​This page explains what personal information I collect when you visit gabrielacortez.nl, sign up for a cafecito, a inner focus club, a session, workshop or contact me, why I need it and what you can ask me to do with it. I keep it to the minimum needed to run my sessions well.

​

1. Who is responsible for your information?

 

Gabriela Cortez, trading as the Inner Experiment

KvK registration number: 42210543

VAT ID: to be confirmed

Email: hello@gabrielacortez.nl

Telephone number: 0645634846

​

2. What I collect and why

​

- Name, email address, phone number, when you register for a cafecito, inner focus club, circle, session or workshop 

- Payment details (amount, date, payment method, contact details), when you pay.

- Your name, email and message, when you use the contact form or email me, to reply to your questions. I take 3 days in answer your inquiry. 

- When a form asks, including dietary restrictions, preferences, and experience with meditation or other trainings on socio-emotional skills, to prepare a session that fits the group.

- Technical data (browser, pages visited), when you visit the website to keep the site working and, if you agree, to see how it is used.

- Photos or short videos of a session, only if you agree beforehand to share on my website or Instagram. 

​

I don't sell your data and I don't use it for anything other than the purposes above.

​

3. What you share in sessions

In cafecitos, circles, clubs, workshops and circles people sometimes share personal things about how they feel, their lives or their health. I don't record sessions and I don't keep notes about individual participants. I ask everyone in a group to keep what others share confidential.

​

If a registration form ever asks about your physical or mental wellbeing, answering is optional and I will only use it with your explicit consent, to make the session safe and suitable for you. You can withdraw that consent at any time.

​

4. Who else handles your data

I use a few trusted services to run the website and my sessions. They only process your data on my behalf and under agreements that meet the GDPR.

• Wix.com for the website, forms, event registration and payments (Wix Payments works with payment partners such as Stripe and Adyen)

• IDEAL for payment links

• Zoom for live online sessions

• Proton for email

Some of these services store data outside the European Economic Area, for example in the United States or Israel. When that happens, it is protected by an EU adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

​

5. Cookies

The website uses cookies that are needed for it to work, such as remembering your language or keeping a booking in progress. With your permission, it also uses analytics cookies from Wix to see which pages are visited. You can choose this in the cookie banner and change your choice at any time through the cookie settings link in the footer.

The site links to Instagram and other platforms. When you visit them, their privacy policies apply.

​

6. How long I keep it

• Registration details: up to 2 years after your last session, so I can let you know about related sessions if you asked to hear about them, and then I delete them

• Payment and invoice records: 7 years, because Dutch tax law requires it

• Contact messages: up to 12 months after our last exchange

• Form answers given with consent: until the session or program ends, or earlier if you withdraw consent

• Photos and videos: until you ask me to remove them

 

7. Your rights

You can ask me to:

• show you the personal data I hold about you

• correct it if it's wrong

• delete it (unless I have to keep it by law, like invoices)

• stop or limit using it

• send it to you in a common format

• withdraw any consent you gave, without affecting what happened before

Email [email address] and I will reply within one month. If you're not happy with how I handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

 

8. Security

I keep your data in password-protected accounts with two-step login where possible, and only I have access to it.

 

9. Age

My sessions are for adults. I don't knowingly collect data from anyone under 16.

​

10. Changes

If I change this policy, I'll update the date at the top. For important changes I'll let current participants know by email.