Privacy policyWhat happens with your data. And what does not.

1 · Controller

The controller under the Swiss Data Protection Act (revDSG) and, where applicable, the GDPR is:

CompanyDITTRICH & PARTNERS GmbH

AddressBrodlaube 18, 4310 Rheinfelden, Switzerland

UID / VATCHE-192.735.802

E-mailandy@shamanic-ways.com

SHAMANIC WAYS is the book series by Andy Dittrich. FIVE MOVES is the brand under which DITTRICH & PARTNERS GmbH runs its seminars. Both belong to the same company, so there is only one controller.

2 · Scope

This privacy policy covers the website shamanic-ways.com and its subpages in all language versions, and the booking of the weekends offered on this website.

It does not cover other websites we link to. If you order a book from a bookshop or pay through Stripe, that provider’s own privacy policy applies there.

3 · The website itself

This website is plain HTML: no database, no content management system, no user accounts, no forms. Fonts and images sit on our own server; no external fonts, maps or videos are embedded.

Web hostingcyon AG, Brunngässlein 12, 4052 Basel, Switzerland

When you open the page, the hosting provider automatically records server logfiles for technical reasons: IP address, date and time, the file requested, the amount of data transferred and the browser used. These logs serve only the technical operation and security of the site, are not combined with other data and are not used to identify individuals. They are deleted after 30 days at the latest. The legal basis is our legitimate interest in running the site securely.

The servers are located in Switzerland.

4 · Booking and payment for the weekends

When you click “Reserve a place”, you leave this website and are taken to a payment page hosted by Stripe. There you enter your name, your e-mail address and your payment details.

Payment providerStripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin, Ireland

Stripe processes this data as its own controller in order to carry out the payment, and sets cookies on its own page, among other things for fraud detection. Stripe’s privacy policy applies: stripe.com/privacy.

We never see full card details. From Stripe we receive your name, your e-mail address, the amount, the payment status, a payment reference and which weekend you booked.

The legal basis is the performance of our contract with you.

5 · Our own customer system in Switzerland

We run our own customer system (CRM). It is not third-party software but built by us, and it runs on our own servers at cyon in Basel. Your data therefore stays in Switzerland. We do not pass it on to third parties, we do not sell it and we do not use it to advertise other companies’ offers.

After a booking we store:

• name and e-mail address, and the postal address when an invoice requires it
• the weekend booked, its date and your attendance status
• the invoice with amount, number and payment status, plus the Stripe payment reference
• the fact that your booking confirmation was sent, so we know it reached you
• organisational notes, for instance a cancellation or a transfer to another date

The purpose is running the weekend, issuing the invoice and meeting our bookkeeping obligations. Access is limited to Andy Dittrich and the accountant engaged for the books, in each case only as far as their task requires. The legal bases are performance of the contract and our statutory retention obligations.

6 · E-mails you receive from us

After payment you receive a booking confirmation with the details of the weekend and your invoice as a PDF. The sender is FIVE MOVES Training, training@fivemoves.org. These messages are sent through cyon’s mail server in Switzerland.

Before the weekend we may send you practical information, for example about how to get there. Every one of these messages contains an unsubscribe link. We do not add you to a newsletter automatically.

7 · If you write to us

For our personal e-mail we use Google Workspace (Gmail) from Google Ireland Limited, Dublin, Ireland. If you write to us through a mail link on this site, your own mail program opens and your message ends up in our Google Workspace mailbox.

Google may process data on servers outside Switzerland and the EEA, including in the USA. The basis for this is the European Commission’s standard contractual clauses together with the EU-US Data Privacy Framework and its Swiss extension.

We use this data solely to answer your enquiry and delete it once that purpose is fulfilled and no retention obligation stands in the way. Please note that unencrypted e-mail is not a secure channel.

8 · Links to bookshops

On the book pages we link to booksellers such as Books on Demand, Ex Libris, Dussmann, Morawa and Amazon. These are ordinary links with no affiliate programme and no transfer of data about you. Only when you order something there does that retailer process your data under its own privacy policy.

9 · No cookies, no tracking

This website sets no cookies, uses no analytics or marketing tools such as Google Analytics or the Facebook pixel, embeds no external fonts, maps or social media elements, and does not analyse your behaviour on the page. That is why you see no cookie banner here.

Cookies are set only by Stripe’s payment page once you start a booking. That is outside our control.

10 · How long we keep your data

Server logfiles30 days at most

Invoices and accounts10 years, required by Art. 958f of the Swiss Code of Obligations

Booking and contact dataup to two years after the weekend, then deleted unless a retention obligation applies

E-mail enquiriesuntil the enquiry is settled

11 · Transfers abroad

Your booking and customer data stays in Switzerland. Data leaves the country in two cases only: payment through Stripe (Ireland, partly USA) and e-mail through Google Workspace (Ireland, partly USA).

In both cases the basis is the European Commission’s standard contractual clauses together with the EU-US Data Privacy Framework and its Swiss extension, for which both providers are certified.

12 · Data security

The website and all forms in our systems are TLS encrypted, which you can see from the https in the address bar. Access to the customer system is restricted to named people and password protected. Backups are likewise held in Switzerland.

13 · Your rights

You have the right to information about the data we hold about you, to rectification, to erasure and to restriction of processing, and, where the law provides for it, to data portability and to object. Information is free of charge for you.

Please write to the e-mail address in section 1. We answer as quickly as we can and within 30 days at the latest. To protect your data we may ask you to prove your identity.

Please note that we must keep invoice data for ten years even if you ask us to delete it; the Swiss Code of Obligations requires this.

14 · Right to complain

You have the right to lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. If you live in the EU, you can contact the supervisory authority of your country of residence.

15 · Changes

We update this privacy policy whenever changes to the website, to our services or to the legal requirements make it necessary. The version published on this page is the one that applies.