Privacy policy. What happens with your data. And what does not.

The controller under the Swiss Data Protection Act (revDSG) and, where applicable, the GDPR is:

CompanyDITTRICH & PARTNERS GmbH

AddressBrodlaube 18, 4310 Rheinfelden, Switzerland

UID / VATCHE-192.735.802

E-mailandy@shamanic-ways.com

SHAMANIC WAYS is the book series by Andy Dittrich. FIVE MOVES is the brand under which DITTRICH & PARTNERS GmbH runs its seminars. Both belong to the same company, so there is only one controller.

This privacy policy covers the website shamanic-ways.com and its subpages in all language versions, and the booking of the evenings and weekends offered on this website.

It does not cover other websites we link to. If you order a book from a bookshop or pay through Stripe, that provider’s own privacy policy applies there.

This website is plain HTML: no database, no content management system, no user accounts. There are two forms: signing up (“I’ll write when something comes up”) and booking the introductory call. Both send directly to our customer system, see section 5. Fonts and images sit on our own server; no external fonts, maps or videos are embedded.

Web hostingcyon AG, Brunngässlein 12, 4052 Basel, Switzerland

When you open the page, the hosting provider automatically records server logfiles for technical reasons: IP address, date and time, the file requested, the amount of data transferred and the browser used. These logs serve only the technical operation and security of the site, are not combined with other data and are not used to identify individuals. They are deleted after 30 days at the latest. The legal basis is our legitimate interest in running the site securely.

The servers are located in Switzerland.

When you click “Reserve a place”, you leave this website and are taken to a payment page hosted by Stripe. There you enter your name, your e-mail address and your payment details.

Payment providerStripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin, Ireland

Stripe processes this data as its own controller in order to carry out the payment, and sets cookies on its own page, among other things for fraud detection. Stripe’s privacy policy applies: stripe.com/privacy.

We never see full card details. From Stripe we receive your name, your e-mail address, the amount, the payment status, a payment reference and which evening or weekend you booked.

The legal basis is the performance of our contract with you.

We run our own customer system (CRM). It is not third-party software but built by us, and it runs on our own servers at cyon in Basel. Your data therefore stays in Switzerland. We do not pass it on to third parties, we do not sell it and we do not use it to advertise other companies’ offers.

After a booking we store:

• name and e-mail address, and the postal address when an invoice requires it
• the evening or weekend booked, its date and your attendance status
• the invoice with amount, number and payment status, plus the Stripe payment reference
• the fact that your booking confirmation was sent, so we know it reached you
• organisational notes, for instance a cancellation or a transfer to another date

The purpose is running the evening or weekend, issuing the invoice and meeting our bookkeeping obligations. Access is limited to Andy Dittrich and the accountant engaged for the books, in each case only as far as their task requires. The legal bases are performance of the contract and our statutory retention obligations.

If you sign up on this website, we store your first name, your e-mail address and the interest you chose (for instance the books, the evenings or Kiental 2027). You receive a confirmation by e-mail. The purpose is to write to you when something new comes up. The legal basis is your consent. We delete the entry as soon as you unsubscribe.

If you book an introductory call for the mentoring, we store your first name, last name, e-mail address, the time you chose and your note, if you write one. The purpose is the call. The legal basis is pre-contractual steps taken at your request. For the appointment we create an entry in Google Calendar, and the call runs on Google Meet (Google Ireland Limited, Dublin, Ireland). For this, your name, e-mail address and time go to Google.

Both forms send encrypted to our customer system on fivemoves.org, which runs on the same servers at cyon in Basel.

After payment you receive a booking confirmation with the details of the evening or weekend and your invoice as a PDF. The sender is Andy Dittrich · SHAMANIC WAYS, andy@shamanic-ways.com. These messages are sent through cyon’s mail server in Switzerland.

Before the evening or weekend we may send you practical information, for example about how to get there. Every one of these messages contains an unsubscribe link. There is no regular newsletter. If you have signed up, we only write when something new comes up that matches your interest. One word to andy@shamanic-ways.com is enough to unsubscribe.

For our personal e-mail we use Google Workspace (Gmail) from Google Ireland Limited, Dublin, Ireland. If you write to us through a mail link on this site, your own mail program opens and your message ends up in our Google Workspace mailbox.

Google may process data on servers outside Switzerland and the EEA, including in the USA. The basis for this is the European Commission’s standard contractual clauses together with the EU-US Data Privacy Framework and its Swiss extension.

We use this data solely to answer your enquiry and delete it once that purpose is fulfilled and no retention obligation stands in the way. Please note that unencrypted e-mail is not a secure channel.

On the book pages we link to booksellers such as Books on Demand, Ex Libris, Dussmann, Morawa and Amazon. These are ordinary links with no affiliate programme and no transfer of data about you. Only when you order something there does that retailer process your data under its own privacy policy.

This website sets no cookies, uses no analytics or marketing tools such as Google Analytics or the Facebook pixel, embeds no external fonts, maps or social media elements, and does not analyse your behaviour on the page. That is why you see no cookie banner here.

Cookies are set only by Stripe’s payment page once you start a booking. That is outside our control.

Server logfiles30 days at most

Invoices and accounts10 years, required by Art. 958f of the Swiss Code of Obligations

Booking and contact dataup to two years after the evening or weekend, then deleted unless a retention obligation applies

Signing upuntil you unsubscribe

Introductory callup to one year after the call, then deleted if no mentoring follows

E-mail enquiriesuntil the enquiry is settled

Your booking and customer data stays in Switzerland. Data leaves the country in three cases only: payment through Stripe (Ireland, partly USA), e-mail through Google Workspace (Ireland, partly USA) and the introductory call through Google Calendar and Google Meet (Ireland, partly USA).

In all three cases the basis is the European Commission’s standard contractual clauses together with the EU-US Data Privacy Framework and its Swiss extension, for which the providers are certified.

The website and all forms in our systems are TLS encrypted, which you can see from the https in the address bar. Access to the customer system is restricted to named people and password protected. Backups are likewise held in Switzerland.

You have the right to information about the data we hold about you, to rectification, to erasure and to restriction of processing, and, where the law provides for it, to data portability and to object. Information is free of charge for you.

Please write to the e-mail address in section 1. We answer as quickly as we can and within 30 days at the latest. To protect your data we may ask you to prove your identity.

Please note that we must keep invoice data for ten years even if you ask us to delete it; the Swiss Code of Obligations requires this.

You have the right to lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. If you live in the EU, you can contact the supervisory authority of your country of residence.

We update this privacy policy whenever changes to the website, to our services or to the legal requirements make it necessary. The version published on this page is the one that applies.