on December 4, 2024. Changes will be made as needed.