Privacy Policy

1. Data Controller

Taita Inti Organisation
Location: Europe, Peru and Asia
Email: info@taitainti.com
Phone: +36705557982

2. Information We Collect

2.1 Personal Information You Provide

• Contact information (name, email address, phone number)
• Retreat preferences and experience level
• Messages and communications you send to us
• Medical and health information (for retreat participation)
• Payment and billing information
• Emergency contact details

2.2 Information Automatically Collected

• IP address and location data
• Browser type and version
• Device information
• Website usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We process your personal data for the following purposes:

• Service Provision: To organize and conduct retreats, provide customer support, and fulfill our contractual obligations
• Communication: To respond to inquiries, send updates about retreats, and provide important safety information
• Safety and Health: To ensure participant safety during ceremonies and retreats
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send newsletters and promotional content (with your consent)
• Website Improvement: To analyze website usage and improve our services

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: When you voluntarily provide information or agree to marketing communications
• Contract Performance: To fulfill our obligations when you book a retreat or service
• Legitimate Interest: For business operations, safety measures, and website analytics
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interest: To protect health and safety during ceremonies

5. Data Sharing and Disclosure

We may share your information with:

• Retreat Staff: Shamans, facilitators, and medical professionals involved in your retreat
• Service Providers: Payment processors, accommodation providers, and transportation services
• Legal Authorities: When required by law or to protect safety
• Emergency Contacts: In case of medical emergencies during retreats

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill contractual obligations
• Comply with legal requirements (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain safety records and medical information as required

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Opt-out of certain processing activities
• Right to Withdraw Consent: Revoke consent at any time

To exercise these rights, contact us at info@taitainti.com

8. Cookies and Tracking

We use cookies and similar technologies to:

• Ensure website functionality
• Analyze website traffic and user behavior
• Personalize content and advertisements
• Remember your preferences

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Secure storage and disposal of physical records

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including Peru for retreat services. We ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding corporate rules and certification schemes

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.