Privacy Policy

1. Introduction

Paulo Bastos ("we," "our," or "us") is committed to protecting the privacy and personal data of all visitors and participants who use our website and services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and store it, and your rights regarding your data.

Paulo Bastos is established in the Netherlands at the following address:

Paulo Bastos
Westbroekstraat 12
1107 KB Amsterdam
Netherlands
Email: [email protected]

This Privacy Policy applies to all pages, forms, and services offered through the Paulo Bastos website. By using our website, you acknowledge that you have read and understood this Privacy Policy. Our data processing activities are governed by the General Data Protection Regulation (GDPR) as applicable in the Netherlands and the European Union.

2. What Personal Information We Collect

We may collect the following types of personal information when you interact with our website:

2.1 Information Provided Through Forms

When you submit an inquiry or contact form on our website, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Selected program or course of interest
• Preferred learning format
• Any message or comments you include
• Privacy Policy consent confirmation

2.2 Automatically Collected Information

When you visit our website, our servers and analytics tools may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on pages
• Date and time of access
• Device type (desktop, tablet, or mobile)

2.3 Cookies

Our website may use cookies and similar technologies. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

3. Why We Collect Personal Information

We collect personal information for the following purposes:

• To respond to inquiries: When you submit a contact form, we use your information to respond to your request and provide details about our meditation and mindfulness education programs.
• To provide educational services: If you enroll in a program, your information is used to manage your participation, communicate course details, and deliver learning materials.
• To improve our website: Technical data helps us understand how visitors use our website so we can improve navigation, content, and functionality.
• To comply with legal obligations: We may process personal data when required by Dutch or European law.
• To protect our legitimate interests: We use personal data to maintain website security, prevent fraud, and enforce our Terms of Use.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: When you submit a form and check the consent checkbox, you provide explicit consent for us to process the information you have provided and to contact you. You may withdraw your consent at any time by contacting us at [email protected].
• Contractual necessity: When you enroll in a program, we process your data as necessary to fulfill our obligations related to your participation.
• Legitimate interest: We may process technical data for website security, analytics, and improvement purposes when this does not override your rights and freedoms.
• Legal obligation: We may process data when required to comply with applicable Dutch or EU law.

5. How We Store and Protect Your Information

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These measures include:

• Secure HTTPS encryption across all pages of our website
• Server-side validation and spam protection for all form submissions
• Restricted access to personal data by authorized personnel only
• Regular security reviews and updates

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Contact form submissions are typically retained for a period of up to 24 months, unless longer retention is necessary for legal or operational reasons. After the retention period, personal data is securely deleted or anonymized.

6. How Form Submissions Are Processed

When you submit a contact or inquiry form on our website, the information you provide is transmitted securely over HTTPS and delivered to our team via email at [email protected]. We use your submission to:

• Review your inquiry
• Respond with relevant program information
• Communicate with you about course schedules, formats, and participation details

We do not sell, rent, or share form submission data with third parties for their marketing purposes. We do not store unnecessary sensitive data beyond what is required to process your inquiry.

7. Sharing of Personal Data

We do not sell or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers: We may share data with trusted third-party service providers who assist us in operating our website, hosting, email delivery, or analytics, provided they agree to process data in compliance with the GDPR and this Privacy Policy.
• Legal requirements: We may disclose personal data if required to do so by Dutch or European law, or in response to a lawful request by public authorities.
• Business transfers: In the event of a merger, acquisition, or reorganization, personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

8. International Data Transfers

Our organization is based in the Netherlands. If your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with the GDPR, such as Standard Contractual Clauses or an adequacy decision by the European Commission.

9. Cookies

Our website may use cookies to enhance your browsing experience, remember your preferences, and analyze website traffic. Cookies are small text files placed on your device by your web browser.

We may use the following types of cookies:

• Essential cookies: Required for the basic functionality of the website, such as navigation and form submission security.
• Analytics cookies: Used to collect anonymous data about website usage patterns and visitor behavior to help improve our website.
• Preference cookies: Used to remember your choices and settings, such as cookie consent preferences.

You can manage cookie settings through your browser. For more detailed information, please visit our Cookie Policy.

10. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You may request that we delete your personal data, subject to certain legal exceptions.
• Right to restriction of processing: You may request that we limit the processing of your personal data under certain circumstances.
• Right to data portability: You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data based on our legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by the GDPR.

11. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You may contact the Autoriteit Persoonsgegevens via their official website or by postal mail at their offices in The Hague, Netherlands.

12. Children's Privacy

Our website and services are intended for adults. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that information promptly.

13. Third-Party Links

Our website may contain links to external websites or resources. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational procedures. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

15. Consent Through Forms

When you submit a form on our website, you are asked to explicitly consent to the collection and processing of your personal data by checking a consent checkbox. This checkbox is not pre-checked. By checking this box and submitting the form, you confirm that you have read this Privacy Policy, understand how your data will be used, and consent to being contacted regarding your inquiry.

You may withdraw your consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us: