Privat PolicyThis Privacy Policy explains how personal data is collected, used, and protected when you visit this website or use the services offered by HOLYSTIC YOU.
HOLYSTIC YOU – Tara GuptaSole Proprietor
Menzinger Straße 2, 80638 Munich, Germany
Email:
info@holysticyou.dePhone: +49 163 334 1610HOLYSTIC YOU complies with the
EU General Data Protection Regulation (GDPR) and applicable German data protection laws.
1.Data Controler
The controller responsible for data processing on this website is:
Tara GuptaMenzinger Straße 2
80638 Munich
Germany
Email:
info@holysticyou.deaße 2
1.Personal Data Collected
2.1 Data you voluntarily provide
When using the contact form, booking services, or communicating by email/phone, you may provide:
-Name
-Email address
-Phone number
-Address (if relevant for invoicing)
-Health information (for Heilpraktiker/Osteopathy appointments)
-Payment-related information
-Any information you choose to provide
Health data is processed only according to Art. 6(1)(b), Art. 9(2)(h) GDPR (treatment purposes).
2.2 Automatically collected data
When visiting this website, the server (IONOS / Webflow) automatically collects:
-IP address (shortened/anonymized where necessary)
-Browser type and version
-Operating system
-Referring URL
-Date and time of server request
-Pages visited
This data is necessary for technical operation and security.
2.3 Cookies & Analytics
This website may use:
-Functional cookies
-Webflow’s built-in analytics
-IONOS Webhosting analytics (anonymous server logs)
No third-party tracking cookies (Google Analytics, Meta Pixel, etc.) are used unless explicitly stated and consented to.If additional analytics are added in the future, the Privacy Policy will be updated and consent banners implemented.
3.Purpose of Processing
Your data is processed for the following purposes:
-Responding to inquiries (Art. 6(1)(b) GDPR)
-Preparing and fulfilling service contracts (osteopathy, yoga, coaching, etc.)
-Providing health services (Art. 9(2)(h) GDPR)
-Appointment booking and administration
-Invoicing and tax compliance (legal obligation)
-Website operation and security (Art. 6(1)(f) GDPR)
4.Legal Basis for Processing
Depending on the situation:
-Contract performance: Art. 6(1)(b) GDPR
-Health data for treatment: Art. 9(2)(h) GDPR
-Legal obligations: Art. 6(1)(c) GDPR
-Legitimate interests: Art. 6(1)(f) GDPR
-Consent: Art. 6(1)(a) GDPR (for optional services)
5.Data Sharing
Your data is shared only when necessary and lawful:
-Web hosting providers (Webflow, IONOS SE)
-Fiscal authorities (due to legal obligations)
-Payment service providers (if used)
-Insurance providers (if required for claims)
-IT service providers involved in website operation
Data is never sold to third parties.
6.StorageDuration
Data is kept:
-For contractual data: as long as needed to fulfill the service
-For tax-relevant documents: 10 years (legal requirement in Germany)
-For health-treatment documentation: 10 years under § 630f BGB
-For contact inquiries: until completed or requested to be deleted.
7.Your Rights Under GDPR
You have the following rights:
-Right of access (Art. 15 GDPR)
-Right to rectification (Art. 16 GDPR)
-Right to erasure (Art. 17 GDPR)
-Right to restriction of processing (Art. 18 GDPR)
-Right to data portability (Art. 20 GDPR)
-Right to object (Art. 21 GDPR)
-Right to withdraw consent at any time (Art. 7 GDPR)
To exercise your rights, contact:
info@holysticyou.deStraße 280638 MunichGermany
8.Data Security
HOLYSTIC YOU uses appropriate technical and organizational measures to protect personal data, including encryption, access controls, and secure servers provided by IONOS/Webflow.
9.External Links
This website may contain external links. HOLYSTIC YOU is not responsible for the content or privacy practices of external websites.
10.Booking Tools & Communication Tools
The following integrated services may be used:
-
SimplyBook.me (for Heilpraktiker/Osteopathy sessions)
-Zoom (for coaching sessions)
-Eversports and Urban Sports (for yoga classes)
-Email communication
These providers may process personal data according to their own policies. Only reputable, GDPR-aligned services are used.
11.Updated to this Privacy Policy
This Privacy Policy may be updated to reflect changes in law or services. The version displayed on this page is the current and binding version.
Last updated: 19. November 2025