1. Data Controller

This website, tres-lunas.com, is operated by: Ekaterina Mariposa
Individual Entrepreneur (registered in Tbilisi, Georgia)
Email: ekaterina.mariposa@gmail.com

For the purposes of the General Data Protection Regulation (EU) 2016/679 (GDPR), I act as the data controller of your personal data.

Although most clients are non-EU citizens, GDPR applies where individuals are located within the European Economic Area (EEA), including Spain.

2. Categories of Personal Data Collected

2.1 Data you provide directly

• Full name

• Email address

• Expected due date (EDD)

• Personal information shared in forms or messages (including pregnancy, breastfeeding, psychological or emotional context)

• Any information provided via email, contact forms, or messaging apps

2.2 Booking and service-related data

• Appointment details (date, time, service type) via Wix Bookings

• Communication history related to services

2.3 Payment data

Payments are processed via third-party providers.
I do not collect or store full payment details such as card numbers.

2.4 Technical data (automatically collected)

• IP address

• Device and browser type

• Basic interaction data via website hosting systems

3. Methods of Data Collection

Personal data is collected through:

• Website contact forms (Wix Forms)

• Booking system (Wix Bookings)

• Direct communication (email, WhatsApp, Telegram)

• Payment platforms (PayPal, Taplink)

• Video sessions (Google Meet, Zoom)

4. Purpose of Processing and Legal Basis (Art. 6 GDPR)

Your personal data is processed for the following purposes:

4.1 Provision of services (Art. 6(1)(b) — Contract)

• Scheduling and conducting consultations

• Providing psychological, doula, and breastfeeding support

• Delivering online courses and digital products

4.2 Communication (Art. 6(1)(b) and (f))

• Responding to inquiries

• Managing bookings and follow-ups

4.3 Legal compliance (Art. 6(1)(c))

• Accounting, invoicing, and tax obligations

4.4 Legitimate interests (Art. 6(1)(f))

• Maintaining client records

• Ensuring service quality and continuity

4.5 Consent (Art. 6(1)(a))

• When you voluntarily provide sensitive personal information

• Where explicitly required

You may withdraw your consent at any time.

5. Processing of Special Category Data

Certain data you provide (e.g., health, pregnancy, emotional or psychological information) qualifies as special category data under GDPR.

This data is processed:

• Only when voluntarily provided

• Solely for the purpose of delivering services

• Based on your explicit consent (Art. 9(2)(a))

6. Data Sharing with Third Parties (Processors)

Your personal data may be processed by third-party service providers acting as data processors, including:

• Website hosting and infrastructure: Wix

• Payment providers: PayPal, Taplink

• Video communication: Google Meet, Zoom

• Messaging services: WhatsApp, Telegram

These providers process personal data on my behalf and are contractually bound to comply with applicable data protection laws.

7. International Data Transfers

Your personal data may be transferred outside the European Economic Area (EEA), including to:

• Georgia (where the data controller is registered)

• United States and other countries where service providers operate

Georgia is not currently recognized by the European Commission as providing an adequate level of data protection.

To safeguard your data, appropriate measures are used:

• Standard Contractual Clauses (SCCs)

• Cooperation with GDPR-compliant service providers

8. Data Retention

Personal data is retained only for as long as necessary:

• Client and communication data: up to 3–5 years

• Booking and financial records: as required by applicable law

• Messages and correspondence: retained for service continuity

You may request deletion of your data at any time.

9. Your Rights Under GDPR

You have the following rights:

• Right of access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restriction of processing

• Right to object

• Right to data portability

• Right to withdraw consent

To exercise your rights, contact: [INSERT EMAIL]

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in the EU country where you reside or where the alleged infringement occurred.

11. Cookies

This website uses essential (technical) cookies provided by Wix.

These cookies are necessary for:

• Website functionality

• Security

• Performance

No advertising or tracking cookies are used.

12. Data Security

Appropriate security measures are implemented, including:

• Secure hosting infrastructure

• Restricted access to personal data

• Use of encrypted communication channels where available

13. Changes to This Policy

This Privacy Policy may be updated from time to time. The current version is always available on this page.