Data Protection / Privacy Policy

DATA PROTECTION / PRIVACY POLICY

Last updated: August 2026

1. Data Controller

The controller responsible for the processing of personal data in connection with this website and the services provided by Nutrition Ibiza is:

Tina Simone Kaczor
Nutrition Ibiza
Calle San Juan 36, 4.1
07840 Santa Eulària des Riu
Illes Balears, Spain

Email: tina@nutritionibiza.com

2. General Information

I take the protection of your personal data seriously and process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), and other applicable data protection legislation.

Personal data means any information relating to an identified or identifiable individual.

Nutrition Ibiza provides nutritional counselling, health education and lifestyle-related services. These services are not medical services and do not replace medical diagnosis or treatment.

3. Website Hosting and Server Log Data

This website is hosted by Bluehost.

When you access this website, technical information may automatically be processed by the hosting provider in order to deliver the website and ensure its security and stability. This may include:

• IP address
• date and time of access
• pages and files accessed
• browser type and version
• operating system
• referring URL
• technical connection and security information

The processing is based on my legitimate interest in providing a secure and functional website pursuant to Art. 6(1)(f) GDPR.

Where personal data is processed outside the European Economic Area, appropriate safeguards for international data transfers are used where required.

4. Website Analytics with WP Statistics

This website uses WP Statistics to obtain statistical information about the use of the website.

WP Statistics is configured in a privacy-friendly manner. IP addresses are anonymised and additionally hashed before storage. Full user-agent strings and logged-in user activity are not stored.

WP Statistics does not use tracking cookies in the configuration used on this website. Analytics information is stored locally in the WordPress database and is not transmitted to WP Statistics for analytics purposes.

Detailed statistical records are aggregated after 180 days. Aggregated statistical information, such as total page views and visitor numbers, may be retained for longer.

The processing is based on my legitimate interest in understanding the general use and performance of my website pursuant to Art. 6(1)(f) GDPR.

5. Contact Form

You can contact me through the contact form provided on this website.

The following information may be processed:

• name
• email address
• content of your message
• any other information you voluntarily provide

The information is used solely to respond to your enquiry and, where applicable, to take steps prior to entering into a contractual relationship.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a possible or existing contractual relationship. For other general enquiries, the processing is based on my legitimate interest in responding to communications pursuant to Art. 6(1)(f) GDPR.

The contact form is provided using Contact Form 7. Form submissions are sent to me by email.

6. Health Information Submitted Through the Contact Form

You may voluntarily include information relating to your health in the message field of the contact form.

Health information constitutes a special category of personal data under Art. 9 GDPR. Where you include such information, it will only be processed after you have expressly consented to this processing through the consent checkbox provided with the form.

The legal basis is Art. 6(1)(a) GDPR in conjunction with Art. 9(2)(a) GDPR.

You may withdraw your consent at any time with effect for the future by contacting me at tina@nutritionibiza.com.

7. Spam Protection with Cloudflare Turnstile

The contact form is protected against automated submissions and spam using Cloudflare Turnstile, provided by Cloudflare, Inc.

Turnstile analyses technical signals from the visitor’s browser in order to determine whether a request originates from a human user or an automated system. Cloudflare states that Turnstile processes minimal signals for the purpose of protecting websites against malicious activity and does not use Turnstile data for personalised advertising.

The processing is based on my legitimate interest in protecting the website and contact form against spam and misuse pursuant to Art. 6(1)(f) GDPR.

Further information is available in Cloudflare’s Privacy Policy and Turnstile Privacy Addendum.

8. Contact by Email

You may contact me by email at tina@nutritionibiza.com or tinakaczor@googlemail.com.

When you contact me by email, I process the information you provide, including your email address, name and the content of your message, for the purpose of responding to your enquiry and communicating with you.

The email account tina@nutritionibiza.com is hosted through Bluehost. The address tinakaczor@googlemail.com is provided through Google.

