Privacy Policy

Zen BODY Flow website is owned by Jessica Moritz, which is a data controller of your personal data.

We have adopted this Privacy Policy, which determines how we are processing the information collected by Zen BODY Flow, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using Zen BODY Flow website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Personal information we collect:

When you visit the Zen BODY Flow, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, payment information, etc.) during registration to be able to fulfill the agreement.

Why do we process your data?

Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.

You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via hi@zenbodyflow.com.

Your rights:

If you are a European resident, you have the following rights related to your personal data:

• The right to be informed.

• The right of access.

• The right to rectification.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object.

• Rights in relation to automated decision-making and profiling.

If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Information security:

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Data Collection:
We collect personal data only when necessary, e.g.:

• Contact Forms: Name, email for inquiries.

• Analytics: IP addresses, browser data via tools like Google Analytics (if used).

• Embedded Content: YouTube videos or third-party services (e.g., Zoom for future calls) may collect data per their privacy policies.

• Cookies: Used for functionality, analytics, or marketing (see Cookies section in Terms).

Purpose and Legal Basis:

• Contact forms: To respond to inquiries (Art. 6(1)(b) GDPR, contract fulfillment).

• Analytics: To improve the website (Art. 6(1)(f) GDPR, legitimate interest).

• Cookies: Based on consent (Art. 6(1)(a) GDPR) via our cookie banner.

• Embedded content: Based on consent or legitimate interest, depending on the service.

Third Parties:
We use third-party services that may process data, including:

• Google (YouTube): https://policies.google.com/privacy

• Hostinger https://www.hostinger.com/privacy-policy

• Zoom (if applicable): https://zoom.us/privacy
  These providers may transfer data to third countries (e.g., USA) under Standard Contractual Clauses or other safeguards.

• Acumbamail https://acumbamail.com/privacy-policy/

• Cookiebot https://www.cookiebot.com/en/privacy-policy/

Embedded YouTube Videos
Our website includes embedded videos from YouTube. When you view or interact with these videos, data such as your IP address and usage information may be transmitted to Google/YouTube. YouTube may use cookies and other tracking technologies. For more information, please see the YouTube privacy policy: https://policies.google.com/privacy

Newsletter Subscription via Acumbamail

If you subscribe to our newsletter, your email address and any other information provided will be transmitted to and stored by our newsletter service provider, Acumbamail.
We use Acumbamail exclusively for sending newsletters and managing subscriptions. Your data will be processed solely for the purpose of sending you relevant email updates and will not be shared with third parties.
For more information on how your data is handled by Acumbamail, please refer to their privacy policy: https://acumbamail.com/privacy-policy/

Contact Form

When you use the contact form on our website, we collect personal data such as

• Name

  Collected via contact form

  Used to respond to your inquiry

• Email address

  Collected via contact form

  Used for follow-up communication

• Message content

  Collected via contact form

  Used to address your inquiry

This data is used solely for the purpose of responding to your inquiry and for any necessary follow-up communication.
Your information is stored securely and is not shared with third parties, except as required by law.
As our website is hosted by Hostinger, technical processing and storage of your submitted data may occur on Hostinger’s servers. For more information about Hostinger’s data handling, please refer to their privacy policy: https://www.hostinger.com/privacy-policy

Cookiebot

We use Cookiebot to manage cookie consent on our website. Cookiebot collects information such as your IP address and consent status to ensure compliance with data protection regulations. Data may be shared with third parties, including Cookiebot (Usercentrics). For more details, please refer to the Cookiebot privacy policy: https://www.cookiebot.com/en/privacy-policy/

Data Storage:
Data is stored only as long as necessary for the purpose (e.g., until inquiries are resolved). Analytics data is anonymized where possible and deleted after [e.g., 14 months, specify if using Google Analytics].

Data Subject Rights:
Under GDPR, you have the right to:

• Access, rectify, or delete your data (Art. 15–17 GDPR).

• Restrict or object to processing (Art. 18, 21 GDPR).

• Data portability (Art. 20 GDPR).
  Contact us at hi@zenbodyflow.com to exercise these rights. You may also lodge a complaint with a supervisory authority (in Germany: [Your State’s Data Protection Authority, e.g., Landesbeauftragter für Datenschutz NRW]).

Data Security:
We implement technical and organizational measures (e.g., SSL encryption) to protect your data. However, no online transmission is 100% secure.

Cookies:
We use required and optional cookies. Required cookies ensure functionality and do not need consent. Optional cookies (e.g., analytics, marketing) require your consent via our cookie banner. Third-party cookies may apply for embedded content (e.g., YouTube). Manage preferences in the cookie banner.

Data Transfer to Third Countries:
Data may be transferred to third countries (e.g., USA) via third-party services, subject to GDPR-compliant safeguards (e.g., Standard Contractual Clauses).

Updates:
This policy may be updated. The latest version is available at https://zenbodyflow.com/data-privacy.

Contact information:

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to info(at)zenbodyflow.com.