Privacy

Privacy Policy

How we handle personal data, confidentiality, and information connected to your use of this website.

Last updated: April 12, 2026 ALMAE Healing Work Institute GmbH

1) Controller

ALMAE-Heilarbeitsinstitut GmbH
Schillerhain 1, 67292 Kirchheimbolanden, Germany
Email: institute@almae.de

2) Data Protection Contact

If you have privacy questions or requests, contact us at institute@almae.de.

3) Purpose & Approach

We treat privacy and confidentiality as institutional standards. We collect only what is needed to operate the website, respond to inquiries, and handle questionnaire-related communication.

ALMAE is a structured institute setting and not a medical or mental-health provider. Please avoid submitting sensitive health data unless we explicitly ask for it for a defined purpose.

4) Legal Bases

We process personal data only when we have a legal basis, in particular:

  • Consent (Art. 6(1)(a) GDPR; and where applicable § 25(1) TDDDG for cookies/terminal access)
  • Contract / pre-contractual measures (Art. 6(1)(b) GDPR) — e.g., eligibility questionnaires and related follow-up requests
  • Legal obligation (Art. 6(1)(c) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR) — security, stability, abuse prevention

5) Hosting & Website Delivery

This website is hosted by netcup GmbH (Karlsruhe, Germany). The host processes data as a processor under a data processing agreement (Art. 28 GDPR).

Server log files

When you access the site, servers process: IP address, date/time, requested pages, referrer URL, browser/OS information, and technical logs.

Purpose: secure operation, troubleshooting, and delivery of the website.
Legal basis: Art. 6(1)(f) GDPR.
Retention: typically up to 14 days; longer only when needed to investigate security incidents.

We use cookies and similar technologies. Essential cookies are required for site operation. Optional cookies (analytics/marketing) are used only after your consent.

You can grant, refuse, or withdraw consent at any time via our cookie settings.

7) Contact, Eligibility Questionnaires, and Review Communication

If you contact us, submit an eligibility questionnaire, or request follow-up communication, we process the information you submit (e.g., name, email address, postal address if provided, phone number if provided, and message content).

Purpose: respond to inquiries, administer the eligibility questionnaire process, and coordinate follow-up communication, including optional calls with Manuel.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interests in communication).

Review communication tools (if used)

For follow-up communication we may use email / Microsoft 365 (Microsoft Ireland Operations Limited). Where cookies or similar technologies are involved, this occurs only with consent.

8) Security

We use reasonable technical and organizational measures to protect the website and communications. For example, security tooling (e.g., firewall/malware protection) may process access metadata to prevent abuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security).

9) Analytics & Marketing (planned / only with consent)

If enabled, we may use tools such as Google Analytics (GA4), Google Tag Manager, Google Ads Conversion Tracking, and Microsoft Advertising UET. These technologies are used only after you consent via our cookie settings.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). You can withdraw consent at any time.

10) Payment Processing (Stripe)

To process payments for our premium services, including the ALMAE Immersion, we use the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).

If you use a payment link provided by ALMAE, you will be redirected to Stripe’s secure checkout environment. We do not store your credit card or payment details on our own servers. The data required to process the transaction, such as your name, email address, payment method details, and the transaction amount, is processed directly by Stripe.

Purpose: processing of payments for booked services.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Further information: Details on Stripe’s handling of personal data are available in Stripe’s privacy policy at https://stripe.com/privacy.

11) Recipients

We share data only when necessary: hosting and technical providers (processors), communication/scheduling providers (processors), payment service providers, analytics/marketing providers (only with consent), and authorities where legally required.

12) Retention

We delete personal data when it is no longer necessary for the stated purpose and when no legal retention obligations apply.

13) Your Rights

Under the GDPR you may have rights to access, rectification, deletion, restriction, data portability, objection, and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority.

14) Updates

We may update this policy to reflect legal or operational changes. The current version is published on this page.