Terms of Service

Introduction

These Terms of Service (“Terms”) govern your access to and use of our community services, including our website, mobile applications, and any other services (collectively, the “Services”), and any information, text, graphics, or other materials uploaded, downloaded, or appearing on the Services (collectively, the “Content”). By accessing and using the Services, you agree to be bound by these Terms.

Basic Terms

You are responsible for your use of the Services and for any Content you provide, including compliance with applicable laws, rules, and regulations. You should only provide Content that you are comfortable sharing with others under these Terms.

Content Responsibility

All content posted on the Services is the sole responsibility of the individual who originally posted the content. You understand, therefore, that all information, data, text, photographs, graphics, messages, or other materials (“Content”) are the sole responsibility of the person from whom such Content originated. We do not control the Content posted via the Service and, as such, do not guarantee the accuracy, integrity, or quality of such Content.

Under no circumstances will we be liable in any way for any Content, including, but not limited to, any errors or omissions in any Content, or any loss or damage of any kind incurred as a result of the use of any Content posted, emailed, transmitted, or otherwise made available via the Service.

Privacy

Your privacy is important to us. Please review our Privacy Policy, which also governs your use of our Services, to understand our practices.

Content on the Services

You retain your rights to any Content you submit, post or display on or through the Services. By submitting, posting, or displaying Content on or through the Services, you grant us a worldwide, non-exclusive, royalty-free license (with the right to sublicense) to use, copy, reproduce, process, adapt, modify, publish, transmit, display, and distribute such Content in any and all media or distribution methods (now known or later developed).

User Conduct

You agree not to use the Services to post, transmit, or share Content that is harmful, offensive, obscene, abusive, invasive of privacy, defamatory, hateful, or otherwise discriminatory, false or misleading, or incites an illegal act.

Intellectual Property Rights

You acknowledge that we own all rights, title, and interest in and to the Service, including all intellectual property rights. You agree not to copy, alter, distribute, or create derivative works from the Service.

Limitations of Liability

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses, resulting from your access to or use of or inability to access or use the Services.

Suspension or Termination of Accounts

shamanism.one aims to be a safe and welcoming platform where users can freely express themselves. However, we may suspend, deactivate, or delete your account if we determine that you have seriously or repeatedly violated our terms of use, policies, or community standards, or if we are legally obliged to do so. This also applies in cases of infringement of others’ intellectual property rights or if your account remains inactive for a prolonged period.

We may also deactivate or delete your account if we suspect that it is being used without your consent and we cannot verify that you are the account holder.

Should we take these measures, you will be appropriately informed and we will explain the options you have to request a review, unless this would be legally problematic for us, harm our community, or compromise the integrity of our services.

More information on what you can do if your account has been deactivated and how you can contact us can be found on our website.

Please note that even if your account is deleted or deactivated, certain provisions of our terms of use remain in effect.

Amendment to Terms

We may revise these Terms from time to time, and the most current version will always be posted on our website. By continuing to access or use the Services after revisions become effective, you agree to be bound by the revised Terms.

×

Privacy Notice

Last updated on 08.08.2023

This privacy notice for VIBE & VIRAL, UNIPESSOAL LDA (“Company,” “we,” “us,” or “our“), describes how and why we might collect, store, use, and/or share (“process“) your information when you use our services (“Services“), such as when you:

• Visit our website at shamanism.one, or any website of ours that links to this privacy notice

• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@ shamanism.one.

You have the right at any time to obtain information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

The entity responsible for data processing on this website is:

VIBE & VIRAL, UNIPESSOAL LDA
Carolin Mallmann
Rua Hermano Neves 18, piso 2, escritório 4

1600-477 Lisbon, Portugal

E-Mail: info @shamanism.one

The responsible entity is the natural or legal person who decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

General information about the data of our community

The tools used to create this community do not store your data. Your data remains within this WordPress application and is stored securely at our hoster’s server, details of which can be found below. To sign up, you are asked to provide your email, first name, (last name), and nickname. Once registered, you can decide your level of participation in the community, which includes:

• News feed posts
• Discussions
• Group participation
• Courses taken
• Comments
• Likes
• Images
• Videos

You can delete your information and shared content at any time. Sharing your last name is optional. We encourage you to be mindful about what kind of information you share within the community.

Go to Account settings > privacy

You can request and download a copy of your personal data:

Go to Account settings > Export data

You can manage your notification settings at any time:

Go to Account > notification settings

You can decide who can invite you to join a group:

Go to Account > Group invites

Go to Account > Login information to change your password and email.

