Privacy Policy

Data Controller

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed that:

Data Controller: Elisenda Cama i Gibernau
Email: shaktisama.space@gmail.com
Website: https://www.shaktisama.space
Location: Barcelona, Spain

Data Collected

The website may collect the following types of personal data:

  • Identification data: name, surname, and contact information (email, phone number).

  • Communication data: messages sent through contact forms, email, or WhatsApp.

  • Payment information: only as necessary for booking or billing sessions (processed securely through third-party platforms such as PayPal).

No sensitive personal data (e.g., health data) will be intentionally collected through this website.

Purpose of Data Processing

Your personal data are collected for the following purposes:

  • To respond to inquiries or requests made via email, contact form, or WhatsApp.

  • To manage Reiki sessions, circles, workshops, or related services.

  • To handle billing and accounting processes when applicable.

  • To send updates or information related to services (only if you’ve given prior consent).

Legal Basis for Processing

The legal bases for data processing are:

  • Consent from the user (Article 6.1.a GDPR), when you voluntarily provide your data.

  • Contractual relationship (Article 6.1.b GDPR), when data are necessary to deliver a requested service.

  • Legal obligation (Article 6.1.c GDPR), for issuing invoices or fulfilling accounting requirements.

Data Retention

Your data will be retained:

  • For as long as necessary to maintain the professional relationship.

  • Or until you request its deletion.

  • Accounting records will be stored for the legally required period (generally 5 years in Spain).

Data Sharing

Your personal data will not be shared with third parties unless required by law, or when it is necessary to provide the service (for example, payment processors or communication tools such as WhatsApp or Zoom).
These third parties act as data processors and comply with data protection regulations.

Rights of Users

You may exercise the following rights under the GDPR and LOPDGDD:

  • Access: obtain confirmation about whether your data are being processed.

  • Rectification: request correction of inaccurate or incomplete data.

  • Erasure: request deletion of your data when no longer needed.

  • Restriction: limit processing in certain circumstances.

  • Portability: receive your data in a structured, commonly used format.

  • Objection: oppose processing for legitimate reasons.

To exercise these rights, send an email to shaktisama.space@gmail.com with “Data Protection” in the subject line, along with a copy of your ID or equivalent document.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) via www.aepd.es.

Security Measures

Appropriate technical and organizational measures are applied to ensure confidentiality, integrity, and availability of personal data, preventing unauthorized access, alteration, or disclosure.

Links to Third Parties

This website may contain links to external platforms (e.g., WhatsApp).
The owner is not responsible for those platforms’ privacy practices; users are encouraged to review their respective privacy policies.

Modifications

This Privacy Policy may be updated at any time to reflect changes in legal requirements or website operation. Updates will be published on this page with the revised date.