The legal basis is Art. 6(1)(b) GDPR where the communication relates to the initiation or performance of a contractual relationship. In other cases, processing is based on my legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR.

If you voluntarily send health information by email, such information will only be processed where the requirements of Art. 9 GDPR are met, in particular on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR.

9. Communication via WhatsApp

Nutrition Ibiza also offers communication via WhatsApp.

If you contact me through WhatsApp, your telephone number, profile information depending on your privacy settings, message content and any files you send may be processed.

WhatsApp is provided in the European Economic Area by WhatsApp Ireland Limited. Data may be processed within WhatsApp’s global infrastructure, including outside the European Economic Area.

WhatsApp communication is voluntary. You may alternatively communicate with me by email.

Where WhatsApp is used in connection with an enquiry or an existing contractual relationship, the processing is based on Art. 6(1)(b) GDPR.

If you voluntarily transmit health information or completed health questionnaires via WhatsApp, such information is processed only where an applicable legal basis under Art. 9 GDPR exists, in particular your explicit consent pursuant to Art. 9(2)(a) GDPR.

10. Nutritional Consultations and Health Questionnaires

Before or during a nutritional consultation, I may collect information necessary to understand your nutritional and lifestyle situation and to provide individual nutritional recommendations.

Depending on the service, this may include:

• contact and identification information
• dietary habits and nutritional information
• lifestyle information
• symptoms and health history
• information about medication or supplements
• laboratory reports or other health-related documents that you voluntarily provide
• completed health questionnaires
• information shared during consultations
• my consultation notes

Health questionnaires may be exchanged as Word documents by email or WhatsApp. Relevant information may also be collected directly during the consultation.

Health information is a special category of personal data. Its processing is based on your explicit consent pursuant to Art. 9(2)(a) GDPR, together with Art. 6(1)(a) GDPR.

Other personal data required to provide the agreed nutritional consultation is processed pursuant to Art. 6(1)(b) GDPR.

Nutrition Ibiza provides nutritional counselling and health education. The collection of health-related information is used to provide individual nutritional and lifestyle guidance and does not constitute medical diagnosis or medical treatment.

11. Consultations via Zoom and Telephone

Consultations may take place in person, by telephone or via Zoom.

When Zoom is used, personal data such as your name, email address, meeting information, technical connection data and communication content may be processed.

Zoom is provided by Zoom Communications, Inc. Depending on the circumstances, personal data may be processed outside the European Economic Area. Zoom provides information on GDPR compliance, international transfers and its Global Data Processing Addendum.

The processing is based on Art. 6(1)(b) GDPR where Zoom is used to provide an agreed consultation or to take steps prior to entering into a contractual relationship.

Where health information is discussed during a consultation, its processing is additionally based on your explicit consent pursuant to Art. 9(2)(a) GDPR.

12. Client Files, Consultation Notes and iCloud

Documents relating to nutritional consultations, including completed questionnaires, consultation notes, reports and other client documents, are stored in individual client folders on my password-protected computer.

These folders are synchronised with Apple iCloud Drive.

Apple encrypts iCloud data during transmission and stores data in encrypted form. Depending on the service and configuration, data may be processed in Apple or third-party data centres in different countries.

The processing is necessary for the secure organisation and provision of my services pursuant to Art. 6(1)(b) GDPR. Where the documents contain health information, processing is additionally based on Art. 9(2)(a) GDPR.

13. Backups

For security and recovery purposes, backups of this website may be created using UpdraftPlus and stored in Google Drive.

Backups may contain information stored in the WordPress database and website files. Google may therefore process data in connection with the provision of the cloud storage service.

The processing is based on my legitimate interest in maintaining the security, availability and recoverability of the website pursuant to Art. 6(1)(f) GDPR.

14. Payments and Invoicing

Payments for Nutrition Ibiza services are currently made by bank transfer.