Storage Duration

Unless a more specific storage period has been specified in this privacy policy, your personal data remains with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur once these reasons no longer apply.

Data Transfer to the USA

Our website includes tools from companies based in the USA. When these tools are active, your personal data can be transferred to the US servers of the respective companies. We point out that the USA is not a safe third country in the sense of EU data protection law. US companies are required to hand over personal data to security authorities without you being able to legally object. Therefore, it cannot be excluded that US authorities (e.g., intelligence agencies) process, evaluate, and permanently store your data stored on US servers for surveillance purposes. We have no influence on these processing activities.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. The legality of data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Specific Cases and to Direct Advertising (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, AS FAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of breaches of the GDPR, the persons affected have a right to lodge a complaint with a supervisory authority, in particular in the member state of their usual place of residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint is in addition to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, in a standard, machine-readable format or to request its transfer to a third party. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock symbol in your browser line.

When the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and if necessary, a right to correct or delete this data. For this purpose, as well as for further questions on the topic of personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is done unlawfully, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have filed an objection pursuant to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may only be processed – with the exception of its storage – with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of significant public interest of the European Union or a member state.

Please note that while this translation aims to be accurate, there might be slight variations due to language nuances.

Cookies

Our websites use what are known as “cookies”. Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These allow us or you to use certain services provided by the third-party company (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain website features would not work without them (e.g., the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising.

Cookies required for the electronic communication process (necessary cookies) or for providing certain functions desired by you (functional cookies, e.g., for the shopping cart function) or for optimizing the website (e.g., cookies for measuring the web audience) are stored based on Art. 6 para. 1 lit. f GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent for the storage of cookies has been requested, the storage of the relevant cookies is based solely on this consent (Art. 6 para. 1 lit. a GDPR); this consent can be revoked at any time.

You can set your browser to inform you about the setting of cookies and to only allow cookies in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Insofar as cookies from third-party companies or for analysis purposes are used, we will inform you separately about this within the scope of this data protection declaration and, if necessary, ask for your consent.

Real Cookie Banner

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

The legal basis for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter referred to as Wordfence).

Wordfence serves to protect our website from unwanted access or malicious cyber attacks. For this purpose, our website establishes a permanent connection to the servers of Wordfence so that Wordfence can compare its databases with the access made on our website and block them if necessary.

The use of Wordfence is based on Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the most effective protection of his website against cyber attacks. If the appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; consent can be revoked at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

Conclusion of a Contract for Order Processing

We have concluded a contract for order processing with Wordfence. This is a contract required by data protection law, which ensures that Wordfence processes the personal data of our website visitors only according to our instructions and in compliance with the DSGVO.

Hosting and Content Delivery Networks (CDN)

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This primarily concerns IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.

We use the following hoster:

Febas – Owner: Roman Baumgärtner Ostlandstraße 5 D-49565 Bramsche

Conclusion of a contract for order processing

To ensure data protection-compliant processing, we have concluded a contract for order processing with our hoster.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data will not be merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website – for this purpose, the server log files must be recorded.

Payment provider: Digistore24

We collect, process, and use personal data only to the extent necessary for the establishment, content design, or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 Para. 1 lit. b DSGVO, which allows the processing of data to fulfill a contract or pre-contractual measures. We collect, process, and use personal data on the use of this website (usage data) only insofar as it is necessary to enable or bill users for the use of the service.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

We produce online courses and digital products and offer them for purchase. For this purpose, we use the Digistore24 service. As soon as you click on the purchase button of one of our digital products, you leave our website and are redirected to our specifically set up individual Digistore purchase page.

Digistore24 is a service provided by:
Digistore24 GmbH
St.-Godehard-Straße 32
31139 Hildesheim

Imprint: https://www.digistore24.com/page/imprint

All functions on the purchase pages, as well as the entire related payment processing, are carried out via Digistore24. Therefore, when you enter the purchasing process, the data protection regulations of Digistore24 apply. You can view the data protection declaration of Digistore24 here: https://www.digistore24.com/page/privacy

Digistore24 is not a data processor on behalf of others but sells our products and handles the entire payment processing and product delivery. Consequently, there was no need to conclude a contract for order data processing. In its privacy policy, Digistore24 has assured that it will treat the personal data of our customers it collects in compliance with data protection and other laws. The legal basis for processing personal data when forwarding from our website to the sales page via Digistore arises from Art. 6 Para. 1 S. 1 lit. b).

