Privacy Policy

Valid for shingon-reiki.com · Last updated: 2026

Note: This is the English translation of our German privacy policy. The German version is legally binding under EU and German law. In case of any discrepancies between the two versions, the German version prevails.

This privacy policy applies to both versions of shingon-reiki.com – the existing WordPress installation (hosted by Kinsta) as well as the new static website (hosted by Vercel). Both websites operate under the same domain and share this privacy policy. Services that are only active on the WordPress installation are marked accordingly.

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified. Detailed information can be found in the privacy policy listed below.

Data Collection on This Website

Data processing on this website is carried out by the website operators. You can find their contact details in the section "Information About the Data Controller".

Your data is collected, on the one hand, by you communicating it to us (e.g. through an opt-in form or by contacting us). Other data is collected automatically or after your consent when you visit the website by our IT systems – primarily technical data such as your browser, operating system, or the time of access.

You have the right at any time to obtain information free of charge about the origin, recipient, and purpose of your stored personal data, as well as the right to rectification or erasure. For this purpose, you may contact us at any time.

2. Hosting and Content Delivery Networks

WordPress Installation (Kinsta) · WordPress website only

Our WordPress installation is hosted by Kinsta Inc., 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA. Details: https://kinsta.com/privacy-policy/.

Domain Provisioning (ALL-INKL.COM)

Our domain is provided by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Details: https://all-inkl.com/datenschutzinformationen/.

Static Website (Vercel) · new website only

The new static version of this website is hosted by Vercel Inc., 340 Pine Street, San Francisco, CA 94107, USA. Details: https://vercel.com/legal/privacy-policy.

Cloudflare · WordPress website only

We use the Cloudflare service provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA as a Content Delivery Network and DNS service. Use is based on Art. 6(1)(f) GDPR. Details: https://www.cloudflare.com/privacypolicy/.

Google Cloud CDN · WordPress website only

We use Google Cloud CDN provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Use is based on Art. 6(1)(f) GDPR. Details: https://cloud.google.com/cdn/docs/overview.

The use of all hosting services is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation of our website. We have concluded a Data Processing Agreement (DPA) with all hosting providers.

3. General Information and Mandatory Disclosures

Information About the Data Controller

Dr. Mark Hosak
Neckargasse 1, 69412 Eberbach, Germany
Phone: +49 152 29566933
Email: support@shingon-reiki.de

Eileen Wiesmann
Neckargasse 1, 69412 Eberbach, Germany
Email: eileen@shingon-reiki.de

The data controller is the natural person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Storage Duration

Unless a more specific storage duration has been mentioned within this privacy policy, your personal data will remain with us until the purpose for processing the data ceases to apply. If you assert a legitimate request for erasure or revoke your consent, your data will be deleted, unless we have other legally permissible reasons for storing it.

General Information on Legal Basis

Insofar as you have consented to data processing, we process your data on the basis of Art. 6(1)(a) GDPR. If your data is required for the performance of a contract, processing is based on Art. 6(1)(b) GDPR. Further processing may be based on Art. 6(1)(c) or (f) GDPR.

Information on Data Transfer to the USA and Other Third Countries

Among other things, we use tools from companies based in the USA. When these tools are active, your personal data may be transferred to these third countries and processed there. We point out that in these countries, a level of data protection comparable to that of the EU cannot be guaranteed.

Right to Withdraw Consent for Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent already given at any time. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY.

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged violation.

Right of Access, Erasure, and Rectification

Within the framework of applicable legal provisions, you have the right at any time to obtain free information about your stored personal data and the right to rectification or erasure of this data. For this purpose, you may contact us at any time.

Right to Restriction of Processing

You have the right to demand the restriction of the processing of your personal data if you contest the accuracy of the data, if processing is unlawful, or if you need the data to assert legal claims.

SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" and the lock symbol in your browser bar.

Objection to Promotional Emails

The use of contact data published in the context of the imprint obligation for the purpose of sending unsolicited advertising is hereby objected to. The operators expressly reserve the right to take legal action in the event of unsolicited advertising material.

4. Data Collection on This Website

Cookies

Our website uses cookies. Cookies are small data packets stored on your device. Session cookies are automatically deleted at the end of your visit; permanent cookies remain on your device until you delete them. Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. For all other cookies, we obtain your consent.

CCM19 · new website

Our website uses CCM19 to obtain your consent for the storage of certain cookies on your device or for the use of certain technologies, and to document this in compliance with data protection law. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (hereinafter "CCM19").

