Privacy
Last updated: 22 September 2026
1. Controller
Alexandros Pappas
Celestial Roots
Groninger Straße 35
13347 Berlin
Germany
Email: hello@celestialroots.eu
2. Visiting this website
When you access this website, technical connection data may be processed by the hosting infrastructure in order to deliver the website securely and reliably. This can include information such as your IP address, browser and device information, requested page, date and time of access, and technical log data.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable and technically correct provision of the website.
3. Hosting by Netlify
This website is hosted using services provided by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify may process technical website data on behalf of Celestial Roots. Where personal data is transferred to the United States, Netlify states that it participates in the EU-U.S. Data Privacy Framework and also uses contractual safeguards for international transfers.
4. Contact form
If you use the contact form, the information you enter — currently your name and email address, and optionally your phone number and message — is processed so that Celestial Roots can respond to your enquiry and arrange a first meeting.
The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns steps prior to entering into a service relationship. For general enquiries, processing may be based on Art. 6(1)(f) GDPR, namely the legitimate interest in responding to communications addressed to the practice.
The form is handled through Netlify Forms. Form submissions are stored in Netlify’s systems and should be deleted once they are no longer required for the enquiry, subject to any applicable legal retention duties. Please do not send sensitive health information through the website form.
5. Email communication
If you contact Celestial Roots by email, the information contained in your email is processed for the purpose of responding to you and, where relevant, arranging or administering sessions. Email services are provided through IONOS. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and, where applicable, Art. 6(1)(f) GDPR for general correspondence.
6. Phone, WhatsApp & social media communication
If you contact Celestial Roots by phone, WhatsApp or through a linked social media service, the information you choose to provide — such as your contact details and the content of your message — is processed for the purpose of responding to your enquiry and, where relevant, arranging or administering sessions.
The phone, WhatsApp and Instagram links on this website are simple external links. No WhatsApp or Instagram content is embedded on this website. When you choose to follow one of these external links or use the relevant third-party service, data may be processed by that provider under its own privacy terms.
The legal basis is Art. 6(1)(b) GDPR where your communication concerns steps prior to entering into, or the administration of, a service relationship. For general enquiries, processing may be based on Art. 6(1)(f) GDPR, namely the legitimate interest in responding to communications addressed to the practice.
7. Cookies, analytics and advertising
At launch, this website does not use analytics, advertising pixels or behavioural tracking. Celestial Roots does not intentionally set non-essential cookies through this website. If this changes, this privacy notice and any required consent mechanism will be updated before such technologies are used.
8. Retention
Personal data is retained only for as long as it is needed for the purpose for which it was collected and for any period required by applicable statutory retention obligations. Enquiry data that does not lead to an ongoing service relationship should be deleted when it is no longer needed for communication or legal purposes.
9. Your rights
Subject to the conditions of the GDPR, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, consent can be withdrawn for the future at any time.
You also have the right to lodge a complaint with a competent data protection supervisory authority. In Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
10. Changes to this notice
This notice may be updated when the website, service providers or data-processing practices change. The current version will be published on this page.