Privacy
Last updated: 22 October 2026
1. Controller
Alexandros Pappas
Celestial Roots
Karl-Marx-Allee 95
10243 Berlin
Germany
Email: hello@celestialroots.eu
2. Visiting this website
When you access this website, technical connection data may be processed by the hosting infrastructure in order to deliver the website securely and reliably. This can include information such as your IP address, browser and device information, requested page, date and time of access, and technical log data.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable and technically correct provision of the website.
All fonts used on this website are hosted on this website itself. No connection to Google Fonts or other external font services is made.
3. Hosting by Netlify
This website is hosted using services provided by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify may process technical website data on behalf of Celestial Roots. Where personal data is transferred to the United States, Netlify states that it participates in the EU-U.S. Data Privacy Framework and also uses contractual safeguards for international transfers.
4. Contact form
If you use the contact form, the information you enter — currently your name, email address and message — is processed so that Celestial Roots can respond to your enquiry and arrange a first meeting.
The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns steps prior to entering into a service relationship. For general enquiries, processing may be based on Art. 6(1)(f) GDPR, namely the legitimate interest in responding to communications addressed to the practice.
The form is handled through Netlify Forms. Form submissions are stored in Netlify’s systems and should be deleted once they are no longer required for the enquiry, subject to any applicable legal retention duties. Please do not send sensitive health information through the website form.
Providing your details is voluntary. Without a name, email address and message, however, Celestial Roots cannot reply to your enquiry.
5. Online booking via Cal.com
This website links to an online booking page for the free first meeting. The booking page is operated by Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA (“Cal.com”). It is an external link: no content from Cal.com is embedded on this website, and no connection to Cal.com is made from this website until you choose to open the booking page.
When you book, you enter data such as your name, email address, any note you choose to add, and your chosen date and time. This data is used to arrange and confirm the appointment, to send confirmations and reminders, and to communicate with you about the meeting. Please do not enter sensitive health information in the booking form.
Cal.com processes this booking data on behalf of Celestial Roots as a processor under a data processing agreement. The legal basis is Art. 6(1)(b) GDPR, namely steps prior to entering into a service relationship that are taken at your request.
Cal.com is based in the United States, and booking data may be processed there. Cal.com states that it is certified under the EU-U.S. Data Privacy Framework and, where that framework does not apply, relies on the EU Standard Contractual Clauses. Further information is available in Cal.com’s privacy policy at cal.com/privacy. If the meeting takes place by video call, a video conferencing service may be used to create the meeting link, depending on the meeting settings, and that provider may process connection data under its own terms.
Booking data is kept only as long as it is needed to arrange and carry out the meeting and any resulting service, subject to any statutory retention duties.
6. Reviews and external links
The “Kind words” section shows selected excerpts from public Google reviews. Only reviews from people known to have attended a session are shown; no technical verification procedure is used. They are shortened where marked with “…” and credited by first name and initial only. The “Read all reviews on Google” and “Reviews on Google” links are simple external links. When you choose to follow one, the linked provider, for example Google, processes data under its own privacy terms. No Google content is embedded on this website.
If you wrote one of these reviews and would like it changed or removed from this website, please contact hello@celestialroots.eu.
7. Email communication
If you contact Celestial Roots by email, the information contained in your email is processed for the purpose of responding to you and, where relevant, arranging or administering sessions. Email services are provided through IONOS. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and, where applicable, Art. 6(1)(f) GDPR for general correspondence.
8. Phone, WhatsApp & social media communication
If you contact Celestial Roots by phone, WhatsApp or through a linked social media service, the information you choose to provide — such as your contact details and the content of your message — is processed for the purpose of responding to your enquiry and, where relevant, arranging or administering sessions.
The phone, WhatsApp and Instagram links on this website are simple external links. No WhatsApp or Instagram content is embedded on this website. When you choose to follow one of these external links or use the relevant third-party service, data may be processed by that provider under its own privacy terms.
The legal basis is Art. 6(1)(b) GDPR where your communication concerns steps prior to entering into, or the administration of, a service relationship. For general enquiries, processing may be based on Art. 6(1)(f) GDPR, namely the legitimate interest in responding to communications addressed to the practice.
9. Cookies, analytics and advertising
This website does not use analytics, advertising pixels or behavioural tracking. Celestial Roots does not intentionally set non-essential cookies through this website. If this changes, this privacy notice and any required consent mechanism will be updated before such technologies are used.
10. Retention
Personal data is retained only for as long as it is needed for the purpose for which it was collected and for any period required by applicable statutory retention obligations. Enquiry data that does not lead to an ongoing service relationship should be deleted when it is no longer needed for communication or legal purposes.
11. Your rights
Subject to the conditions of the GDPR, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, consent can be withdrawn for the future at any time.
You also have the right to lodge a complaint with a competent data protection supervisory authority. In Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
12. Changes to this notice
This notice may be updated when the website, service providers or data-processing practices change. The current version will be published on this page.