Holistika Center Privacy Policy

Last updated: 1 September 2026

Privacy Policy - Last updated: 1 September 2026

​

This Privacy Policy explains how Holistika Center collects, uses, and protects your personal data when you visit holistika.center, contact us, or submit a form — including lead forms shown on Facebook and Instagram.

We handle your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

​

1. Who we are

Holistika Center is the data controller responsible for the personal data described in this policy.

Email: contact@holistika.center Phone: +34 644 656 129

If you have any question about this policy or about your data, contact us at the email above and we will respond.

 

2. What data we collect

Data you give us directly

• Contact details — your full name, email address, and phone number. This is what we collect when you submit a form on our website or a lead form on Facebook or Instagram.

• Enquiry details — the programme, retreat, or training you are interested in, your preferred dates, and anything else you choose to tell us.

• Health information — if you move forward with a booking, we ask you to complete a health evaluation. Health data is a special category of personal data under GDPR Article 9. We process it only with your explicit consent, only to assess suitability and safety, and only for as long as necessary.

 

Data collected automatically

• Technical data such as IP address, browser type, device, and pages visited, through cookies and similar technologies.

• Analytics and advertising identifiers, where you have consented to them.

 

3. Why we use your data, and our legal basis

To reply to your enquiry and send you the information you asked for. Legal basis: your consent, and steps taken at your request before entering a contract (GDPR Art. 6(1)(a) and 6(1)(b)).

To send you follow-up messages, newsletters, or offers about our programmes. Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time.

​

To assess your suitability and safety for a programme. Legal basis: your explicit consent to process health data (Art. 9(2)(a)).

To administer bookings, payments, and invoices. Legal basis: performance of our contract with you, and our legal obligations (Art. 6(1)(b) and 6(1)(c)).

​

To improve our website and measure our advertising. Legal basis: your consent, or our legitimate interest in understanding what is useful (Art. 6(1)(f)).

Lead forms on Facebook and Instagram. When you submit one of our lead forms, Meta passes us the name, email address, and phone number you confirmed in the form. We use it to contact you about the programme the ad referred to. We do not sell your data, and we do not use it for an unrelated purpose without asking you first.

 

4. Who we share data with

We share personal data only with the service providers who help us operate, and only as far as they need it to do their job:

• Meta Platforms Ireland Ltd — when you submit a lead form on Facebook or Instagram

• Wix.com Ltd — our website and hosting provider

• Our email, scheduling, and customer-management providers, who process enquiries and bookings on our behalf

• Our payment providers, where you make a payment

• Our facilitators and programme staff, where they need it to deliver a programme you have booked

 

We never sell your personal data. Where a provider processes data outside the European Economic Area, the transfer is covered by Standard Contractual Clauses or an adequacy decision.

 

5. How long we keep it

• Enquiries that do not lead to a booking: up to 24 months from your last contact with us.

• Booking and client records: for the duration of our relationship, and afterwards for as long as Spanish tax and accounting law requires us to keep them.

• Health evaluation data: deleted within 12 months of the programme, unless you ask us to delete it sooner.

You can ask us to delete your data at any time.

 

6. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you

• Correct anything that is inaccurate

• Erase your data — the "right to be forgotten"

• Restrict or object to how we process it

• Portability — receive your data in a machine-readable format

• Withdraw your consent at any time, without affecting processing that already took place

To exercise any of these rights, email contact@holistika.center. We will respond within one month.

You also have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

 

7. Cookies

Our website uses cookies for essential functionality, analytics, and advertising. You can manage your preferences through the cookie banner or through your browser settings.

 

8. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Access to health information is limited to the people who need it to do their work.

 

9. Children

Our services are for adults only. We do not knowingly collect data from anyone under 18.

 

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

Questions about this policy? Email us at contact@holistika.center.