Audio and Video Conferences: Google Meet

For live sessions and calls with our participants and customers we use Google Meet, a service that is part of Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find details on data processing in Google’s privacy policy: https://policies.google.com/privacy.

When you take part in a video or audio conference with us, your personal data are processed by us and by Google as the provider of the tool.

Data processing agreement

We have concluded a data processing agreement with Google in line with Art. 28 GDPR. Where data are transferred outside the European Union, this is based on the EU Commission’s standard contractual clauses and the EU-US Data Privacy Framework.

Which data are processed

Google Meet processes the data you provide in order to use the service, for example your name and your email address. In addition, the tool processes the duration of the meeting, the start and end of your participation, the number of participants and further metadata of the communication.

Technical data required for the online communication are also processed, in particular IP address, device type, operating system, client version, and the type of camera, microphone or speaker used.

If content is shared or uploaded during a session, for example chat messages, files or recordings, this content is stored on Google’s servers. We only record a session when we announce this beforehand.

Please note that we do not have full control over the data processing carried out by Google. Our options are largely determined by the provider’s corporate policy.

Purpose and legal basis

We use Google Meet to communicate with prospective and existing contract partners and to deliver our courses and sessions (Art. 6 para. 1 s. 1 lit. b GDPR). Beyond that, the tool serves to make communication with us simpler and faster (legitimate interest under Art. 6 para. 1 lit. f GDPR). Where consent has been requested, processing is based on that consent, which you can withdraw at any time with effect for the future.

Storage duration

Data that we collect ourselves through the conference tool are deleted from our systems as soon as you ask us to delete them, withdraw your consent, or the purpose for storing them no longer applies. Mandatory statutory retention periods remain unaffected.

We have no influence on how long Google stores your data for its own purposes. For details please refer directly to Google.

Newsletter (FluentCRM & Elastic Email)

When you sign up for our newsletter or one of our free offers (e.g. the Spirit Animal Discovery Guide or the journey circle updates), we process the data you provide (first name, email address) together with the time of registration and your IP address. Sign-ups are managed with the newsletter plugin FluentCRM, which runs on our own server infrastructure (centrally on carolinmallmann.de, operated by the same data controller, VIBE & VIRAL UNIPESSOAL LDA). Your data is not transferred to a newsletter provider in the USA.

Registration uses the double opt-in procedure: after signing up you receive an email asking you to confirm your subscription. Only after this confirmation is the registration complete. The legal basis for processing is your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time, e.g. via the unsubscribe link included in every email. The lawfulness of processing carried out before the withdrawal remains unaffected. After unsubscribing, your data is removed from the mailing list.

For the technical delivery of our emails we use Elastic Email, provided by Elastic Email Inc., PO Box 9038, Station Prov Govt, Victoria, BC V8W 9A4, Canada. Elastic Email receives the email address and delivery data of each email. An adequacy decision of the EU Commission exists for Canada (Art. 45 GDPR). We have concluded a data processing agreement (DPA) with Elastic Email. For more information, please see Elastic Email’s privacy policy: https://elasticemail.com/resources/usage-policies/privacy-policy.

Analytical Tools and Advertising

Google Tag Manager:

• Used to integrate tracking, statistics, or other technologies on the website.
• Managed by Google Ireland Limited.
• Doesn’t create user profiles, store cookies, or conduct independent analysis.
• It captures the user’s IP address, which may be transferred to Google’s parent company in the USA.
• Its use is justified by Art. 6, paragraph 1, point f of the GDPR, aiming for swift integration and management of tools on the website.

Google Analytics:

• Allows website owners to analyze the behavior of visitors.
• Collects user data like page views, duration of visit, used operating systems, and the user’s origin.
• Data may be transferred and stored in the USA.
• Website owners are interested in analyzing user behavior to optimize their website and advertising.
• Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

IP Anonymization:

• Activated on the website, ensuring IP addresses are shortened within EU member states before being sent to the USA.
• Full IP addresses are only transferred to the USA in exceptional cases.
• Google uses this data to evaluate website usage and provide related services.

Browser Plugin:

• A browser plugin is available to prevent Google from collecting and processing user data.

Order Processing:

• A contract has been signed with Google for order processing, ensuring compliance with the strict requirements of the European General Data Protection Regulation.

Demographic Features in Google Analytics:

• Used to display relevant ads to visitors within the Google advertising network.
• Provides reports on age, gender, and interests.
• Data is sourced from Google’s interest-based advertising and third-party visitor data.
• Users can deactivate this feature.

