Privacy Policy
1. Data Controller
The data controller responsible for processing your personal information in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:
Grace Denker | ArtCraftLiving
Hammerbrookstraße 93
+49 40 25335913
2. Purpose of Data Collection
We collect and process your personal data solely for the following purposes:
- Managing and confirming your retreat booking
- Communicating retreat details and updates
- Ensuring your health, safety, and wellbeing during the retreat
- Maintaining signed waivers and consent forms for legal and insurance compliance
Your data will not be used for any other purpose without your explicit consent.
3. Data We Collect
We may collect the following categories of data:
- Full name, email address, phone number, and postal address
- Emergency contact details
- Relevant health or dietary information (only if voluntarily provided)
- Signed digital waiver and consent confirmation
- Payment and booking details (processed securely through third-party providers)
4. Legal Basis for Processing
Your personal data is processed on the following legal bases under Articles 6 and 9 of the GDPR:
- Contractual necessity (Art. 6(1)(b)): to manage your booking and participation.
- Legal obligation (Art. 6(1)(c)): to comply with insurance and recordkeeping requirements.
- Legitimate interest (Art. 6(1)(f)): to ensure the safe and smooth operation of the retreat.
- Explicit consent (Art. 9(2)(a)): for processing any health-related information or photography consent.
5. Data Storage and Security
- All personal data is stored securely on encrypted, password-protected systems within the EU.
- Booking and waiver data are retained for up to 7 years for legal and insurance purposes.
- Health and emergency contact data are deleted within 30 days after the retreat concludes.
- Access to personal data is restricted to authorized team members who are bound by confidentiality agreements.
6. Data Sharing
Your data will not be sold or shared with third parties for marketing purposes.
Data may be shared only when necessary with:
- Venue providers (for accommodation or dietary requirements)
- Insurance companies or legal advisors (in case of an incident or claim)
- Payment processors (for secure payment handling)
All third parties are contractually bound to comply with GDPR and BDSG standards.
7. Your Rights
Under the GDPR and BDSG, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): to request a copy of your data.
- Right to rectification (Art. 16 GDPR): to correct inaccurate data.
- Right to erasure (Art. 17 GDPR): to request deletion of your data (“right to be forgotten”).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object (Art. 21 GDPR): to object to certain data uses.
- Right to lodge a complaint with your local data protection authority:
Data Protection Authority (Landesbeauftragte für den Datenschutz und die Informationsfreiheit) Hamburg.
To exercise any of these rights, please contact us at info@artcraftliving.com.
8. Consent
By submitting your booking and signing the Participant Waiver, you confirm that you have read and understood this Privacy Statement and consent to the processing of your personal data as described above.