1. Introduction

Naropa Parivartan respects the privacy of all participants, customers and visitors to the website and ensures that personal information is treated confidentially. In this privacy statement we explain:

• which personal data we collect;
• why we process this data;
• how long we retain data;
• with whom data is shared;
• what rights you have under the GDPR.

This privacy statement applies to all services, products, programmes, retreats, events and online activities of Naropa Parivartan.

2. Data Controller

Controller responsible for the processing of personal data: Naropa Parivartan Website: Naropa.eu Email: info@naropa.eu Address: Groenewege 72, 2211 EN, Noordwijkerhout, The Netherlands Trade Register (KvK): 59968052 / VAT: NL 853713935B01

3. What Personal Data Do We Collect?

Naropa Parivartan may process the following personal data: When placing orders, bookings or participating

• First and last name
• Invoice and address details
• Email address
• Phone number
• Payment details
• Company details (if applicable)

When registering an account

• Username
• Login details
• Purchase and booking history

When subscribing to newsletters

• Name
• Email address
• Preferences or interests if voluntarily provided

When using contact forms

• Name
• Email address
• Phone number
• Content of messages

Automatically collected data

• IP address
• Browser type
• Device data
• Cookies and tracking data
• Browsing and click behaviour on the website

During retreats, journeys or events Where relevant for safety or guidance, voluntarily provided health or wellbeing data may be processed. This data is treated with the utmost confidentiality and used exclusively for guidance and safety.

4. Why Do We Process Personal Data?

Naropa Parivartan processes personal data for the following purposes:

• processing orders and payments;
• delivering products, tickets and online programmes;
• managing accounts;
• communication about bookings, retreats and events;
• sending newsletters and updates;
• customer service and support;
• improving the website and our services;
• complying with legal obligations;
• securing the website and preventing fraud.

We process personal data exclusively on the basis of:

• performance of an agreement;
• legal obligation;
• consent;
• legitimate interest.

5. Retention Periods

Naropa Parivartan does not retain personal data for longer than necessary for the purposes for which it was collected. General guidelines:

• Administrative and invoice data: maximum 7 years (statutory retention obligation)
• Contact requests: maximum 5 years
• Newsletter data: until consent is withdrawn
• Account data: for as long as the account is active
• Retreat or intake data: for as long as relevant for guidance and safety

After the retention period has expired, data is deleted or anonymised.

6. Sharing Personal Data

Naropa Parivartan never sells personal data to third parties. Data may only be shared with:

• payment providers;
• accounting and administration software;
• newsletter systems;
• hosting and website providers;
• learning platforms or course environments;
• legal authorities where legally required.

Data processing agreements are concluded with external processors where necessary, in accordance with the GDPR.

7. Cookies and Tracking

The Naropa Parivartan website uses cookies and similar techniques. Functional cookies Necessary for the correct functioning of the website, shopping cart and accounts. Analytical cookies For insight into website usage and improving performance. Marketing and tracking cookies May be used for advertisements, social media integrations and personalised content. Through cookies, personal data such as IP addresses or browsing behaviour may be processed. On first visiting the website, consent is requested for non-essential cookies in accordance with the GDPR and ePrivacy regulations. Users can manage or delete cookies via their browser settings.

8. Newsletters

Naropa Parivartan only sends newsletters when consent has been given for this. Every newsletter includes an option to unsubscribe.

9. Security of Personal Data

Naropa Parivartan takes appropriate technical and organisational measures to protect personal data against:

• loss;
• misuse;
• unauthorised access;
• unwanted disclosure.

10. Rights of Data Subjects

Under the GDPR you have the right to:

• access your personal data;
• have data corrected;
• have data deleted;
• withdraw consent;
• object to processing;
• transfer your data;
• lodge a complaint with the supervisory authority.

Requests can be sent to: info@naropa.eu We will respond within the statutory period.

11. Minors

Naropa Parivartan does not intend to collect data from persons under the age of 16 without the consent of a parent or legal representative.

12. Changes

Naropa Parivartan reserves the right to amend this privacy statement. The most current version is always available via the website.

13. Contact

For questions about this privacy statement or the processing of personal data: Naropa Parivartan Website: Naropa.eu Email: info@naropa.eu Address: Groenewege 72, 2211 EN, Noordwijkerhout, The Netherlands