Google Analytics E-Commerce Tracking:

• Helps website owners analyze the purchasing behavior of visitors.
• Captures data like orders made, average order values, shipping costs, and time from viewing to purchasing a product.

Storage Duration:

• Data linked to cookies, user IDs, or advertising IDs stored by Google are anonymized or deleted after 14 months.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms into Google (Keyword Targeting). Furthermore, targeted advertisements can be displayed based on user data available at Google (e.g., location data and interests) (Audience Targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms have led to the display of our ads and how many ads have resulted in clicks.

The use of Google Ads is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible.

Data transfer to the USA is based on the standard contract clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, both Google and we can determine whether the user has carried out certain actions. For instance, we can evaluate how often specific buttons on our website were clicked or which products were viewed or purchased frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We don’t receive any information that personally identifies the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of Google Conversion Tracking is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. If appropriate consent has been requested (e.g., consent to store cookies), processing is solely based on Art. 6 para. 1 lit. a GDPR; this consent can be revoked at any time.

For more information about Google Conversion Tracking, see Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.

Facebook Pixel

This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous to us as the website operator, and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible, and Facebook can use the data for its advertising purposes according to Facebook’s data usage policy. This allows Facebook to serve ads on Facebook pages as well as outside of Facebook. This use of data cannot be influenced by us as site operators.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If appropriate consent has been obtained (e.g., consent to store cookies), processing is solely based on Art. 6 para. 1 lit. a GDPR; this consent can be revoked at any time.

Data transfer to the USA is based on the standard contract clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited to the collection of the data and its forwarding to Facebook. The subsequent processing by Facebook is not part of the joint responsibility. The obligations incumbent upon us jointly have been defined in an agreement on joint processing. You can find the wording of the agreement here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for implementing the tool on our website in a data protection compliant manner. Facebook is responsible for the data security of Facebook products. Rights of those affected (e.g., requests for information) regarding the data processed by Facebook can be claimed directly from Facebook. If you assert the data subject rights with us, we are obliged to forward these to Facebook.

Further information on the protection of your privacy can be found in Facebook’s data protection notices: https://de-de.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can opt-out of usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/en/praferenzmanagement/.

Our Social Media Profiles

https://www.facebook.com/oneshamanism

https://www.instagram.com/oneshamanism/

Social networks like Facebook, Instagram, etc., can typically analyze your user behavior extensively when you visit their websites or a website with integrated social media content (e.g., like buttons or ad banners). By visiting our social media profiles, numerous data processing operations relevant to data protection are triggered. In detail:

If you are logged into your social media account and visit our social media profile, the operator of the social media portal can associate this visit with your user account. However, your personal data can also be collected even if you are not logged in or do not have an account with the respective social media portal. This data collection can occur, for instance, via cookies stored on your device or by recording your IP address.

Using this collected data, the operators of the social media portals can create user profiles where your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both within and outside the respective social media profile. If you have an account with the social network, the interest-based advertising can be displayed on all devices on which you are or have been logged in.

Please also note that we cannot trace all processing operations on social media portals. Depending on the provider, the operators of the social media portals might conduct additional processing operations. For details, please refer to the terms of use and data protection regulations of the respective social media portals.

Legal Basis

Our social media profiles aim to ensure the broadest possible presence on the internet. This constitutes a legitimate interest as defined in Art. 6 Para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 Para. 1 lit. a GDPR).

Data Controller and Assertion of Rights

When you visit one of our social media profiles (e.g., Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered by this visit. You can assert your rights (information, correction, deletion, limitation of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., against Facebook).

Please note that despite our joint responsibility with the social media portal operators, we do not have complete influence over the data processing operations of the social media portals. Our possibilities are largely based on the corporate policy of the respective provider.

Storage Duration

Data directly collected by us via the social media presence will be deleted from our systems as soon as the purpose for their storage is no longer relevant, you ask us to delete them, you revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions, especially retention periods, remain unaffected.

We have no influence over the storage duration of your data, which the operators of the social networks store for their purposes. For details, please contact the operators of the social networks directly (e.g., in their privacy policy, see below).

Facebook

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.

We have entered into an agreement with Facebook on shared processing (Controller Addendum). This agreement defines which processing operations are the responsibility of us or Facebook when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Further details can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For more information about how they handle your personal data, please refer to Instagram’s privacy policy: https://help.instagram.com/519522125107875.

