1. Controller
According to Paragraph 5 Telemediengesetz (TMG) / Dienstleistungs-Informationspflichten-Verordnung (DL-InfoV) / Rundfunkstaatsvertrag (RStV):
MSI gGmbH
Egerstr. 13
95199 Thierstein
Germany
Phone: +49 162 25 15 579
Email: info@meditationsi.com
2. Categories of Data We Process
2.1 Account Data
We process the following data when you create and use a user account:
- First name
- Last name
- Email address
- Password (stored encrypted, never in plain text)
- Registration and login timestamps
- IP address and basic device information
Purpose: To create, manage, and provide access to your user account.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
2.2 Usage Data
To provide and improve the App, we process the following data:
- Meditation sessions
- Duration and progress information
- Streaks, favorites, and content interactions
- App settings and user preferences
- Technical events (e.g., errors, loading times)
Purpose: To ensure the App functions properly and to enhance the user experience.
Legal bases: Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR (legitimate interest).
Note: The App does not use third-party analytics tools (e.g., no Firebase, no Mixpanel).
2.3 Newsletter Data
If you subscribe to our newsletter within the App, we process:
- Email address
- Name (if provided)
- Date and time of subscription
- Double opt-in confirmation
- Interaction data (opens, clicks) if you consent
Purpose: Sending updates, information, and offers relating to The Samadhi Project.
Legal basis: Art. 6(1)(a) GDPR (consent).
Newsletter provider: Mailchimp (The Rocket Science Group LLC, USA).
Data transfer takes place on the basis of EU Standard Contractual Clauses (SCC).
2.4 External Purchase Links
The App does not offer in-app purchases. Purchases or bookings are made exclusively via external links to third-party websites. When opening such links, your device transmits data to the respective provider (e.g., IP address).
Purpose: Providing access to external offers such as courses or merchandise.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
2.5 Technical Data and Logs
To ensure the security and stability of the App, we process:
- Device type and operating system
- App version
- IP address
- Crash logs and error messages
- Date and time of technical events
Purpose: Error detection, troubleshooting, security, and preventing misuse.
Legal basis: Art. 6(1)(f) GDPR.
Storage period: Usually up to 7 days.
3. Newsletter Service Provider
We use Mailchimp to send newsletters.
Mailchimp
The Rocket Science Group LLC
675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308, USA
Data processing is based on EU Standard Contractual Clauses (SCC).
You may unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us.
4. Cookies and Tracking
The App does not use browser cookies.
Only technically necessary mechanisms are used to:
- enable login functionality,
- ensure security and stability,
- process essential technical data (e.g., errors).
The App does not use marketing trackers, advertising networks, or external analytics services.
5. Social Media and External Content
The App may contain external links to social media profiles or video platforms (e.g., Instagram, Vimeo).
No plugins are used that automatically transmit data. Data transfer occurs only when you click such links.
The respective third-party provider is responsible for data processing. Their privacy policies apply.
6. Recipients of Personal Data
We only share data when necessary for service provision or when legally permitted. These include:
- Newsletter delivery: Mailchimp (USA), based on SCC.
- Hosting and backend infrastructure: EU-based service providers (Art. 6(1)(b) and (f) GDPR).
We do not sell or share personal data for advertising purposes.
7. Storage Periods
We store personal data only for as long as necessary or as legally required.
- Account data: Until your account is deleted, plus up to 30 days for technical or legal reasons.
- Usage data: As long as needed for the operation and improvement of the App.
- Newsletter data: Until you withdraw your consent or unsubscribe.
- Technical logs: Up to 7 days (longer only in security-related cases).
Legal retention obligations may require longer storage.
8. Children
The App is not intended for individuals under 16 years of age. We do not knowingly process data from children. If we become aware of unpermitted data processing, the data will be deleted immediately.
9. Your Rights under the GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent (Art. 7(3))
- Right to lodge a complaint with a supervisory authority (Art. 77)
To exercise your rights, contact us at:
Email: info@meditationsi.com
10. Right to Object and Withdrawal of Consent
10.1 Objection to Processing Based on Legitimate Interests
If we process your data based on Art. 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation.
We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
10.2 Objection to Direct Marketing
If your data is processed for direct marketing, you may object at any time. We will then stop processing your data for this purpose.
10.3 Withdrawal of Consent
You may withdraw your consent (e.g., for the newsletter) at any time with effect for the future.
Past processing remains lawful until withdrawal.
11. Complaints and Changes to This Privacy Policy
11.1 Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority.
11.2 Updates to This Privacy Policy
We may update this Privacy Policy to reflect changes in technology, legal requirements, or the App itself.
The current version is always available within the App.