Mindfulness & stress prevention

Privacy policy

Last updated: 27 September 2026

1. Controller

Responsible for data processing on this website:

This privacy policy explains which personal data is processed when you use this website and our services, for which purposes, and which rights you have under the General Data Protection Regulation (GDPR).

2. General principles of data processing

Personal data is processed only to the extent necessary and on the basis of a legal ground, in particular:

• Performance of a contract (Art. 6(1)(b) GDPR) – e.g. to book and deliver appointments and programmes
• Consent (Art. 6(1)(a) GDPR) – e.g. newsletter sign-up or getting in touch
• Legitimate interest (Art. 6(1)(f) GDPR) – e.g. secure and stable provision of the website
• Legal obligation (Art. 6(1)(c) GDPR) – e.g. retention duties under tax and accounting law

3. Provision of the website / server log files

When you visit this website, the hosting provider automatically records technical access data (server log files), e.g. IP address, date and time of access, page requested, browser type and operating system. This data serves the technical provision and security of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.

4. Cookies

This website may use cookies to enable certain functions and to make the site user-friendly. Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR. Where cookies are used for statistical or marketing purposes (e.g. analytics tools), this happens only after prior consent given through a cookie consent tool.

5. Contact by email, phone or contact form

If you contact us by email, phone or through a contact form, the data you provide (e.g. name, email address, phone number, content of your message) is stored in order to process your enquiry (Art. 6(1)(b) or (f) GDPR). This data is not passed on to third parties without your consent and is deleted once your enquiry has been dealt with, unless statutory retention obligations apply.

6. Appointment booking via a third-party provider

The third-party provider Cal.com is used for booking individual appointments. When booking, you transmit personal data (e.g. name, email address) directly to Cal.com. The privacy policy of Cal.com applies. The processing serves the performance of a contract (Art. 6(1)(b) GDPR).

Cal.com privacy policy: https://cal.com/de/privacy

7. Special categories of personal data (health-related information)

As part of the intake or preliminary clarification for individual or group guidance, it may be necessary to collect health-related information (e.g. pre-existing conditions, physical limitations) in order to ensure the suitability and safety of the mindfulness, body and breathing work offered. Such information constitutes a special category of personal data under Art. 9 GDPR and is processed exclusively with your explicit consent (Art. 9(2)(a) GDPR). It is treated as strictly confidential, is not passed on to third parties, and is used solely to deliver the booked service safely.

You are not obliged to provide health-related information; however, this may limit participation in certain offerings.

8. Payment processing

Payments may be processed through various providers (e.g. credit card, instant bank transfer, bank transfer). Data collected during the payment process is transmitted solely to the respective payment service provider in order to process the payment (Art. 6(1)(b) GDPR). The privacy terms of the respective payment provider apply.

9. Social media presences

We maintain profiles on platforms such as Instagram, TikTok and/or LinkedIn in order to communicate with interested people and clients. When you visit these profiles, data may also be processed by the respective platform operator outside Jelsana's area of responsibility. The privacy notices of the respective platform operators apply.

10. Retention period

Personal data is stored only for as long as necessary for the stated purposes or as required by statutory retention periods (e.g. tax retention obligations of up to 7 years). After that the data is deleted or anonymised.

11. Your rights as a data subject

With regard to your personal data you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR) with effect for the future

An informal message to kontakt@jelsana.com is sufficient to exercise these rights.

12. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR:

13. Data security

For security reasons this website uses SSL/TLS encryption to protect transmitted data. We take appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access.

14. Changes to this privacy policy

This privacy policy is adapted as needed to reflect changes in the law or changes to our services and data processing. The version currently published on the website applies.