Privacy Policy

1. Data controller

The controller responsible for the personal data collected through this website is:

2. Personal data we process

Deoshala may process personal data voluntarily provided by users when completing website forms, sending an enquiry, requesting a session, booking a service or registering for a retreat or event.

• Full name.
• Email address.
• Phone number or WhatsApp.
• City or country of residence, when provided.
• Service, retreat, event or path of interest.
• Date, time, accommodation or experience preferences, where applicable.
• Information freely included in the form message.
• Basic technical data such as IP address, browser, submission date and time.

The user agrees to provide truthful and updated information and not to include specially sensitive data unless strictly necessary to prepare a specific activity and expressly requested.

3. Purposes of processing

Personal data will be processed for the following purposes:

• To respond to enquiries submitted through the contact form.
• To manage information requests about services, private sessions, programmes, events and retreats.
• To contact the interested person to coordinate availability, schedules, needs and next steps.
• To manage registrations, bookings or requests related to Deoshala activities.
• To send necessary communications linked to a request made by the user.
• To comply with applicable legal obligations and handle possible claims.
• To protect the security of the website and prevent misuse.

Data will not be used to send unsolicited commercial communications unless the user has given consent or another applicable legal basis exists.

4. Legal basis for processing

Depending on each case, the processing of personal data is based on:

• Consent: when the user voluntarily submits a form or requests information.
• Pre-contractual or contractual measures: when the request relates to a booking, session, programme, retreat or event.
• Legitimate interest: to respond to communications, maintain website security and manage reasonably expected enquiries.
• Compliance with legal obligations: when it is necessary to retain information for tax, administrative or legal reasons.

5. Retention period

Data will be retained for the time necessary to handle the enquiry, manage the request or maintain the relationship with the interested person. Afterwards, it may be blocked for the periods necessary to comply with legal obligations or address possible liabilities.

General enquiries may be retained for a reasonable period to follow up on the conversation, unless the person requests deletion where applicable.

6. Recipients and processors

Deoshala does not sell personal data to third parties. Data may only be communicated when necessary to:

• Comply with legal obligations.
• Manage technological services required for the website to operate.
• Use hosting, email, forms, security or maintenance providers.
• Manage communications or bookings requested by the user.

When external providers are used, they will act as processors and must process data following Deoshala instructions and with appropriate security measures.

7. International transfers

Some technology providers may be located outside the European Economic Area. In such cases, Deoshala will seek appropriate safeguards under applicable regulations, such as adequacy decisions, standard contractual clauses or other recognised mechanisms.

8. User rights

Where applicable, users may exercise their rights of access, rectification, erasure, objection, restriction of processing, portability and the right not to be subject to automated decisions.

To exercise these rights, users may send a request to: deoshalabusiness@gmail.com, indicating the right they wish to exercise and providing sufficient information to verify their identity.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency if they believe that the processing of their data does not comply with applicable regulations.

9. Minors

This website is not directed at minors. If a minor wishes to participate in an activity, the request must be made by their mother, father, legal guardian or authorised responsible person.

10. Cookies and similar technologies

This website may use technical cookies necessary for its operation and, where applicable, analytics or third-party cookies if measurement tools, maps, embedded videos or other external services are implemented.

If non-technical cookies are used, the corresponding consent must be displayed and a specific cookie policy must be published.

11. Security measures

Deoshala applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse. However, no Internet transmission can be guaranteed as completely secure.

12. Changes to this policy

Deoshala may update this privacy policy to adapt it to legal, technical or operational changes. The current version will be the one published on this website.

13. Contact

For any question related to this policy or the processing of personal data, you may write to: deoshalabusiness@gmail.com.