Privacy policy
This is a courtesy translation. Only the German version is legally binding: Datenschutzerklärung
This privacy policy informs you about which personal data we process when you visit this website and use our offerings, for what purposes, on what legal basis and for how long.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is: Dr. med. Zorana Pravdić, ECLIPSE – Akademie für intuitive Psychosomatik, Karwinskistraße 61, 81247 München, e-mail: drpravdic.zorana@gmail.com, telephone: +49 175 505 3000.
No data protection officer has been appointed, as there is no legal obligation to do so.
2. Key points at a glance
- No tracking, no analytics tools, no advertising or social media cookies.
- No external fonts or content delivery networks: fonts and scripts are loaded from our own server.
- Our forms do not ask for health data, only for information such as your profession, interests and motivation.
- Newsletter only with your express consent (double opt-in). You will receive free offerings even without subscribing to the newsletter.
3. Hosting and server log files
This website is operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, on servers in Germany. STRATO processes the data on our behalf; a data processing agreement pursuant to Art. 28 GDPR has been concluded with STRATO.
Each time the website is accessed, the server automatically stores information in so-called server log files: IP address, date and time of access, page or file requested, amount of data transferred, HTTP status code, the previously visited page (referrer) as well as browser and operating system. We need this data to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are deleted or anonymised after 14 days at the latest. This data is not combined with other data.
TLS encryption
The website is encrypted throughout using TLS (“https://”). As a result, data you submit via forms cannot be read by third parties in transit.
4. Cookies and local storage
The public website does not set any cookies and does not store anything in your browser’s storage. We protect our forms against misuse without cookies (time-stamped form token and invisible check field). The self-check is evaluated entirely in your browser; your answers are neither stored nor transmitted in the process.
Only in the protected administration area, which is used exclusively by us, do we use a technically necessary session cookie that maintains the login (§ 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act).
5. Contact form and enquiries
If you write to us via the contact form, via “Enquire without obligation” (e.g. about the further training programme) or by e-mail, we process your name, your e-mail address, your profession, your message, the offering to which your enquiry relates and – voluntarily – your telephone number. We use this data to answer your enquiry and, where applicable, to arrange an introductory conversation.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and, for general enquiries not related to a contract, Art. 6(1)(f) GDPR (our legitimate interest in answering them). The data is stored in our contact management system (section 9) and deleted as soon as it is no longer required, at the latest 24 months after the last contact, provided that no contract is concluded and no statutory retention obligations apply.
Please do not send us any information about your health via forms or by e-mail. Such information is not required for our offerings.
6. Registration for free offerings
For free offerings – such as downloading the book as a PDF, free webinars, short introductory courses or the waiting list for future further training programmes – we process your name, your e-mail address and your information on your profession or field of activity, interests and motivation (professional, personal or both). Mandatory fields are marked in the form.
We use the data to provide you with the requested offering: you will receive by e-mail the download link, the access details for the webinar or course, or a message as soon as registration for the further training programme opens. The legal basis is Art. 6(1)(b) GDPR. We also use the information on profession, interests and motivation to tailor content and dates to the participants (Art. 6(1)(f) GDPR).
Without separate newsletter consent, you will only receive from us the e-mails required for the respective offering. The free offerings are available to you regardless of whether you subscribe to the newsletter.
The data is stored in our contact management system and deleted as soon as it is no longer required for the offering – for the waiting list, as soon as registration for the further training programme concerned has closed, and otherwise at the latest 24 months after your last activity. You can unsubscribe from the waiting list and from registrations at any time by e-mail.
7. Newsletter
If you subscribe to our newsletter, we process your e-mail address, your name and – where provided – your profession or field of activity, your interests and your motivation. The newsletter provides information about content, dates and offerings of the academy, for example on the further training programme, JOYFUL LIFE, books, webinars and courses.
Double opt-in: After registering, you will receive an e-mail with a confirmation link. Only after you click it will your address be added to the mailing list. As proof of your consent, we store the time of registration and confirmation, the version of the consent text and your IP address exclusively as a hash value from which the address cannot be read in plain text.
Content based on interests: On the basis of your information on profession, interests and motivation, we assign you to a recipient group (e.g. professionals from therapy and medicine, coaching, education, or private individuals) and send you content that is relevant to you. This assignment serves solely to select suitable content.
The legal basis is your consent (Art. 6(1)(a) GDPR). The logging of consent is based on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every e-mail or by sending us a message. The lawfulness of the processing carried out up to that point remains unaffected.
The newsletter is sent via the mail server of our host STRATO; no external newsletter service provider is used. We do not evaluate open or click rates.
We store your data until you unsubscribe. After that, we retain your e-mail address and the proof of consent for up to three years in order to be able to prove the earlier consent (Art. 6(1)(f) GDPR); they are no longer used for sending.