When you enter our website, a connection is established with the CCM19 servers to obtain your consents and other declarations on cookie use. CCM19 then stores a cookie in your browser to assign the consents you have given or their revocation to you. The data collected in this way is stored until you request its deletion, delete the CCM19 cookie yourself, or the purpose of data storage no longer applies. Mandatory statutory retention periods remain unaffected.

The use of CCM19 is intended to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR. We have concluded a Data Processing Agreement (DPA) with CCM19.

Real Cookie Banner · WordPress website only

Our WordPress website uses the consent technology Real Cookie Banner provided by devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. Real Cookie Banner is installed locally on our servers, so no connection is established with the provider's servers. Real Cookie Banner stores a cookie in your browser to assign the consents you have given or their revocation to you. The data collected in this way is stored until you request its deletion, delete the Real Cookie Banner cookie yourself, or the purpose of data storage no longer applies.

The use of Real Cookie Banner is intended to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Server Log Files

The provider of the pages automatically collects and stores information in server log files: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, IP address. This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR.

Contact Form · WordPress website only

If you send us inquiries via the contact form, your details, including the contact data you provide, will be stored by us for the purpose of processing the request. This data will not be shared without your consent. Legal basis: Art. 6(1)(b) or (f) GDPR.

Inquiry by Email or Phone

If you contact us by email or phone, your inquiry, including all resulting personal data, will be stored by us for the purpose of processing. This data will not be shared without your consent. Legal basis: Art. 6(1)(b) or (f) GDPR.

Communication via WhatsApp

For communication, we also use the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Communication takes place via end-to-end encryption. However, WhatsApp has access to metadata and shares data with its parent company Meta in the USA. We use WhatsApp in the "WhatsApp Business" variant without automatic synchronization with the address book. Legal basis: Art. 6(1)(f) GDPR. Details: https://www.whatsapp.com/legal/#privacy-policy.

TidyCal (Appointment Booking)

For appointment bookings, we use TidyCal provided by AppSumo LLC, 1305 E 6th St, Austin, Texas 78702, USA. For the purpose of booking an appointment, you enter the requested data and your preferred date. The appointment data is stored on TidyCal's servers. Legal basis: Art. 6(1)(f) GDPR. Details: https://tidycal.com/privacy. Data transfer to the USA is based on Standard Contractual Clauses: https://tidycal.com/dpa.

Registration on This Website · WordPress website only

You can register on this website to use additional functions. We use the data entered for this purpose only for the use of the respective offer. Mandatory information requested during registration must be provided in full. Legal basis: Art. 6(1)(b) GDPR.

5. Social Media

eRecht24 Safe Sharing Tool · WordPress website only

The contents of this website can be shared on social networks in compliance with data protection law. For this we use the eRecht24 Safe Sharing Tool. This tool establishes direct contact between the networks and users only when the user actively clicks on a button. Legal basis: Art. 6(1)(c) GDPR.

6. Analytics Tools and Advertising

Google Analytics · WordPress website only

This website uses Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the analysis of the behaviour of website visitors. Use is based on your consent in accordance with Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Details: https://support.google.com/analytics/answer/6004245. We have concluded a DPA with Google.

Google Ads and Remarketing · WordPress website only

The website operator uses Google Ads provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables advertising to be displayed in the Google search engine or on third-party websites. Use is based on your consent in accordance with Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Details: https://policies.google.com/privacy.

Facebook Pixel and Custom Audiences · WordPress website only

This website uses the Facebook visitor action pixel for conversion tracking. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Use is based on your consent in accordance with Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Details: https://www.facebook.com/about/privacy/.

Pinterest Tag · WordPress website only

We have integrated the Pinterest Tag on this website. The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Use is based on your consent in accordance with Art. 6(1)(a) GDPR. Details: https://policy.pinterest.com/en/privacy-policy.

VG Wort Counter Pixel · WordPress website only

Texts on our website include a METIS counter pixel from the collecting society Verwertungsgesellschaft WORT – VG WORT, Untere Weidenstraße 5, 81543 Munich, Germany. The pixel counts text views in anonymized form for the purpose of determining payouts for authors. Legal basis: Art. 6(1)(f) GDPR.

Plerdy · WordPress website only

This website uses Plerdy (plerdy.com) to analyze user behaviour (heatmaps, click analyses, conversion funnels). Use is based on your consent in accordance with Art. 6(1)(a) GDPR. Opt-out: https://www.plerdy.com/do-not-track/. Details: https://www.plerdy.com/gdpr-plerdy/.

