Privacy Policy

The controller within the meaning of the GDPR is: Aditya GmbH, Brunnenstraße 147, 10115 Berlin Managing Director: Lennart Trenkelbach Email: info@esoterischeastrologie.de

We process personal data only to the extent necessary to enable you to use our website and services, to fulfil contractual and legal obligations, or on the basis of legitimate interests. The relevant legal bases are in particular Art. 6(1)(a) (consent), (b) (performance of a contract), (c) (legal obligation) and (f) (legitimate interest) GDPR.

Our website and application are hosted by the following processors: • Cloudflare, Inc. — content delivery and application delivery. Server locations in the EU. Technical access data (IP address, user agent, timestamp) is processed for provision, security and attack detection. • Supabase (EU region) — database, authentication, file storage. A data processing agreement is in place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Deletion after 30 days at the latest, unless security-relevant incidents occur.

To use the member area and the Sternenrat app, you create a user account. For this we process your email address, name, password hash and, where applicable, OAuth identifiers (e.g. Google login). Legal basis: Art. 6(1)(b) GDPR. You may have your account deleted at any time upon request.

To calculate astrological charts, we process birth data (date, time, place) — either yours or that of persons whose consent you have obtained. This data is used exclusively for chart calculation, storage in your account and use by the AI astrologer. Legal basis: Art. 6(1)(b) GDPR. Storage for as long as your account exists; deletion possible at any time via the member area.

For bookings of consultations, courses and subscriptions, we process the information you provide in the booking form as well as payment data via Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin, Ireland). Card data is processed exclusively by Stripe; we only see the payment status and the information required for invoicing.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (statutory retention obligation, 10 years). Stripe's privacy notice: stripe.com/privacy.

Video calls take place via Zoom Video Communications, Inc. Meeting links are generated automatically via the Zoom API and sent to you by email. Zoom may process personal data (name, email, connection data) and may transfer it to the USA. Transfers are based on EU Standard Contractual Clauses. Zoom's privacy policy: zoom.us/privacy.

We send transactional emails (booking confirmations, reminders, password resets) via Resend, Inc. in the EU region as well as via our mailbox at Microsoft 365 (Outlook). Legal basis: Art. 6(1)(b) GDPR.

Appointments are synchronised with Google Calendar (Google Ireland Ltd.) to match availability and enter appointments. Only the data necessary for appointment management is transmitted. Google's privacy policy: policies.google.com/privacy.

If you consent to the "Marketing" category, we load the Google tag (gtag.js) provided by Google Ireland Ltd. and use Google Ads conversion tracking and remarketing. This processes cookies or comparable identifiers and the Google click ID (gclid) in order to measure which ad led to a sign-up, booking or purchase, and to show you relevant ads again.

For purchases we additionally transmit the revenue value server-side and, for enhanced conversions, a cryptographically hashed form of your email address to Google Ads. We cannot identify you from these hashes.

Without your consent no Google script is loaded; all consent signals are set to "denied" via Google Consent Mode v2. Legal basis: Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG. You can withdraw your consent at any time via "Cookie settings" in the footer. Transfers to the USA may take place on the basis of EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Google's privacy policy: policies.google.com/privacy.

For chart interpretations, daily horoscopes and chats with the AI astrologer, we use an AI gateway that forwards requests to language models from Google (Gemini) and OpenAI. Requests contain the chart data and your messages; they are used to generate a response and are not used to train the models. Legal basis: Art. 6(1)(b) GDPR.

Public videos from our YouTube channel are converted into blog posts using the YouTube API and the transcription service Supadata. No personal data of our users is transmitted in this process.

If you use our contact form, we process the data you provide there in order to handle your enquiry. Legal basis: Art. 6(1)(b) and (f) GDPR. Deletion after your enquiry has been finally processed, unless statutory retention obligations require otherwise.

We use only technically necessary cookies or local storage entries (e.g. for login sessions, language settings, shopping cart). These are required for the application to function (§ 25(2) TDDDG, Art. 6(1)(f) GDPR). No tracking or profiling for advertising purposes takes place.

You have the right, at any time, to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future.

Please direct any requests to: info@esoterischeastrologie.de

Right to lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

All connections are SSL/TLS encrypted. Access to personal data is restricted on a role basis; databases use row-level security. Passwords are stored exclusively as salted hashes.

We will adapt this privacy policy as soon as legal requirements or our services change. The current version can always be found on this page.