Privacy notice.

How we think about data

We collect as little personal data as possible. The website does not run advertising trackers, fingerprinting scripts, or social-media pixels. We do not sell or share data with third parties for marketing purposes. The information you give us when you write to us is used to answer you — nothing else.

Controller

The controller responsible for personal data processed via this website is:
Palmō Retreats — Anna-Noelle Pichler
[Address to be added]
Email: info@palmo-retreats.com

Data protection officer

Given the size and nature of the atelier, the appointment of a Data Protection Officer is not currently mandatory under Art. 37 GDPR. For all data-protection enquiries please write to info@palmo-retreats.com.

Hosting

This website is hosted by [hosting provider — to be added]. The provider processes server log files (IP address, browser type, referring URL, time of access) on our behalf for the purpose of operating, securing, and stabilising the service. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a functional website).

Server logs are retained for the period required for security and operational purposes and then deleted.

Fonts

We use the typefaces Cormorant Garamond and Inter. In the production version of the site these fonts are hosted locally on our own server, which means no data is transferred to third-party font services when you visit the site.

Web analytics

For statistics on website use we plan to use Plausible Analytics, a privacy-focused analytics tool that does not set cookies and does not collect personal data. All measurements are aggregated and cannot be traced back to individual visitors. Legal basis: Art. 6(1)(f) GDPR.

Contact form

When you send us an enquiry through the contact form we process the information you provide (name, email, and any details about your travel interest) for the sole purpose of responding to your message. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, where applicable, Art. 6(1)(f) GDPR.

We retain enquiry data for as long as necessary to handle your request and to comply with statutory retention obligations. You may ask us to delete your data at any time, subject to legal retention requirements.

Newsletter

If you subscribe to our newsletter we use a double opt-in process: after entering your email you receive a confirmation message, and your subscription becomes active only after you click the confirmation link. Legal basis: Art. 6(1)(a) GDPR (consent).

The newsletter will be sent through [newsletter provider — to be added, planned: Brevo], with whom we will conclude a data processing agreement under Art. 28 GDPR. You can unsubscribe in one click from the footer of every newsletter.

Cookies

We do not set marketing or tracking cookies. The site may use a small number of strictly necessary technical cookies (for example to remember language preferences in future versions). These do not require consent under §25 Abs. 2 TTDSG.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Request correction of inaccurate data (Art. 16 GDPR)
• Request deletion of your data (Art. 17 GDPR), subject to retention obligations
• Restrict processing in certain circumstances (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7 GDPR)

To exercise any of these rights, write to info@palmo-retreats.com.

Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority responsible for your place of residence if you believe that the processing of your personal data violates the GDPR.

This privacy notice is a working draft. The final, legally binding version will be reviewed by counsel before the website goes live.