Politique de
Privacy

Chez Movement & Vitality Retreats, protecting your personal data is a priority. This privacy policy explains what data we collect, how we use it, and what your rights are — in compliance with the General Data Protection Regulation (GDPR), the new Swiss Federal Act on Data Protection (nFADP, in force since September 2023), and applicable US regulations (CCPA for California residents).

1. Data controller

OutdoorGym.ch Sàrl
Route de la Gare 48A
1131 Tolochenaz
Suisse
Email : hello@movement-retreat.com

2. Data collected

2.1 Data you provide directly

• First and last name
• Email address
• Phone number (if provided via WhatsApp)
• Information relating to your booking (retreat chosen, dates, special requests)
• Messages sent via the contact form

2.2 Automatically collected data

• IP address
• Browser type and operating system
• Pages visited and time spent
• Traffic source (search engine, direct link, etc.)

2.3 Cookies

Notre site utilise des cookies fonctionnels et analytiques. Tu peux gérer tes préférences via le bandeau de cookies qui s'affiche lors de ta première visite. Voir notre section cookies pour plus de détails.

3. Purposes of processing

We use your data to:

• Process your booking and communicate with you about your retreat
• Respond to your contact requests
• Send you our newsletter (only if you have consented)
• Improve our website and offering
• Fulfil our legal and accounting obligations

4. Legal basis for processing

• Exécution d'un contrat — traitement de ta réservation
• Consentement — newsletter, cookies non essentiels
• Intérêt légitime — amélioration du site, sécurité
• Obligation légale — comptabilité, facturation

5. Data retention

Your data is retained for as long as necessary for the purposes described:

• Booking data: 10 years (Swiss accounting obligations)
• Contact data: 3 years after last contact
• Newsletter data: until unsubscription
• Analytics cookies: 13 months maximum

6. Data sharing

Your data may be shared with:

• Prestataires de paiement (Stripe / Payrexx) — pour le traitement sécurisé des paiements
• Brevo (ex-Sendinblue) — pour l'envoi de newsletters (si tu y as consenti)
• Formspree — pour la gestion du formulaire de contact
• Infomaniak — hébergeur suisse de notre site

These providers are contractually required to respect the confidentiality of your data and not to use it for other purposes.

7. International transfers

Some of our providers may be established outside Switzerland or the European Union. In such cases, we ensure that appropriate safeguards are in place (standard contractual clauses, Privacy Shield, etc.) to protect your data.

8. Cookies

Essential cookies

Necessary for the site to function. They cannot be disabled.

Analytics cookies

We use anonymised analytics tools to understand how visitors use our site. These cookies are only activated with your consent.

Manage your preferences

You can change your cookie preferences at any time by clicking "Cookie preferences" at the bottom of the page, or by configuring your browser to refuse cookies.

9. Your rights

In accordance with the GDPR and nFADP, you have the following rights:

• Droit d'accès — obtenir une copie de tes données
• Droit de rectification — corriger des données inexactes
• Droit à l'effacement — demander la suppression de tes données
• Droit à la portabilité — recevoir tes données dans un format structuré
• Droit d'opposition — t'opposer à certains traitements
• Droit de retrait du consentement — à tout moment, sans justification

To exercise your rights, contact us at: hello@movement-retreat.com

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the data protection authority competent in your country of residence.

10. California residents (CCPA)

If you reside in California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to request its deletion, and the right not to be discriminated against for exercising these rights. We do not sell your personal data.

11. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. Our site is secured with an SSL certificate (HTTPS).

12. Changes

We may update this privacy policy at any time. The date of the last update is indicated at the top of this page. In the event of a substantial modification, we will inform you by email if you are subscribed to our newsletter.