Privacy policy
Last updated: 13 October 2026
This English version is provided for convenience. Only the German version is legally binding.
This page explains which personal data are processed when you visit this website, for what purpose and on what legal basis. In short: this website sets no cookies and uses no tracking or analytics tools. I only process your data if you write to me, register, subscribe to the newsletter or book an appointment.
Controller
The controller responsible for data processing on this website is:
Marion Thomsen (Marion Khalsa Kaur)
Gneisenaustr. 40
10961 Berlin
Phone: +49 172 915 6600
Email: info@marion-khalsa-kaur.com
Hosting and accessing the website
The website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. It is maintained by my web service provider Apollo Webdesign (Eberswalde), which operates the servers on my behalf.
When you access the website, the server necessarily processes your IP address and technical information from your browser so that it can deliver the pages to you. The web server does not store access logs. Server error messages may contain technical information and are deleted after a short time.
The legal basis is my legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR).
No cookies, no tracking
This website sets no cookies and stores nothing on your device. There is no audience measurement, no advertising or analytics services and no social media plugins. Fonts and images are loaded directly from this website, not from third-party servers.
Contact form and retreat registration
When you write to me via the contact form or register for a retreat, I process the information you provide there: name, email address, telephone number (optional), your message and, for registrations, your preferred dates and room preference. I use this information to answer your enquiry and to process your registration.
The legal basis is taking steps prior to entering into a contract with you, or performing that contract (Art. 6(1)(b) GDPR); for general enquiries, it is my legitimate interest in answering your message (Art. 6(1)(f) GDPR).
The form data are processed on my website's server and forwarded by email to my mailbox. Mailbox and email delivery are provided by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
Spam protection: To keep out automated submissions, your browser solves a small computational task while you fill in the form, and the server checks how quickly and from which page the form was submitted. For this purpose, your IP address is held briefly in working memory in order to detect too many submissions in a row. It is not stored and is not passed on to anyone. No third-party service is involved (Art. 6(1)(f) GDPR).
I delete your message once your matter has been dealt with. If a contract is concluded, I keep the necessary documents for as long as commercial and tax law requires (usually six to ten years).
Email and telephone
If you email or call me, I process your details in order to deal with your matter. The same legal basis and storage period apply as for the contact form.
Newsletter
If you subscribe to my newsletter, I process your first name and email address in order to send you the newsletter. Sign-up uses double opt-in: you first receive an email in which you confirm your subscription. Only then will you receive the newsletter.
To send and manage the newsletter, I use Brevo, a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. For this purpose, your sign-up data are passed to Brevo via my website's server. Brevo also stores the time of your sign-up and of your confirmation as proof. Brevo may analyse whether a newsletter was opened and which links in it were clicked.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, using the unsubscribe link in every newsletter or by sending me a short message. Your data remain stored until you unsubscribe.
Appointment booking with Cal.com
For introductory calls, I offer a booking calendar from Cal.com (Cal.com, Inc., USA). I use the European version of the service (cal.eu), which processes data in the EU.
The calendar only loads when you click “Load calendar”. Before that, no connection to Cal.com is established. When you click, your browser transmits your IP address and technical information to Cal.com, and Cal.com may store data on your device for the booking process. The legal basis for this is the consent you give by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG, the German Telecommunications Digital Services Data Protection Act).
When you book an appointment, Cal.com processes the information you enter there (name, email address, the time you choose and, if applicable, a message) and passes it on to me. The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR). For more information, see Cal.com's privacy policy: cal.com/privacy.
Links to other services
This website contains links to Instagram and to Google Maps (for directions to retreat venues). These are simple links: as long as you do not click on them, nothing is loaded from these services. Only when you follow a link do the privacy policies of the respective provider apply.
Your rights
You have the right to access your data, to rectification, erasure and restriction of processing, to data portability, and the right to object to processing based on legitimate interests (Art. 15 to 21 GDPR). You can withdraw your consent at any time with effect for the future. A short message to me is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for me, the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.
Further information
You are not obliged to provide me with any data. Without the information requested in the form, however, I cannot process your enquiry or registration. No automated decision-making or profiling takes place.