Privacy Policy (GDPR Compliant)

Last updated: 04.08.2025

1. Introduction

We take the protection of your personal data seriously. This privacy policy explains what personal data we collect, how we use it, and your rights in accordance with the General Data Protection Regulation (GDPR).

2. Controller

The data controller for this website is:

Sophia Heldens
Sophie Heldens Tantra
Muskauer Straße 52
10997 Berlin, Germany
Email: sophieheldens@gmail.com

3. What Data We Collect and Why

a) Website Access & Analytics

When you visit our website, we automatically collect data such as:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Referring websites

This data is processed via Google Analytics and Google Search Console for website optimization and traffic analysis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

b) Contact Form

If you contact us via our website form, we collect:

  • Your name

  • Your email address

  • Your message

Purpose: To respond to inquiries
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps)

c) Event Sign-Up & Ticketing

If you sign up for events via Eventbrite, your data is processed by them and shared with us, including:

  • Full name

  • Email address

  • Payment details (handled by Stripe/Eventbrite)

Please also review Eventbrite’s Privacy Policy.

Legal basis: Art. 6(1)(b) GDPR

d) Newsletter

When you sign up for our newsletter, we collect:

  • Your name

  • Your email address

You can unsubscribe at any time using the link in every email.

Legal basis: Art. 6(1)(a) GDPR (consent)

e) Payments via Stripe

For payment processing, we use Stripe, which may process:

  • Cardholder name

  • Email address

  • Billing information

See Stripe’s Privacy Policy.

Legal basis: Art. 6(1)(b) GDPR

f) Embedded Content (Instagram)

Our website may embed content from third parties such as Instagram. These platforms may collect your IP address and use cookies.

See:

Legal basis: Art. 6(1)(f) GDPR

4. Use of Cookies

We use cookies to:

  • Analyze traffic (via Google Analytics)

  • Integrate social media features

  • Improve user experience

On your first visit, we ask for consent to set non-essential cookies via a cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent)

5. Your Rights under GDPR

You have the right to:

  • Access your data (Art. 15)

  • Rectify incorrect data (Art. 16)

  • Erase your data (Art. 17)

  • Restrict processing (Art. 18)

  • Object to processing (Art. 21)

  • Data portability (Art. 20)

  • Withdraw consent at any time (Art. 7(3))

To exercise your rights, contact: sophieheldens@gmail.com

6. Data Retention

We retain your data only as long as necessary to fulfill the purpose or comply with legal requirements.

7. Hosting & Security

This website is hosted on Squarespace, which uses secure, encrypted data centers.

See Squarespace’s Privacy Policy

8. Changes to This Policy

We may update this policy to remain compliant with legal requirements. Please check this page regularly for updates.

9. Contact

For questions about this policy or your data:
Sophia Heldens
Email: sophieheldens@gmail.com