KUMARA · Legal Information

Privacy Policy

Last updated: 8 November 2026

1. Data controller

The person responsible for processing personal data in connection with this website is:

David Röhrborn
KUMARA
Meisenweg 8
24787 Fockbek
Germany

Phone: +49 15567 736096
Email: kontakt@davidkumara.de

2. General information

I process personal data only in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR).

Personal data is information relating to an identified or identifiable natural person.

Technical connection data may be processed when you use this website. Other personal data is processed in particular when you contact me, enquire about classes or request individual guidance.

3. Hosting by Netlify

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify delivers the website files through a globally distributed network. Domain name resolution (DNS) for davidkumara.com is also managed through Netlify.

According to Netlify, its Data Processing Agreement forms part of its contractual terms.

Further information: Netlify’s privacy policy and Data Processing Agreement.

4. Technical connection data and operational monitoring

When you access this website, Netlify processes technical request data. This includes, in particular, your IP address, the requested URL, the time and method of the request, browser information, response status and the volume of data transferred.

This processing serves to deliver content, monitor technical operations, analyse errors and prevent abusive access. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is in operating a secure and reliable website.

Netlify provides server-side operational information through Observability. According to Netlify, the Free plan used here provides a viewing window covering the previous 24 hours. This viewing window does not constitute a commitment that all logs held by the provider are deleted after 24 hours.

Any storage required beyond this period depends on the relevant operational or security purpose and statutory obligations. Further information about processing can be requested using the contact details above.

5. Contact by email or telephone

If you contact me by email or telephone, I process the information you provide. This may include:

• your name,
• email address,
• telephone number,
• the content and time of your enquiry,
• details of the class or individual guidance you are interested in.

The data is used to handle your enquiry and, where applicable, to prepare or perform a contract. The legal basis is Article 6(1)(b) GDPR where processing concerns contractual or pre-contractual steps. Other enquiries are processed on the basis of Article 6(1)(f) GDPR. My legitimate interest is in handling incoming messages appropriately.

The data is deleted when it is no longer needed for the relevant purpose, unless statutory retention obligations or other lawful grounds require further storage.

Email mailbox with IONOS

Emails sent to kontakt@davidkumara.de are received and stored in a mailbox provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Outgoing emails are sent through IONOS’s outgoing mail server. IONOS processes this data on my behalf (Article 28 GDPR).

Further information: IONOS’s privacy policy.

Forwarding to Gmail

Incoming emails are automatically forwarded to my Gmail mailbox, which I use to handle and respond to enquiries. Google processes email addresses, messages, attachments and technical communication data in this context. Simply visiting this website does not establish a connection to Google.

The consumer version of Gmail is governed by Google’s terms of service and privacy policy. Google does not offer a data processing agreement for this version and does not describe its role as that of a processor. Google’s processing is separate from my handling of your enquiry as described above.

Further information: Google’s privacy policy and Privacy information for Google services.

6. Enquiries about classes and individual guidance

If you are interested in a KUMARA class, workshop or individual guidance, I process the information needed to handle your enquiry and, where applicable, organise the agreed service. This may include contact details, information about the offering you are interested in and organisational details.

The legal basis is Article 6(1)(b) GDPR where processing relates to entering into or performing a contract.

Please do not send sensitive health information in general enquiries. If such information is needed for individual guidance, arrangements for handling it will be agreed separately.

7. Cookies and similar technologies

The website files do not set cookies or store information in Local Storage or Session Storage. No advertising or tracking scripts are included. Server-side processing associated with hosting is described in sections 3 and 4.

8. Fonts, images and external links

This website uses the Cormorant Garamond and Jost fonts. They are served by the hosting provider along with the other website files; no connection is made to Google Fonts or other font providers. Images and graphics are also delivered exclusively by the hosting provider. No maps, embedded videos, social media widgets or booking systems are embedded.

The contact buttons open your email program or phone app. There is no contact form on this website. The “Get directions” link opens Google Maps only when clicked. External links take you to the relevant third-party website only when clicked; that provider’s privacy policy then applies.

9. Retention periods

I retain contact and enquiry data for as long as it is needed to handle your request or provide an agreed service. It is then deleted unless statutory retention obligations or legitimate grounds, such as establishing or defending legal claims, require otherwise.

The criteria explained in section 4 apply to technical operational data. Google describes different retention and deletion procedures for its services; deleting an item from a mailbox does not always mean it is immediately removed from all backup systems. For details, see Google’s information on data retention.

10. Recipients and international data processing

The recipient in connection with website operations is Netlify, including the subprocessors used for hosting. In email communications, data is also processed by IONOS, Google and the email providers involved.

Netlify and Google may also process data in the USA or other countries outside the European Economic Area. Netlify’s published Data Processing Agreement provides for the EU–U.S. Data Privacy Framework for relevant transfers and, where that framework does not apply, EU Standard Contractual Clauses. The contractual provisions and list of subprocessors are available through the documents linked in section 3.

Information on Google’s international data processing and the safeguards it uses can be found in Google’s privacy policy, linked in section 5.

11. Your rights

Subject to the applicable legal requirements, you have the following rights in particular:

• Access to your personal data under Article 15 GDPR.
• Rectification of inaccurate data under Article 16 GDPR.
• Erasure of your data under Article 17 GDPR.
• Restriction of processing under Article 18 GDPR.
• Data portability under Article 20 GDPR.
• Objection to certain processing of your data under Article 21 GDPR.
• Withdrawal of consent with effect for the future under Article 7(3) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you may object to that processing on grounds relating to your particular situation. You may object at any time to processing for direct marketing purposes.

To exercise your rights, please contact kontakt@davidkumara.de .

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for Schleswig-Holstein is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98
24103 Kiel
Email: mail@datenschutzzentrum.de
Website: https://www.datenschutzzentrum.de

13. Data security

This website is delivered over an encrypted HTTPS connection. This protects transmission between your browser and the website. Sending an email through your email program uses a separate transmission channel.

14. Changes to this privacy policy

This privacy policy will be updated if the legal requirements or the actual data processing on this website change.