Privacy Policy

Last updated: 08.10.2026

Ece Ertemalp Wellbeing ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us through this website. This Privacy Policy explains what information we collect here, how we use it, and what rights you have regarding your data, in accordance with the EU General Data Protection Regulation (GDPR) and Dutch data protection law.

Who we are

Ece Ertemalp Wellbeing is a sole proprietorship (ZZP) based in Purmerend, Netherlands, registered with the Dutch Chamber of Commerce (KVK), operating the website eceertemalp.com.

We act as the data controller for the personal data collected through this website, and we are responsible for ensuring that it is processed in accordance with applicable data protection law, including the GDPR.

You can contact us at ece.ertemalp@gmail.com with any questions about this policy or your personal data.

What information we collect and how we use it

Website visitors

This website is delivered and protected by Cloudflare, which processes technical data such as your IP address, browser and device information, and the pages you request, in order to deliver the site securely and block abusive traffic. We use Cloudflare Web Analytics to see, in aggregate, how many people visit which pages and from which countries. It works without cookies or other storage on your device and does not follow you across websites or build a profile of you. We do not use advertising or tracking tools.

Cookies

This website does not set tracking or analytics cookies. Cloudflare may set strictly necessary security cookies to protect the site against abuse.

Contact form

If you use the contact form, we collect your name, email address, and message. The message is delivered to our email inbox (Google Gmail) through Cloudflare's email service so we can reply to you. It is not used for marketing. To keep out spam bots, the form uses Cloudflare Turnstile, which checks technical data from your browser (such as your IP address) without tracking you.

Newsletter / marketing emails

If you subscribe to our newsletter, we collect your name and email address. We ask you to confirm your subscription by email. Our subscriber list is kept in a newsletter tool (Listmonk) that we run ourselves on a server in the Netherlands, reachable through Cloudflare; we do not use a third-party newsletter platform. Newsletters are delivered by Brevo, an email delivery service based in France (EU). Brevo processes your email address to send them and, when you open an email or click a link in it, technical data such as your IP address. We have set Brevo to record opens and clicks only anonymously, without linking them to you. You can unsubscribe at any time with the link in every email.

Registering for an event on this website

If you register for one of our events here (for example a free online workshop or a paid online programme), we collect your name and email address and, if you tick the box, subscribe you to our newsletter. A free event is only for newsletter subscribers, so there the registration and the subscription go together; you confirm both with the link in the email we send you. We keep the registration in our newsletter tool (Listmonk, on a server we run ourselves in the Netherlands), on the newsletter list and on a list for that event, and we use it to send you the event details, reminders and, where promised, a recording. For a paid programme you enter your name and email here and then pay on the payment page of Stripe, our payment provider. Stripe collects your payment details (for example your card) and processes the payment under its own privacy policy; we never see your card details. We receive what we need to run the programme and to keep our accounts: your name, email address, and the amount and status of your payment.

Etkinliğe kayıt (Türkçe özet)

Bu sitede bir etkinliğe kayıt olduğunda adını ve e-posta adresini alırız; kutuyu işaretlersen seni bültenimize de abone yaparız. Ücretsiz etkinlikler yalnızca bülten abonelerine özeldir; bu yüzden orada kayıt ve abonelik birlikte gider, ikisini de sana gönderdiğimiz e-postadaki bağlantıyla onaylarsın. Kaydını kendi çalıştırdığımız bülten aracında (Listmonk) tutarız; etkinlik bilgilerini, hatırlatmaları ve söz verilmişse etkinliğin video kaydını sana göndermek için kullanırız. Ücretli programlarda ödemeyi, ödeme sağlayıcımız Stripe’ın sayfasında yaparsın; Stripe ödeme bilgilerini (örneğin kartını) toplar ve ödemeyi kendi gizlilik politikasına göre işler, kart bilgilerini biz hiç görmeyiz. Programı yürütmek ve hesaplarımızı tutmak için adını, e-posta adresini, ödemenin tutarını ve durumunu alırız. Etkinlik kayıtlarını etkinlikten sonra en fazla 12 ay saklarız (bültene abone kalırsan aboneliğin sürer); ödeme ve fatura kayıtlarını ise yasanın hesap tutmak için gerektirdiği süre boyunca saklarız (Hollanda’da 7 yıl). Haklarını (erişim, düzeltme, silme, abonelikten çıkma) kullanmak için ece.ertemalp@gmail.com adresine yazabilirsin; ayrıntılar bu sayfadaki İngilizce metindedir.

Tickets for circles and events

Tickets for our circles and events are sold through Hipsy (hipsy.nl). When you buy a ticket, you give your details to Hipsy, which handles the payment and processes your data under its own privacy policy. We receive the attendee details we need to run the event.

Legal basis for processing

We process your data based on:

  • Your consent — for newsletter subscriptions, which you can withdraw at any time
  • Contract — organising the event or programme you registered for, sending you its details and handling your order
  • Legal obligation — keeping our accounts and invoices as Dutch tax law requires
  • Legitimate interest — replying to your messages, running and securing this website, and understanding in aggregate how it is used, where this doesn't override your rights and interests

International data transfers

Cloudflare and Google are based in the United States. As a result, some of your personal data may be transferred to and processed outside the European Economic Area (EEA). Both providers participate in the EU–U.S. Data Privacy Framework and use Standard Contractual Clauses as safeguards for such transfers. Our payment provider Stripe may also process some data outside the EEA, including in the United States, and describes the safeguards it uses in its own privacy policy.

How long we keep your information

We retain personal data only as long as necessary to fulfil the purposes described in this policy. In practice:

  • Newsletter subscriber data: until you unsubscribe
  • Event registrations: until the event is over and no longer than 12 months afterwards, unless you stay subscribed to the newsletter
  • Payment and invoice records: as long as the law requires us to keep our accounts (seven years in the Netherlands)
  • Contact form messages: as long as needed to handle your request, and no longer than two years
  • Website statistics: only in aggregate form, not linked to you

Data sharing and disclosure

We do not sell or rent your personal data to third parties. We may disclose your data only in the following circumstances:

  • Legal compliance — if required by law, regulation, or legal process
  • Protection of rights — to enforce our terms or defend against legal claims
  • Business transfers — in connection with a merger, acquisition, or transfer of business assets, with appropriate notice and safeguards

Security measures

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or loss. While no system is impenetrable, reasonable efforts are made to secure all data.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data. Please note that in some circumstances we may be legally entitled or required to retain certain data even after such a request.
  • Object to or restrict certain types of processing, subject to the same limitation.
  • Withdraw consent at any time (e.g. unsubscribe from the newsletter)
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) if you believe your data has been mishandled

To exercise any of these rights, contact us at ece.ertemalp@gmail.com.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date.

Contact

If you have questions about this Privacy Policy or how your personal data is handled, please reach out to ece.ertemalp@gmail.com.