Skip to content
sohrabpapahn
Sohrab Papahn in a dark blue jacket and jeans crouching in a garden among bamboo and shrubs

Privacy policy

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Healzone GmbH
Frankenring 16
30855 Langenhagen
Germany

Managing director: Kacper Tomasz Nowak
Email: sohrab@papahn.de

In brief

This website does not set cookies, does not use analytics or tracking services and does not load fonts, scripts or content from third-party servers. Personal data is only processed when you open the website (technical access data) and when you write to us through the contact form or by email.

Hosting

The website is operated by QUADRESS GmbH, Sophie-Opel-Straße 17, 44803 Bochum, Germany. The servers are located in a data centre of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in Falkenstein (Germany). Both process data solely on our behalf and according to our instructions (Art. 28 GDPR). No data is transferred to countries outside the European Union.

Visiting the website and server logs

Whenever you open a page, your browser technically has to send data to our server. The server logs:

  • IP address of the requesting device
  • date and time of access
  • requested address and HTTP status code
  • amount of data transferred
  • previously visited page (referrer), if your browser sends it
  • browser and operating system (user agent)

We need this data to deliver the website, to keep it secure and to detect faults. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The log files are limited in size and are continuously overwritten automatically. The data is not combined with other data and is not analysed with regard to individual persons.

The connection to the website is encrypted with TLS, which you can recognise by “https://” in your browser’s address bar.

Contact form

If you write to us through the contact form, we process the details you enter there: name, email address, phone number and your message. In addition, the date and time of receipt, the language of the page and the IP address of your device are transmitted. The IP address is used to detect misuse of the form.

The details are not stored in a database. They are forwarded immediately as an email through a mail server of QUADRESS GmbH to our mailbox. To protect against spam we do not use any third-party services, only our own technical checks on our server.

The legal basis is the consent you give when sending the form (Art. 6(1)(a) GDPR). If your request is aimed at concluding a contract, for example booking a coaching session or a course, Art. 6(1)(b) GDPR is an additional legal basis.

We delete your request once it has been dealt with, unless statutory retention obligations apply. You can withdraw your consent at any time with effect for the future; an informal email is sufficient.

Contact by email

If you email us directly, for example through a link on this website or to register for a course, we process your email address and the details in your message in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Deletion follows the same rules as for the contact form.

This website contains links to offers of other providers, for example jameda, Instagram, YouTube, TikTok, Amazon and beyondmeditation.de. These are plain links: no data is sent to these providers when you open our website. Only when you click a link do you leave our website. The respective provider is responsible for processing your data there, and its privacy policy applies.

Your rights

You have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

An email to the address above is sufficient.

Right to object

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, for example the authority at your place of residence or the authority responsible for us:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany

No automated decision-making

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

Version

This privacy policy was last updated in October 2026. We will adapt it if the website or the legal situation changes.