Privacy Policy

1. Introduction

Lobato Olondo Marta ("we," "us," or "our"), located at Avenue Brugmann 122, 1190 Brussels, Belgium, is committed to protecting the privacy and personal data of all visitors and users of our website. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or interact with our services.

This policy applies to all personal data processed through our website and related communications. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

We process personal data in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Belgian data protection laws, including the Belgian Data Protection Act of 30 July 2018.

2. Data Controller

The data controller responsible for processing your personal data is:

If you have any questions about this Privacy Policy or how your data is processed, please contact us using the information provided above.

3. Personal Data We Collect

We may collect and process the following categories of personal data depending on how you interact with our website:

3.1 Information You Provide Directly

• Full name
• Email address
• Phone number
• Selected program or course preference
• Preferred learning format
• Messages, comments, or inquiries submitted through our contact form

3.2 Information Collected Automatically

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or source
• Date and time of access
• Device type (desktop, tablet, mobile)
• Cookie data and similar tracking technologies (see our Cookie Policy for details)

4. Purposes of Data Processing

We process your personal data for the following purposes:

• Responding to inquiries: To process and respond to questions, requests for information, or messages submitted through our contact form.
• Program enrollment communications: To provide information about our meditation and mindfulness education programs when you request it.
• Website functionality: To ensure the proper functioning, security, and performance of our website.
• Analytics and improvement: To understand how visitors use our website so we can improve user experience, content, and navigation.
• Legal compliance: To comply with applicable legal obligations under Belgian and European Union law.
• Consent management: To manage your cookie and communication preferences.

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds under the GDPR:

• Consent (Article 6(1)(a) GDPR): When you voluntarily submit your personal data through our contact form or subscribe to communications, you provide your explicit consent to process your data for the stated purposes. You may withdraw your consent at any time.
• Legitimate interest (Article 6(1)(f) GDPR): We may process certain data based on our legitimate interest in operating, maintaining, and improving our website and services, provided that such interests do not override your fundamental rights and freedoms.
• Legal obligation (Article 6(1)(c) GDPR): We may process your data when required to comply with applicable Belgian or EU legal requirements.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients only when necessary:

• Hosting and technology providers: Third-party service providers who host our website and provide technical infrastructure, bound by data processing agreements.
• Analytics providers: Third-party analytics tools used to understand website usage patterns. Data is anonymized or pseudonymized wherever possible.
• Legal authorities: Government bodies, law enforcement, or regulatory authorities when required by Belgian or EU law, or to protect our legitimate rights.

All third-party processors are contractually required to handle your data in accordance with GDPR and applicable data protection legislation.

7. International Data Transfers

Our website serves participants across Canada. If personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission for the receiving country
• Other appropriate legal mechanisms recognized under the GDPR

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

• Contact form data: Retained for up to 24 months from the date of submission, unless a longer retention period is required for ongoing communication or legal compliance.
• Website analytics data: Retained in anonymized or aggregated form for up to 26 months.
• Cookie data: Retained as described in our Cookie Policy.

Once the retention period expires, your data is securely deleted or anonymized so that it can no longer be associated with you.

9. Your Rights Under GDPR

Under the GDPR and Belgian data protection law, you have the following rights regarding your personal data:

• Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): You have the right to request deletion of your personal data under certain circumstances ("right to be forgotten").
• Right to restriction (Article 18): You have the right to request restriction of processing of your personal data under certain circumstances.
• Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by the GDPR.

10. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of the GDPR or applicable Belgian data protection law, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit):

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for data transmitted between your browser and our website
• Secure server infrastructure with access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Data processing agreements with third-party service providers

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

12. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

13. Children's Privacy

Our website and educational programs are designed for adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such data from our records. If you believe a minor has provided us with personal data, please contact us at [email protected].

14. Links to Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party websites you visit before providing them with personal data.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Continued use of our website after any changes constitutes your acceptance of the revised Privacy Policy.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of Belgium and the applicable regulations of the European Union, including the GDPR. Any disputes arising from or related to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Brussels, Belgium.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us: