PRIVACY POLICY — MOVE IN SERENITY

Last updated: 22. june 2026

1. CONTROLLER

Thyra-Valeska von dem Bussche, trading as Move in Serenity — Z4016477S — Calle Carril Circunvalación, Bloque 3, 1 Izquierda, 29451 Parauta, Spain. contact@moveinserenity.com

2. DATA WE COLLECT

- Identification & contact: name, email, (optional) phone.

- Booking & billing: session/workshop booked, date, payment record.

- Health information (special category, Art. 9): only what you share in an intake/session, to make practice safe. Processed ONLY with explicit consent.

- Communications; newsletter status.

- Technical: IP, device/browser, usage — via cookies.

3. WHY & LEGAL BASIS

- Deliver a booked session/workshop — contract (6.1.b).

- Process health data for safe practice — explicit consent (9.2.a).

- Newsletter — consent (6.1.a), withdrawable.

- Tax/accounting — legal obligation (6.1.c).

- Secure/improve site — legitimate interest (6.1.f).

4. PROCESSORS (several US-based, under SCCs / EU-US Data Privacy Framework)

- Squarespace — website & forms (DPA in their Terms).

- TidyCal / Sumo Group Inc. — scheduling (DPA at tidycal.com/dpa).

- Beehiiv — newsletter.

- [Zoom] — video sessions. [Google] — calendar/forms. [Stripe/PayPal/Squarespace Payments] — payments.

We never sell your data.

5. INTERNATIONAL TRANSFERS

Some providers process data outside the EEA (mainly USA), safeguarded by SCCs and/or the EU-US Data Privacy Framework.

6. RETENTION

- Booking/billing: legal tax & accounting period (up to 6 years).

- Health data: duration of working relationship, then deleted (or earlier on request).

- Newsletter: until you unsubscribe.

7. YOUR RIGHTS

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent — contact@moveinserenity.com. Complaint: Agencia Española de Protección de Datos (www.aepd.es).

8. CHANGES

Updates posted here with a new "last updated" date.