Privacy Policy

The controller responsible for processing personal data on this website is:

Mona Herden
NYERÉ
Weberstraße 26
22083 Hamburg
Germany

Email: herden.mona@web.de

We process personal data only where this is necessary to operate this website, respond to enquiries, prepare or perform retreat bookings, comply with legal obligations or protect legitimate interests.

Personal data means any information relating to an identified or identifiable individual.

This website is created and published using Lovable and is available at:

https://nyere-reflect-reset-rise.lovable.app

The website is hosted through:

[INSERT VERIFIED LEGAL NAME, ADDRESS AND COUNTRY OF THE ACTUAL HOSTING PROVIDER]

When you visit the website, the hosting provider may automatically process technical information such as:

• IP address
• Date and time of access
• Requested page or file
• Referrer URL
• Browser and device information
• Operating system
• Access status and transferred data volume

This processing is necessary to deliver the website securely and reliably. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.

Server log data is deleted after [INSERT RETENTION PERIOD], unless longer retention is necessary to investigate security incidents or comply with legal obligations.

We do not use optional analytics, advertising or marketing cookies.

Technically necessary functions may store limited information where this is required to provide the website or remember essential interface settings. Such processing is based on Article 6(1)(f) GDPR or, where legally required, your consent.

[IMPORTANT: Publish this section only after Lovable’s “flock” analytics script has been disabled or after its function, provider, data categories, retention and legal basis have been verified and disclosed.]

The website does not intentionally load fonts, maps, videos or social-media content directly from third-party providers.

[IMPORTANT: The current website loads Google Fonts directly. Either self-host the fonts before publishing this wording or add a complete Google Fonts disclosure, including the provider and any relevant third-country transfer information.]

If you contact us by email or submit a request through the website, we process the information you provide. This may include:

• First and last name
• Email address and telephone number
• Country
• Preferred room type
• Whether you are travelling alone or with another person
• Yoga experience
• Dietary or accessibility requirements
• Your expectations and optional message
• Date and content of correspondence

The purpose is to respond to your enquiry, assess availability, prepare an individual booking offer and, where applicable, perform the retreat contract.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract or to perform an existing contract. General enquiries are processed under Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

The website form is provided through:

[INSERT FORM OR BACKEND PROVIDER, REGISTERED ADDRESS, PROCESSING LOCATION AND RELEVANT DATA-TRANSFER INFORMATION]

At present, the website form is not connected to a backend and does not transmit registration requests. This policy must be updated before the form is activated.

If you contact us by email, your message and associated metadata are processed through our email service provider. Email communication may not be fully secure. Please do not send detailed medical records or other unnecessary sensitive information by ordinary email.

We retain enquiry correspondence for up to six months after the enquiry has been resolved, unless it leads to a booking or a longer retention period is required for legal reasons.

If you book NYERÉ, we process the information necessary to:

• Confirm and administer your booking
• Allocate your room
• Issue invoices
• Receive and reconcile bank transfers
• Communicate important retreat information
• Perform the agreed retreat services
• Comply with tax, accounting and travel-law obligations
• Establish, exercise or defend legal claims

Payments are made by bank transfer. We process the account holder's name, payment reference, amount, payment date and the bank information included in the transaction.

The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.

Booking and accounting information is retained for the applicable statutory retention period. Data not required for accounting, contractual or legal purposes is deleted earlier.

Information about allergies, dietary needs, accessibility requirements or health limitations may reveal health-related information and can therefore constitute special-category personal data.

We ask you to provide only information that is relevant to your safe participation or to services you request.

Where Article 9 GDPR applies, we process such information on the basis of your explicit consent under Article 9(2)(a) GDPR. You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal but may limit our ability to accommodate particular requirements.

This information is accessible only to persons who require it to organise the retreat safely. It is deleted no later than three months after the retreat unless continued retention is legally necessary.

NYERÉ does not currently share participant data with Monte Naturivo Wellbeing Center. If it later becomes necessary to share dietary, accessibility or other participant information with the venue or a catering provider, participants will be informed before such disclosure and an appropriate legal basis will be established.

If you request a matched twin room, we may process your room-sharing preferences, sleep rhythm and other information you voluntarily provide for matching purposes.

The legal basis is Article 6(1)(b) GDPR. We do not disclose your questionnaire responses to another participant without your permission. Contact details are exchanged between matched roommates only where both participants have agreed.

Room-matching information is deleted no later than three months after the retreat unless longer retention is legally necessary.

Personal data may be accessible to:

• Website hosting and technical service providers
• The provider used to receive website forms
• Email and IT service providers
• Banks and payment service providers involved in bank transfers
• Tax advisers, accountants, insurers or legal advisers where necessary
• Public authorities where disclosure is legally required
• Members of the NYERÉ team who require the information to perform the retreat

Service providers acting on our behalf are engaged under applicable data-protection requirements.

Where a service provider processes data outside the European Economic Area, we ensure that a lawful transfer mechanism is available, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with any necessary supplementary safeguards.

[COMPLETE THIS SECTION AFTER VERIFYING LOVABLE, THE HOSTING PROVIDER AND THE FORM PROVIDER.]

Subject to the applicable legal requirements, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Receive data you provided in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time with effect for the future
• Lodge a complaint with a data-protection supervisory authority

To exercise your rights, contact herden.mona@web.de.

The competent supervisory authority is generally:

The Hamburg Commissioner for Data Protection and Freedom of Information
Hamburg, Germany
https://datenschutz-hamburg.de

Information marked as required is necessary for us to process your enquiry or booking. Without it, we may be unable to respond, prepare a booking offer or perform the requested services.

Providing optional information is voluntary.

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

We may update this privacy policy when the website, booking process, service providers or legal requirements change. The current version is always available on this website.