Privacy policy

1. Controller

Ahilan Sundaralingam

Dreamwave (Einzelunternehmen)

Herrfurthstraße 30

12049 Berlin

Deutschland

Email: hello@thedreamwave.org

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, technically necessary data is processed: IP address, date and time, the page requested, referrer, browser type and operating system.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the website. A data processing agreement is in place with Vercel, and transfers to the USA are covered by the European Commission’s standard contractual clauses.

3. Audience measurement (Vercel Web Analytics and Speed Insights)

We use Vercel Web Analytics and Vercel Speed Insights to understand which pages are visited, where visitors come from and how fast pages load. The measurement works without cookies and without cross-device recognition, and the data is evaluated in aggregate.

The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in designing the website to suit its visitors.

4. Meta Pixel (only with your consent)

If you click “Accept” in the cookie notice, we load the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We use it to measure how our ads on Facebook and Instagram perform, for example whether a page of this website is visited after someone clicks an ad. It sets cookies and sends data such as your IP address, browser information, the pages visited and the time to Meta. Meta may link this data to your Facebook or Instagram account and may also transfer it to the USA. We and Meta are joint controllers for collecting and transmitting this data (Art. 26 GDPR); the agreement is available at https://www.facebook.com/legal/controller_addendum.

The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Without consent, the pixel is not loaded. You can withdraw your consent at any time via the “Cookie settings” link in the website footer. More information: https://www.facebook.com/privacy/policy

5. Fonts and scripts

The fonts (Inter, Cormorant Garamond) and the libraries used for the world map are served from our own server. Opening a page therefore transfers no data to Google or other third parties.

6. Contacting us

If you write to us by email, we process your details in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where a contract is being prepared or performed, otherwise Art. 6 (1) (f) GDPR.

We delete the data once it is no longer needed and statutory retention periods have expired.

7. Newsletter

Our newsletter is sent with Brevo, a service of Sendinblue GmbH, Koepenicker Strasse 126, 10179 Berlin, Germany. Sign-up uses double opt-in: after entering your address you receive an email asking you to confirm.

We process your email address, your name if given, and the time and IP address of the sign-up and the confirmation. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can withdraw it at any time, for example via the unsubscribe link in every email.

The form is protected against automated sign-ups by Google reCAPTCHA, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage data such as your IP address and mouse movements is transmitted to Google, including to the USA. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in preventing abuse.

8. Booking and payment

Courses and trainings are booked through Stripe, provided by Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Dublin, Ireland. You are only forwarded to Stripe once you click a booking button, and you enter your payment details directly with Stripe. We do not receive complete payment data.

The legal basis is Art. 6 (1) (b) GDPR for the performance of the contract. Stripe’s own privacy information applies in addition.

9. Event data

We maintain the dates and locations shown on this website in Notion. That data is fetched on the server when the pages are built and baked into them. Visiting the website creates no connection to Notion, and no data about you is sent there.

10. Cookies

Without your consent, the website itself sets no cookies. If you consent, the Meta Pixel sets cookies (see section 4). We store your choice locally in your browser (localStorage) so the notice does not appear on every page. In addition, cookies may be set by embedded services, in particular by Google reCAPTCHA in the newsletter form and by Stripe once you move to a booking page.

11. Your rights

You have the right to information, rectification, erasure and restriction of processing, the right to data portability, and the right to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future.

To do so, write to hello@thedreamwave.org.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany.

12. Changes

We update this privacy policy when the website or the services we use change. The version published here is the one that applies.