Privacy Policy

1. Introduction

RespiraLab Berlin ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services, in accordance with the General Data Protection Regulation (GDPR) and German data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

When you join our waitlist, we collect the following personal data:

• Name: To personalize our communications with you
• Email address: To send you updates about our services and offerings
• Interest preference: To understand your needs (1:1 Coaching, Group sessions, or Corporate program)
• Message (optional): Any additional information you choose to share
• Language preference: To communicate with you in your preferred language
• Timestamp: When you submitted the form

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a) GDPR): You have given explicit consent to receive communications from us by checking the consent box on our waitlist form.
• Legitimate Interest (Art. 6(1)(f) GDPR): To respond to your inquiries and provide information about our services.

5. How We Use Your Data

We use your personal data to:

• Add you to our waitlist and notify you when spots become available
• Send you updates about our HRV biofeedback and breathwork services
• Inform you about upcoming workshops, courses, and events
• Respond to your questions or requests
• Improve our services based on your feedback and preferences

6. Data Storage and Security

Your data is stored securely using the following measures:

• Data is stored in Google Sheets, protected by Google's enterprise-grade security
• Access is restricted to authorized personnel only
• Data transmission is encrypted using HTTPS/TLS
• We regularly review and update our security practices

Your data is stored on servers located within the European Union. Google LLC is certified under the EU-US Data Privacy Framework.

7. Data Retention

We retain your personal data for as long as you remain on our waitlist or until you withdraw your consent. If you request removal from our waitlist, we will delete your data within 30 days, unless we are required by law to retain it for a longer period.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): Request limitation of data processing
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing of your data
• Right to Withdraw Consent (Art. 7(3)): Withdraw your consent at any time

To exercise any of these rights, please contact us at contact@respiralab.de. We will respond to your request within 30 days.

9. Third-Party Services

We use the following third-party services to process your data:

10. Cookies and Local Storage

Our website uses minimal local storage to remember your language preference (English or German). This is stored locally in your browser and is not transmitted to our servers. We do not use tracking cookies or third-party analytics tools.

11. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Germany, this is the relevant state data protection authority (Landesdatenschutzbeauftragte) or the Federal Commissioner for Data Protection (BfDI).

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: