PRIVACY POLICY

Privacy Policy

Last Updated: 01/01/25

Welcome to REESET. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and Spanish data protection laws (LOPDGDD).

---

1. Who We Are

REESET (“we,” “our,” or “us”) is a wellness retreat and event provider based in Spain. We are committed to protecting your personal data and ensuring transparency in how we handle it.

- Company Name: REESET

- Registered Address: Carrer de la Mar Mediterrània 42, Son Bugadelles, Calvià, 07183

- Email: hello@timetoreeset.com

- Website: www.timetoreeset.com

---

2. What Data We Collect

We may collect and process the following types of personal data:

A. Information You Provide to Us

- Identity Data: Name, surname, date of birth.

- Contact Data: Email address, phone number, postal address.

- Booking Data: Details about retreats, events, and services booked.

- Health Data (with explicit consent): Relevant health information for retreat participation (e.g., allergies, injuries, dietary restrictions).

- Payment Data: Transaction details but no credit/debit card details (processed securely by third-party payment processors).

B. Information We Collect Automatically

- Website Usage Data: IP address, device type, browsing behaviour via cookies.

- Marketing & Communication Preferences: Your choices regarding newsletters and offers.

---

3. How We Use Your Data

We only process your personal data when we have a lawful basis to do so. These include:

- Contractual Necessity: To process retreat bookings and provide services.

- Legitimate Interest: To improve our services, communicate with you, and ensure security.

- Legal Obligation: To comply with Spanish tax and regulatory requirements.

- Consent: When sending marketing communications or processing health-related information.

Specific Uses

Purpose - Lawful Basis

Managing retreat bookings & payments - Contractual necessity

Sending newsletters & promotions - Consent

Responding to inquiries & customer support - Legitimate interest

Processing health information for wellness activities - Explicit consent

Website analytics & improvements - Legitimate interest

---

4. How We Share Your Data

We do not sell or rent your data. However, we may share it with:

- Service Providers (e.g., payment processors, email marketing platforms, IT support).

- Retreat Facilitators (only essential information required for event coordination).

- Legal & Regulatory Authorities (when required by law).

- Third-Party Marketing Tools (if you have given consent).

All third-party providers are required to comply with GDPR and maintain appropriate data security measures.

---

5. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as:

- EU Standard Contractual Clauses.

- Data Processing Agreements with service providers.

- Privacy Shield (if applicable).

---

6. How Long We Keep Your Data

We retain personal data only as long as necessary for:

- Legal & tax compliance (e.g., invoices are kept for 6 years under Spanish law).

- Customer support & service improvements.

- Marketing purposes (until you withdraw consent).

When no longer needed, data is securely deleted or anonymised.

---

7. Your Data Protection Rights

Under GDPR & LOPDGDD, you have the following rights:

- Access: Request a copy of your personal data.

- Correction: Update inaccurate or incomplete information.

- Deletion (Right to be Forgotten): Ask us to delete your data.

- Objection: Object to processing based on legitimate interest.

- Restrict Processing: Request to limit how we use your data.

- Data Portability: Request your data in a structured, electronic format.

- Withdraw Consent: Opt out of marketing at any time.

To exercise your rights, contact us at hello@timetoreeset.com.

If you believe we have mishandled your data, you can lodge a complaint with the Spanish Data Protection Authority (AEPD) ([www.aepd.es](https://www.aepd.es)).

---

8. Security Measures

We take appropriate technical and organisational measures to protect your personal data, including:

- Encryption & secure data storage.

- Access controls to restrict internal data access.

- Regular security audits.

However, no system is 100% secure. Please notify us immediately if you suspect a data breach.

---

9. Cookies & Tracking Technologies

We use cookies on our website to enhance user experience. These include:

- Essential Cookies: Required for website functionality.

- Analytics Cookies: Help us analyse website traffic.

- Marketing Cookies: Used for personalised advertising.

You can manage cookie preferences through your browser settings or our website’s cookie banner.

---

10. Updates to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or on our website.

Last updated: 01/01/25

---

11. Contact Us

If you have any questions about this Privacy Policy, contact us at:

- Email: hello@timetoreeset.com

- Postal Address: Carrer de la Mar Mediterrània 42, Son Bugadelles, Calvià, 07183

Thank you for trusting REESET with your personal data. Your privacy matters to us.

---