Within our online offer, features and content of the service Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated. This can include content such as images, videos, or text, and buttons that allow users to express their appreciation for the content, subscribe to the authors of the content, or our posts. If users are members of the Instagram platform, Instagram can assign the call of the above-mentioned content and features to the profiles of the users. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/. On our website, we use the “Instagram Feed” plugin. The plugin is developed by Smash Balloon LLC in the USA (https://smashballoon.com/) and is offered as a WordPress plugin or as a standalone PHP plugin. The plugin allows us to display the newsfeed of our Instagram fan page directly on our website. To do this, the plugin retrieves the information from Instagram and integrates it into our website. To the best of our knowledge, no special cookies that collect, process, or use personal data are specifically set by this plugin in your browser. However, we cannot completely rule out the possibility that personal data (e.g., IP addresses, browser data, etc.) may be transmitted to the provider of the plugin or to Instagram. If you click on a link in the news feed, you will be redirected to our Instagram fan page. In this case, Instagram saves which website you used to access our Instagram fan page. For more information on which data is collected, processed, or used by you when you access the pages of Instagram, please refer to the privacy policy of Instagram. The complete range of functions of the plugin can be viewed at https://de.wordpress.org/plugins/instagram-feed/ and https://smashballoon.com/instagram-feed. Further information on data protection at Smash Balloon can be found here: https://smashballoon.com/gdpr-and-our-plugins/ If you do not want Instagram to associate your visit to our site with your Instagram user account, please log out of your Instagram user account.

Vimeo

We have a profile on Vimeo. The provider is Vimeo, Inc., 555 West 18th Street, New York 10011, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy.

For details on their handling of your personal data, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy.

Comment Function on this Website

User Data Collection:

• When you comment on the website, the system collects the time of comment creation, your email address, and your chosen username (unless you post anonymously).

Duration of Comment Storage:

• Comments, along with the associated data, remain on the website until either the content commented upon is entirely deleted or the comments must be removed due to legal reasons (e.g., offensive comments).

Legal Basis:

• Comments are stored based on your consent, as per Art. 6, paragraph 1, point a of the GDPR.
• You have the right to withdraw your consent at any time. To do so, a simple email notification to the website owner suffices. The legality of the data processing operations that have taken place remains unaffected by this withdrawal.

IP Address Storage:

• The comment function stores the IP addresses of users who comment.
• Since comments aren’t reviewed before being made public, IP addresses are stored to take action against the author in cases of legal violations, such as insults or propaganda.

Subscribing to Comments:

• As a user, you can subscribe to comments after registering.
• A confirmation email is sent to verify that you’re the owner of the provided email address.
• You can unsubscribe from this feature anytime using a link provided in the informational emails. Data entered during the subscription will be deleted unless used for other purposes (e.g., newsletter subscription).

Duration of Comment Storage (repeated section):

• The details regarding the storage duration of comments and the associated data are repeated, mentioning they remain until the content is fully deleted or if there are legal reasons for deletion (like offensive comments).

Legal Basis (repeated section):

• This section is a repetition, emphasizing the storage of comments based on the user’s consent as per the GDPR. Users can withdraw their consent at any time, and previous data processing remains lawful despite withdrawal.

In summary, this text provides details about the comment functionality, what user data is stored when commenting, and how long the data is retained. It emphasizes user rights, GDPR compliance, and offers ways for users to control their data and preferences.

Inquiry via Email or Telephone

When you contact us by email or telephone, your inquiry, including all resulting personal data (name, request), is stored and processed by us for the purpose of handling your concern. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) lit. b GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this was requested.

The data you sent to us via contact requests remains with us until you ask us to delete it, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after the completion of your request). Mandatory statutory provisions – especially retention periods – remain unaffected.

Communication via WhatsApp

We use the instant messaging service WhatsApp for communication with our customers and other third parties. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication is end-to-end encrypted (peer-to-peer), preventing WhatsApp or other third parties from accessing the communication content. However, WhatsApp does have access to metadata generated during communication (e.g., sender, recipient, and timestamp). Furthermore, as per its own statement, WhatsApp shares personal data of its users with its US-based parent company, Facebook. More details about data processing can be found in WhatsApp’s privacy policy: https://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in fast and efficient communication with customers, prospects, and other business and contractual partners (Art. 6 (1) lit. f GDPR). If consent was sought, data processing occurs exclusively on the basis of this consent, which can be revoked at any time for the future.

The communication content exchanged between us on WhatsApp remains with us until you ask us to delete it, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after the completion of your inquiry). Mandatory statutory provisions – especially retention periods – remain unaffected.

We’ve set our WhatsApp accounts to avoid automatic data synchronization with the address book on the smartphones in use. We have a data processing agreement with WhatsApp.

×