Privacy Policy

1. Introduction

Paulo Flor Schildersbedrijf ("we," "us," or "our"), located at Bethlehemstraat 22 B 01, 3061 GB Rotterdam, Netherlands, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website or interact with our meditation and mindfulness education services. We serve participants throughout Canada and process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy legislation.

By using our website and submitting personal information through our forms, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described here, please refrain from using this website or submitting personal data.

2. Data Controller

The data controller responsible for processing your personal information is:

3. What Personal Information We Collect

We may collect the following categories of personal information when you interact with our website:

3.1 Information You Provide Directly

• Full name – provided when you submit a contact or inquiry form.
• Email address – provided when you submit a form to request program information or general inquiries.
• Phone number – optionally provided for contact purposes.
• Selected program preference – your choice of meditation or mindfulness education program.
• Preferred learning format – your preference for online or hybrid formats.
• Message content – any additional information you include in the message or comment field of our forms.

3.2 Information Collected Automatically

• IP address – collected when you visit our website for security and analytics purposes.
• Browser type and version – used to ensure proper website display and performance.
• Device information – such as operating system and screen resolution.
• Pages visited and navigation patterns – to understand how users interact with our website.
• Referring URL – the website from which you arrived at our website.
• Date and time of access – server log data for security and analytical purposes.
• Cookie data – as described in our Cookie Policy.

4. Why We Collect Your Information

We collect and process personal information for the following purposes:

• To respond to inquiries – when you submit a contact form, we use your information to respond to your request for educational program information.
• To provide educational services – to enroll you in selected meditation or mindfulness programs and deliver relevant materials.
• To communicate with you – to send follow-up information, program schedules, or educational updates that you have requested.
• To improve our website – to analyze website usage patterns, optimize content, and enhance the user experience.
• To ensure security – to protect our website against unauthorized access, spam, and malicious activity.
• To comply with legal obligations – to meet applicable Dutch and European Union legal requirements.

5. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent – when you submit a form and check the consent checkbox, you provide explicit consent for us to process your personal data for the stated purposes. You may withdraw your consent at any time by contacting us.
• Legitimate interests – we may process certain data (such as website analytics) based on our legitimate interest in improving our website and educational services, provided this does not override your fundamental rights.
• Legal obligation – we may process data when required by Dutch law or European Union regulations.

6. How We Store and Protect Your Information

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure HTTPS encryption across all pages of our website.
• Server-side validation of all form submissions.
• Spam protection mechanisms including honeypot fields.
• Restricted access to personal data, limited to authorized personnel only.
• Regular review of security practices and data handling procedures.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions are typically retained for a maximum of 24 months after the last communication, unless you request earlier deletion.

7. How Form Submissions Are Processed

When you submit an inquiry through our contact form, your information is transmitted securely over HTTPS and delivered to our corporate email address at [email protected]. We use the information you provide solely to respond to your inquiry and, if applicable, to provide you with educational program details. We do not sell, rent, or trade your form submission data to any third parties.

8. Sharing of Personal Information

We do not sell, trade, or rent your personal information to third parties. We may share your personal data only in the following limited circumstances:

• Service providers – we may engage trusted third-party service providers (such as hosting providers or email service providers) who process data on our behalf and are bound by data processing agreements compliant with the GDPR.
• Legal requirements – we may disclose your personal data if required by law, regulation, or legal process under Dutch or European Union jurisdiction.
• Protection of rights – we may share data when necessary to protect the rights, property, or safety of Paulo Flor Schildersbedrijf, our users, or the public.

9. International Data Transfers

As our organization is based in the Netherlands and serves participants in Canada, personal data may be transferred between the European Economic Area (EEA) and Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection for commercial organizations subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with Article 46 of the GDPR.

10. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website. We use essential cookies to ensure proper website functionality and may use analytics cookies to understand how visitors interact with our website. For full details about the cookies we use, how to manage your cookie preferences, and how to disable cookies in your browser, please refer to our Cookie Policy.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access – you have the right to request a copy of the personal data we hold about you.
• Right to rectification – you have the right to request that we correct any inaccurate or incomplete personal data.
• Right to erasure – you have the right to request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing – you have the right to request that we limit the processing of your personal data under certain circumstances.
• Right to data portability – you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object – you have the right to object to the processing of your personal data based on legitimate interests.
• Right to withdraw consent – where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by the GDPR.

12. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of the GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

13. Children's Privacy

Our website and educational programs are intended for adults. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that personal data has been collected from a child under 16 without appropriate parental consent, we will take immediate steps to delete that information.

14. Third-Party Links

Our website may occasionally reference external resources for informational purposes. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external websites you visit.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Continued use of our website after changes are published constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us: