PRIVACY POLICY
Last updated: July 2026
YOUR PRIVACY
Your privacy matters to me.
This Privacy Policy explains how personal information is collected, used, stored, shared, and handled when you visit astridur.org, contact me, submit an inquiry or intake form, book or purchase a service, subscribe to communications, or work with me.
I handle personal information with care and in accordance with applicable data-protection requirements, including the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
WHO IS RESPONSIBLE FOR YOUR DATA
The person responsible for processing your personal data is:
Astrid Hübner / ÁSTRIÐÚR
Switzerland
Email: astridhuebnercom@gmail.com
Website: astridur.org
For questions about your personal information or this Privacy Policy, please contact me at the email address above.
WHAT INFORMATION I MAY COLLECT
Depending on how you interact with me, I may collect:
Your name and contact details
Email address and telephone number
Billing and transaction information
Booking and appointment information
Information you voluntarily provide through inquiry and intake forms
Correspondence and communications between us
Information relevant to your participation in a session, mentorship, workshop, or other offering
Technical information relating to your use of the website, such as IP address, browser information, device information, and cookies, where applicable
Where relevant to providing an embodied or hands-on service responsibly, you may also choose to provide information relating to your physical or emotional well-being, health considerations, boundaries, or other sensitive personal information.
I aim to collect only information that is reasonably necessary for the purpose for which it is requested.
WHY I PROCESS YOUR INFORMATION
Your personal information may be used to:
Respond to inquiries
Assess whether an offering may be appropriate for you
Arrange and manage bookings and appointments
Provide agreed services
Communicate with you before and after sessions
Process payments and maintain required business records
Manage cancellations and refunds
Support consent and appropriate preparation for embodied or hands-on sessions
Meet legal, accounting, and administrative obligations
Send newsletters or other communications where you have chosen to receive them
Maintain, operate, and improve the website and services
Where GDPR applies, processing may be based, depending on the circumstances, on the performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, legitimate interests, or your consent.
Where I rely on your consent, you may withdraw that consent for future processing at any time, subject to any information I am legally required or otherwise lawfully entitled to retain.
SENSITIVE PERSONAL INFORMATION
Some inquiry or intake forms may invite you to voluntarily share information concerning your physical or emotional well-being, health considerations, intimate life, boundaries, or other sensitive matters where this is relevant to the service you are seeking.
This information is collected only where reasonably relevant to assessing suitability, preparing responsibly for our work together, respecting your boundaries, or supporting responsible participation.
Sensitive personal information is treated with particular care and is not used for advertising or marketing purposes.
Where explicit consent is required under applicable data-protection law, this consent will be requested separately.
You are encouraged to share only information that is relevant and that you feel comfortable providing.
SHARING YOUR INFORMATION
I do not sell your personal information.
Personal information may be processed by trusted third-party service providers where necessary to operate my website and business, communicate with you, manage bookings, process payments, or provide agreed services.
These providers process personal information according to their own privacy policies and applicable data-protection obligations.
Depending on the provider, personal information may be processed or stored outside Switzerland or the European Economic Area. Where required by applicable data-protection law, appropriate safeguards are used for international data transfers.
I may also disclose personal information where required by applicable law or where necessary to establish, exercise, or defend legal claims.
SERVICE PROVIDERS
To operate my website and provide my services, I use selected third-party service providers.
Depending on how you interact with ÁSTRIÐÚR, your personal information may be processed by one or more of the following:
Squarespace — website hosting, website forms, scheduling or booking functionality, and related website services.
Stripe — secure online payment processing where payment links or card payments are offered.
Google Workspace — email communication, document storage, and business administration.
Zoom — online private sessions, group sessions, discovery calls, and other video communications.
Mailchimp — newsletter subscriptions and email communications where you have actively chosen to subscribe.
[Other booking or scheduling provider, if applicable] — appointment scheduling and booking management.
These providers process personal information according to their own privacy policies and data-protection obligations.
Some providers may process or store personal information outside Switzerland or the European Economic Area. Where required by applicable data-protection law, appropriate safeguards apply to international transfers.
I select service providers with consideration for privacy and security. However, each third-party provider remains responsible for its own systems and data-processing practices.
PAYMENTS
Where payments are processed through third-party payment providers such as Stripe, payment information is processed by the relevant provider according to its own privacy and security practices.
I do not directly receive or store your complete credit or debit card details when payment is processed through an external payment provider.
