top of page

Privacy Policy

Controller

​

Nathalie Zimmer

Moisés Bertoni 1153 C/ Malutín

Unidad 40 +595 994 357 834

Asunción 001411 Paraguay

​

Contact

Please direct inquiries via the contact form on this website. Responses are typically provided within 48 hours.

​

General Information on Data Processing

The Entfaltungswerk website creates spaces for individuals worldwide to foster potential development and personal well-being, e.g., through digital courses like “Inner Serenity.” The activity is primarily non-profit and aimed at supporting personal growth, with a partly charitable character. The website can be used without providing personal data where technically feasible. Personal data is collected only if you provide it voluntarily, e.g., for course registrations, forms, or webinar participation. Processing complies with the General Data Protection Regulation (GDPR) for EU users and Paraguayan data protection regulations. Only the data necessary for the respective purpose is processed to protect your privacy.

​

Purposes of Data Processing

Personal data is processed for: 

  • Registration for courses or webinars with voluntary energy exchange (via PayPal, by agreement) 

  • Managing contact or registration forms (via Jotform) 

  • Organizing webinars (via Microsoft Teams) 

  • Arranging appointments for courses or webinars (via ical.com or similar services) 

  • Automating processes (via Zapier, Make)

Processing is limited to what is technically and functionally necessary.

Categories of Data Processed

  • Contact forms: Name, email address 

  • Course or webinar registrations: Name, email address, possibly energy exchange data 

  • Webinars/Appointments: Name, email address, possibly participation data 

  • Automation: Data for process management (e.g., form data)

Cookies and Third-Party Providers

Entfaltungswerk does not set its own cookies. The website is hosted by Wix, which may set essential cookies (for functionality) and non-essential cookies (e.g., for analytics or marketing). You can disable non-essential cookies via a consent tool or your browser settings, which may restrict certain features. Third-party providers (Jotform, PayPal, Microsoft Teams, Zapier, Make, ical.com) may also use cookies for functions like form management, energy exchange, or appointment arrangements. Details are available in the providers’ privacy policies: 

Server Log Data

Each access to the website generates anonymous data (e.g., browser type, operating system, referrer URL, IP address, date/time) in server log files, including those collected by Wix. These serve the technical provision, optimization, and security of the website and are stored separately from personal data.

Data Transfers to Third Countries

Personal data may be transferred to the USA or other third countries when using third-party providers (Wix, Jotform, PayPal, Microsoft Teams, Zapier, Make, ical.com) to provide services like hosting, forms, energy exchange, webinars, or appointment arrangements. Where possible, EU servers are used (e.g., Jotform Enterprise, Microsoft Teams EU data centers, Make in Prague). For transfers to third countries, providers use Standard Contractual Clauses (SCCs) under Art. 46 GDPR or the EU-U.S. Data Privacy Framework (e.g., Wix, Jotform, Zapier). I verify the suitability of these measures and implement additional safeguards, such as encryption, to ensure an adequate level of data protection.

Legal Basis for Processing

Processing is based on: 

  • Art. 6(1)(a) GDPR: Consent (e.g., contact forms) 

  • Art. 6(1)(b) GDPR: Contract performance (e.g., course registrations, webinars) 

  • Art. 6(1)(f) GDPR: Legitimate interest (e.g., technical security of the website)

Storage Duration

Data is stored only as long as necessary for the purpose or legal retention obligations. It is then routinely deleted.

Data Subject Rights

You have the following rights: 

  • Access to stored data (Art. 15 GDPR) 

  • Rectification of inaccurate data (Art. 16 GDPR) 

  • Erasure, unless retention obligations apply (Art. 17 GDPR) 

  • Restriction of processing (Art. 18 GDPR) 

  • Objection for specific reasons (Art. 21 GDPR) 

  • Data portability (Art. 20 GDPR) 

  • Withdrawal of consent (Art. 7(3) GDPR)

To exercise your rights, use the contact form. Complaints can be filed with a data protection supervisory authority, e.g., in your country of residence (EU).

Technical and Administrative Measures

I implement measures such as encrypted data transmission (e.g., HTTPS) and access restrictions to protect your data. Internet-based transmissions may have vulnerabilities, and absolute protection cannot be guaranteed.

No Profiling or Automated Decision-Making

No automated decision-making or profiling takes place.

Changes to This Privacy Policy

This policy is updated as needed due to changes to the website or legal requirements.

bottom of page