Version dated 12 October 2026. This policy describes personal data processing relating to mental-health.yoga, contact enquiries, the newsletter and the professional area. Personal data is information about identified or identifiable individuals, including contact details and online identifiers such as IP addresses. Health data and information about private life are particularly sensitive.
1. Controller and privacy contact
Mental Health Yoga, Christophe Frommelt, Vy d’Êtra 25, 2000 Neuchâtel, Switzerland. For questions or to exercise your privacy rights, contact contact@mental-health.yoga.
2. Purposes and grounds for processing
We process information you provide and technical data arising from website use for the purposes described: website operation and security, responding to enquiries, managing authorised access and, following separate subscription, newsletter delivery. Processing is limited to necessary information. Depending on the processing, your consent, preparing or performing a contract, statutory obligations or legitimate interests in a secure and functioning website may apply. Where the GDPR applies, the relevant statutory conditions apply. You can withdraw voluntary consent for the future; processing already carried out lawfully remains unaffected.
3. Hosting and technical access data
Infomaniak hosts the website and its WordPress database. When you visit, data necessary for the connection and website delivery is processed, including IP address, date and time, requested address, referring page where applicable, and browser and operating-system information. This supports delivery, troubleshooting and security. IP addresses may identify individuals.
4. Contact forms and email delivery
For contact enquiries, we process the contact information provided, the contents and time of the enquiry, and other information you submit so that we can respond. The existing contact form delivers enquiries by email to contact@mental-health.yoga. The additional Forminator interest forms store name, email address and general offer interests in WordPress and transfer them to Dolibarr, together with language and the MHY source reference, to handle the enquiry. Please do not submit unnecessary health information through general contact and interest forms.
WordPress emails are sent through FluentSMTP and its confirmed default connection to the Infomaniak SMTP server mail.infomaniak.com. The configured sender address is contact@mental-health.yoga. Infomaniak processes the sender, recipient and message information required for delivery. FluentSMTP maintains local delivery logs within WordPress. Their configured retention period is 14 days; FluentCRM emails are also included in this logging.
5. Newsletter and offer interests
Newsletter subscriptions are managed through the existing newsletter form and FluentCRM on the MHY WordPress website. We process the contact information provided, language, subscription status, and evidence of consent, confirmation and withdrawal. New subscriptions are confirmed through a confirmation email (double opt-in). Delivery uses the email service described above. Email-opening and link-click tracking are disabled.
The newsletter is optional and separate from contact enquiries, offer interests and bookings. Selecting an interest or making a booking does not constitute newsletter consent. You may unsubscribe at any time using the unsubscribe link or contact@mental-health.yoga; newsletter delivery then stops. Necessary evidence is handled separately from active mailing lists. MHY interests and newsletter consent are not merged with those of La Vuelta del Mundo. An identical email address does not constitute shared consent.
6. Professional area and questionnaires
For existing accounts and personally authorised access, we process the stored account and contact information, authentication information, roles and permissions. This supports sign-in, account administration and protection of non-public content. Necessary sign-in cookies enable the session.
Answers to the existing interactive self-assessments are evaluated immediately and exclusively in the browser on your device. The questionnaire function does not store them persistently or transmit them by email, to MHY servers or to external services. MHY cannot access these answers; there is no server-side retention of them. Plain question lists do not collect answers. Assessments remain separate from offer interests and newsletter consent. Health data, questionnaire answers and unreviewed free text are expressly excluded from the Dolibarr transfer.
7. Amelia and calendars
Amelia is installed; no available training dates are currently announced. Expressions of interest use the existing contact route in the meantime. Currently, no Amelia email delivery service is selected and no SMS account is connected. Add to Calendar is enabled: if you choose an export, the displayed appointment information is transferred to the calendar you choose. Calendar export is distinct from automatic calendar synchronisation. ICS email attachments and usage-data transmission are disabled.
8. Cookies, Complianz and statistics
Complianz Free is the active cookie-consent system. It stores your choices so that they can be respected and subsequently changed or withdrawn. Technically necessary cookies support sign-in, language and consent management in particular. Optional services require the corresponding consent. You can change your choices at any time through “Manage consent”. Cookies may also be deleted or restricted in browser settings, which may affect functionality. Google Analytics is currently disabled.
9. External content and Cloudflare
The website uses cdnjs, a content service provided by Cloudflare, for a formatting file (animate.css). Downloading it connects to its servers, involving IP address and technical request information in particular. The prepared read-only MHY API also uses Cloudflare Tunnel and Cloudflare Access for protected connections. Connection and security data such as IP addresses and request metadata are processed there. Automatic transfer of MHY customer data through this API is not active.
Cloudflare, Inc. (United States) describes primarily storing data in the United States and the European Economic Area, with possible access worldwide. Recipients may include Cloudflare group companies and service-specific subprocessors for infrastructure, technical support and account management. For Cloudflare Zero Trust, the published list names Google LLC with locations in the EEA, United States, Australia and India; these are possible locations, not evidence of the actual processing of every MHY request. Exclusively Swiss data storage is not guaranteed. The Self-Serve terms incorporate the Data Processing Addendum (DPA). Cloudflare documents the Swiss–U.S. Data Privacy Framework and standard contractual clauses adapted for Switzerland for relevant international transfers. Documented safeguards include access controls and encryption. They do not establish a specific storage location for this account. Further information: Cloudflare privacy policy, DPA and subprocessors and locations.
10. Planned Dolibarr administration – not yet active
New enquiries from the additional Forminator interest forms are automatically transferred to the Dolibarr installation of SWISSTOURER Frommelt for internal contact and interest management. Only name, email address, language, general offer interest and the MHY source reference are transferred. The Raspberry Pi hosting Dolibarr is in Switzerland; the protected connection uses Infomaniak and Cloudflare Tunnel/Access. Health data, psychological questionnaire answers and unreviewed free text are not transferred. MHY interests and newsletter consent remain separate from La Vuelta del Mundo. Identical email addresses do not cause automatic merging. The transfer applies only to new entries from these forms; existing customer data is not imported retrospectively. An interest enquiry does not subscribe anyone to the newsletter.
11. Recipients and data security
Providers used for the described services process the information needed, including Infomaniak for hosting and email and Cloudflare for the connections and content downloads described. Within MHY, only individuals authorised for the relevant task receive access. Disclosure may also be required by statutory obligations or to enforce legitimate claims. We take appropriate technical and organisational measures against unauthorised access, loss or alteration. The website uses an encrypted HTTPS connection.
12. Retention and manual deletion
We retain personal data only as long as necessary for its purposes and applicable obligations. For enquiries that are not pursued, we plan twelve months after the last contact. At least monthly, we manually review the relevant form entries, email folders and, where applicable, CRM interests, removing information no longer needed from active records once the period has expired. There is no automatic deletion of these enquiries.
Active newsletter subscriptions, necessary evidence of consent and withdrawal, accounts, and contract, booking and invoice records are handled separately. Statutory retention obligations remain applicable even when deletion is requested; necessary business and accounting records may in particular be subject to ten-year retention. Local FluentSMTP delivery logs are configured for 14 days. Backups follow their own retention and replacement cycle and are distinguished from active records.
13. Your rights
Under applicable privacy law, you may request access to your personal data and its correction, deletion or restriction. Where statutory conditions are met, rights to data disclosure or transfer and to object also apply. We may request proportionate proof of identity to process your request securely. Statutory retention obligations and the rights of others may limit a request. Contact contact@mental-health.yoga for requests or withdrawal of consent. You may also contact the competent supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).
14. Changes
We update this policy when processing changes. The published version and its update date are available on the website.