Where payment is made by bank transfer or TWINT, I may receive and retain information connected to the transaction, such as your name, payment amount, date, reference information, and other details provided by the relevant financial institution, where necessary for accounting and business administration.
EMAIL & COMMUNICATION
If you contact me by email or another communication service, the information you send may be processed by the relevant service provider.
Please be aware that ordinary email and messaging services may not always provide end-to-end encrypted communication.
For this reason, I encourage you not to send highly sensitive personal or health-related information through ordinary email or messaging services unless necessary.
Where sensitive information is relevant to our work, you may be invited to provide it through a designated intake or consent process.
NEWSLETTER & MARKETING
If you subscribe to my newsletter, your contact information will be used to send you the communications you have requested.
You may unsubscribe at any time using the unsubscribe link provided in the communication or by contacting me directly.
Submitting an inquiry, booking a session, attending an event, or becoming a client does not automatically subscribe you to marketing communications unless you have separately chosen to receive them.
COOKIES & WEBSITE TECHNOLOGY
The website may use cookies and similar technologies necessary for its operation, analytics, preferences, and other website functions.
Where required by applicable law, non-essential cookies will be used only after you have provided the relevant consent.
You can review or change your cookie preferences through the Cookie Preferences available on the website.
ONLINE SESSIONS & RECORDINGS
Online private or group sessions may take place through third-party video platforms such as Zoom.
Online sessions are not automatically recorded.
Where a session, workshop, or group experience is intended to be recorded, participants will be informed in advance where reasonably possible.
Where participants may be identifiable through their image, voice, name, or personal contributions, appropriate consent will be requested where required.
Access to any recording or replay will be subject to the conditions communicated for the specific offering.
PHOTOGRAPHS, RECORDINGS & TESTIMONIALS
Your participation in a session, mentorship, workshop, retreat, or other offering does not automatically constitute consent for your image, voice, story, testimonial, or personal experience to be used publicly.
Where identifiable photographs, videos, audio recordings, testimonials, or personal stories are intended for public, promotional, or marketing use, separate permission will be requested where appropriate.
You may decline the use of your personal material for marketing purposes without affecting your ability to work with me.
Where you provide a testimonial voluntarily, I will clarify whether and how you are comfortable with your name or other identifying information being used.
CONFIDENTIALITY
Information shared with me in the context of private sessions, mentorship, inquiry, or intake is treated with care and confidentiality.
I do not publicly share identifying information about clients or details of private work without appropriate permission.
Where I engage in professional supervision, peer reflection, or consultation, aspects of client work may be discussed in anonymized form where reasonably possible and only where relevant to responsible professional practice.
Confidentiality may be limited where disclosure is required by applicable law.
Please note that in workshops, retreats, festivals, and other group experiences, participants may hear or witness information shared by others. Participants are encouraged to respect one another's privacy, but I cannot guarantee that other participants will maintain confidentiality outside the group.
HOW LONG INFORMATION IS KEPT
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, contractual, or legitimate business requirements.
Different retention periods may apply to different categories of information.
For example, certain payment, invoice, or accounting records may need to be retained for legally required periods, while inquiry or intake information may be deleted when it is no longer reasonably necessary for the purpose for which it was collected.
When personal information is no longer required, it will be deleted or anonymized where reasonably possible and legally appropriate.
DATA SECURITY
I take reasonable organizational and technical measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
If I become aware of a personal data breach, I will take appropriate steps in accordance with applicable data-protection requirements.
YOUR RIGHTS
Depending on the law applicable to you, you may have rights concerning your personal information.
These may include the right to request information about personal data held about you and, where applicable, to request:
Access to your personal information
Correction of inaccurate information
Deletion of personal information
Restriction of certain processing
Data portability
Objection to certain processing
Withdrawal of consent where processing is based on consent
Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Certain information may need to be retained where required by law or where another lawful basis for retention applies.
To make a request concerning your personal information, please contact:
You may also have the right to contact the competent data-protection supervisory authority.
LINKS TO OTHER WEBSITES
My website may contain links to third-party websites, platforms, or services.
I am not responsible for the privacy practices or content of websites and services that I do not control.
I encourage you to review the privacy policies of third-party services when you visit or use them.
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated from time to time to reflect changes in my services, technology, business practices, or applicable legal requirements.
The current version will be published on this website.
CONTACT
If you have questions about this Privacy Policy or how your personal information is handled, please contact:
Astrid Hübner / ÁSTRIÐÚR
[Switzerland]
Email: astridhuebnercom@gmail.com
Website: astridur.org
Last updated: July 2026