7. Newsletter

Brevo (formerly Sendinblue)

This website uses Brevo for sending newsletters and email sequences. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The data you enter for the purpose of receiving the newsletter is stored on the servers of Sendinblue GmbH in Germany.

With the help of Brevo, we are able to analyze our newsletter campaigns – e.g. whether a message has been opened and which links have been clicked. Data processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.

The data you provide will be stored until you unsubscribe and will be deleted from the newsletter mailing list after unsubscription. After your unsubscription, your email address may be stored on a blacklist if this is necessary to prevent future mailings (legitimate interest within the meaning of Art. 6(1)(f) GDPR). We have concluded a DPA with Brevo. Details: https://www.brevo.com/legal/privacypolicy/.

Newsletter Mailing to Existing Customers

If you book services with us and provide your email address, this email address may be used for sending newsletters, provided we inform you in advance. In such a case, the newsletter will only contain direct advertising for our own similar services. You may unsubscribe at any time. Legal basis: Art. 6(1)(f) GDPR in conjunction with § 7(3) of the German Act Against Unfair Competition (UWG).

8. Plugins and Tools

YouTube with Extended Data Protection

This website embeds videos from YouTube. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode, which according to YouTube does not store any information about visitors before they start the video. As soon as you start a YouTube video, a connection to YouTube servers is established. Legal basis: Art. 6(1)(f) or (a) GDPR. Details: https://policies.google.com/privacy.

Google Fonts

This site uses Google Fonts for the consistent display of fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser establishes a connection to Google's servers. Legal basis: Art. 6(1)(f) GDPR. Details: https://policies.google.com/privacy.

Adobe Fonts · WordPress website only

This website uses web fonts from Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. When accessed, your browser establishes a connection to Adobe's servers in the USA. Legal basis: Art. 6(1)(f) GDPR. Details: https://www.adobe.com/privacy/policy.html.

Google reCAPTCHA · WordPress website only

We use Google reCAPTCHA provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to check whether data entries are made by humans or by automated programs. Legal basis: Art. 6(1)(f) GDPR.

Spotify · WordPress website only

This website includes functions of the music service Spotify provided by Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. When you visit this website, the plugin may establish a direct connection between your browser and the Spotify server. Legal basis: Art. 6(1)(f) GDPR. Details: https://www.spotify.com/legal/privacy-policy/.

9. Online Marketing and Affiliate Programs

Affiliate Programs · WordPress website only

We participate in affiliate partner programs. Cookies or comparable recognition technologies are used to calculate affiliate compensation. Legal basis: Art. 6(1)(f) GDPR.

We participate in: Amazon Affiliate Program (Amazon Europe Core S.à.r.l., details: Amazon Privacy Policy) and the eRecht24 Affiliate Program (eRecht24 GmbH & Co KG, Lietzenburger Str. 94, 10719 Berlin, Germany).

10. eCommerce and Payment Providers

Elopage / Ablefy

For the sale of services, we use Elopage / Ablefy provided by ablefy GmbH, Kurfürstendamm 208, 10719 Berlin, Germany. When you click on one of our products, you will be redirected to the sales page on Elopage/Ablefy. The entire contract processing and payment processing takes place via Elopage/Ablefy. We have concluded a DPA with Ablefy. Details: https://myablefy.com/privacy. Legal basis: Art. 6(1)(f) GDPR.

ThriveCart · WordPress website only

For certain offers, we use ThriveCart as a payment provider. When you click on a product button, you will be redirected to the sales page at ThriveCart. The full contract processing takes place via ThriveCart. Details: https://legal.thrivecart.com/platform/privacy/. Legal basis: Art. 6(1)(b) GDPR.

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data for the establishment and execution of our contractual relationships. The collected customer data is deleted after completion of the order or termination of the business relationship and after the statutory retention periods have expired. Legal basis: Art. 6(1)(b) GDPR.

11. Community

Skool Community

We use the Skool platform for our community. The provider is Skool Inc., 548 Market St PMB 54079, San Francisco, California 94104-5401, USA. When you join the community, you register directly with Skool. Details: https://www.skool.com/privacy.

12. Video Conferencing

Google Meet

For communication with our customers, we use Google Meet provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using it, personal data (email address, duration of the conference, IP address, etc.) is processed by Google. Legal basis: Art. 6(1)(b) and (f) GDPR. Details: https://policies.google.com/privacy.

13. External Links

Our website contains links to external third-party websites whose content we have no influence on. The respective operators are responsible for the data protection regulations of these external sites. We recommend that you read the privacy policies of the linked platforms.