8. Self-check “Where do you stand right now?”
The self-check is a short questionnaire for self-reflection. It is not a diagnosis, does not replace a medical or psychotherapeutic assessment and does not ask for health data. The evaluation takes place entirely in your browser; your answers are not transmitted to us in the process.
Only if you have your result sent to you by e-mail and expressly consent to its storage do we store your e-mail address, your name if provided, and your result (evaluation area, level and scores per topic area) together with the time in our contact management system. This allows us to send you the result and, if you have subscribed to the newsletter, to select suitable content. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. The stored result is deleted after your withdrawal, at the latest 24 months after the self-check.
9. Contact management
We combine data from enquiries, registrations, the newsletter, the self-check (only with consent) and orders in a contact management system. We store your contact details, your information on profession, interests and motivation, the recipient group derived from it, the way in which you reached us (which form or offering and – if the link you accessed contained campaign parameters such as “utm_source” – the campaign), your registrations, orders and consents, as well as internal notes. This enables us to keep track of open enquiries and to recognise which information is relevant to you.
The legal basis is Art. 6(1)(b) GDPR insofar as the data serves the performance of contracts or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in orderly communication with interested parties and participants. Your browsing behaviour is not tracked.
The contact management system is part of the website database on STRATO’s servers in Germany. If we delete a contact, for example at your request, order and invoice data is retained owing to statutory retention obligations (section 10).
10. Orders and payment
If you book a paid offering or order a book or e-book, we process your name, your e-mail address, where applicable your billing and delivery address, and the order data (offering, price, payment status and, for instalment payments, the number of instalments paid). The legal basis is Art. 6(1)(b) GDPR.
Payment is processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. To pay, you are redirected to a Stripe payment page and enter your payment details (credit card, Apple Pay or Google Pay) directly with Stripe; we do not receive complete card details, only confirmation of the payment. For instalment payments, Stripe sets up a monthly subscription that ends automatically after the last instalment; for this purpose Stripe stores the payment method for the subsequent debits.
Stripe processes the data partly on our behalf and partly as an independent controller, for example for fraud prevention and to comply with legal obligations. In this context, data may also be transferred to Stripe, Inc. in the USA; the basis for this is the EU-U.S. Data Privacy Framework or EU standard contractual clauses. For Apple Pay and Google Pay, the privacy policies of Apple and Google respectively also apply. Further information: stripe.com/de/privacy.
We retain order, payment and invoice data for up to ten years in accordance with commercial and tax law provisions (Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 257 HGB).
11. Online events and sessions
Webinars, online courses, online parts of the further training programme, JOYFUL LIFE as well as preliminary and introductory conversations take place via a video conferencing tool that we name in the invitation. In the process, your name or display name, your e-mail address, technical connection data and – if you switch on your camera and microphone – image and sound as well as chat messages are processed. The legal basis is Art. 6(1)(b) GDPR. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
Group events are only recorded if we expressly point this out in advance.
The JOYFUL LIFE sessions are recorded and made available to you for repeated listening; this is part of the service. As very personal topics may be discussed in these sessions, we obtain your express consent before they begin (Art. 6(1)(a) and Art. 9(2)(a) GDPR). The same applies to the personal preparation questionnaire.
12. E-mail communication
E-mails from the website – such as confirmations, download links, access details and the newsletter – are sent via the mail server of our host STRATO. If you write to us directly by e-mail, we process your message in order to deal with your request (Art. 6(1)(b) or (f) GDPR).
Our mailbox drpravdic.zorana@gmail.com is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; e-mails to this address and notifications of form submissions are therefore also processed by Google.
13. Videos and links to social networks
Videos on this website are delivered from our own server; video platforms such as YouTube or Vimeo are not embedded.
Where we link to profiles on social networks, these are simple links. Data is only transferred to the respective provider when you click the link; that provider’s privacy policy then applies.
14. Recipients at a glance
- STRATO GmbH – hosting, database and e-mail dispatch (processor)
- Stripe Payments Europe Ltd. – payment processing
- Provider of the video conferencing tool – online events (processor)
- Google Ireland Limited – e-mail mailbox
Your data is not passed on to third parties for advertising purposes.
15. Your rights
You have the following rights vis-à-vis us with regard to your personal data:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.
An informal message to drpravdic.zorana@gmail.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
16. No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The assignment to recipient groups (section 7) serves only to select suitable content and has no legal or similarly significant effect on you.
17. Obligation to provide data
You are under no legal or contractual obligation to provide us with personal data. However, without the information marked as mandatory, we cannot process your enquiry, registration or order.
18. Changes
We amend this privacy policy when our offerings or the legal situation change. The version published here at the time applies.
As of: October 2026