For invoicing and accounting purposes, I process information including:

• name and address
• invoice and payment information
• services provided
• amounts and payment status
• information required under applicable tax and accounting legislation

Invoices are created as Word/PDF documents and stored on my computer and in the associated iCloud-synchronised business folders.

The processing is based on Art. 6(1)(b) GDPR for the performance of the contractual relationship and Art. 6(1)(c) GDPR where processing is necessary to comply with legal, tax or accounting obligations.

15. Accounting and Gestoría

Personal data required for accounting and tax purposes may be provided to my Spanish Gestoría / tax adviser.

Only the information necessary for the relevant accounting, tax or administrative purpose is shared.

The processing and disclosure are based on Art. 6(1)(c) GDPR where necessary to comply with legal obligations and, where applicable, Art. 6(1)(b) GDPR.

Health information is not provided to the Gestoría unless this is legally required.

16. External Laboratories and Health Tests

I may recommend that clients discuss or obtain laboratory tests or other health-related assessments independently.

Clients arrange and purchase such tests directly with the respective provider. Nutrition Ibiza does not routinely transmit client personal data to laboratories for this purpose.

If you independently provide me with laboratory results or reports for the purpose of your nutritional consultation, those documents may contain health data and are processed in accordance with section 10 above.

17. Cookies and Similar Technologies

This website does not currently use analytics, advertising or marketing cookies requiring prior consent.

WP Statistics is configured without cookies. Cloudflare Turnstile is used for technically necessary website and form security.

For this reason, no consent banner for optional cookies is currently displayed.

If technologies requiring consent are introduced in the future, this Privacy Policy and the consent mechanism will be updated accordingly.

18. External Links

This website may contain links to external websites and services, including WhatsApp or other third-party platforms.

When you follow an external link, you leave the Nutrition Ibiza website. The processing of personal data on the external website is governed by the privacy practices of the respective provider.

19. International Data Transfers

Some service providers used in connection with Nutrition Ibiza operate internationally.

Where personal data is transferred to countries outside the European Economic Area, such transfers are made only where an applicable legal mechanism is available, for example an adequacy decision of the European Commission, participation in an applicable EU-US data transfer framework or Standard Contractual Clauses together with any additional safeguards required under data protection law.

20. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Data relating to enquiries that do not result in a contractual relationship is deleted when it is no longer required for the enquiry, unless legal obligations require longer retention.

Client and consultation information is retained for as long as necessary to provide the agreed services and to meet any applicable legal obligations.

Invoices, accounting records and other documents subject to statutory retention obligations are retained for the applicable statutory period.

Where processing is based on consent, data may be deleted following withdrawal of consent unless another legal basis or statutory retention obligation requires continued storage.

Website analytics detail data collected through WP Statistics is aggregated after 180 days.

21. Disclosure of Personal Data

Personal data is not sold.

Personal data may be disclosed only where this is necessary for the purposes described in this Privacy Policy, where a service provider processes data on my behalf, where disclosure is necessary to fulfil contractual or legal obligations, or where you have given your consent.

Relevant service providers may include, depending on the circumstances:

Bluehost, Apple/iCloud, Google, WhatsApp, Zoom, Cloudflare and my Spanish Gestoría.

22. Your Data Protection Rights

Subject to the applicable legal requirements, you have the right to:

• obtain information about your personal data
• request correction of inaccurate personal data
• request deletion of your personal data
• request restriction of processing
• receive personal data in a portable format where applicable
• object to processing based on legitimate interests
• withdraw consent at any time with effect for the future
• lodge a complaint with a competent data protection authority

To exercise your rights, contact:

tina@nutritionibiza.com

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

23. Spanish Data Protection Authority

As the controller is established in Spain, you also have the right to lodge a complaint with the competent Spanish supervisory authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
Spain

24. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, is carried out in connection with Nutrition Ibiza’s nutritional counselling services.

25. Changes to this Privacy Policy

This Privacy Policy may be updated if the services, technologies used on the website, legal requirements or data-processing activities change.

Last updated: August 2026