Privacy Policy
As of October 2026. This is a translation; the German version is legally binding.
1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Juliane Kosarev (“O'Shana”)Am Felde 1 B
21244 Buchholz in der Nordheide, Germany
Phone: +49 40 5379 3838
Email: oshana.spirit@gmail.com
2. In brief
- This website sets no cookies and uses no analytics or tracking tools.
- Fonts and scripts are loaded from this website's own server. No data is sent to Google Fonts or other third parties when you visit.
- No form data is sent through this website itself. The request form only opens your own email program.
3. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open the pages, technical data transmitted by your browser is processed automatically: IP address, date and time of access, page requested, referrer URL, browser type and operating system.
This data is needed to deliver the website and keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and functioning website). Log data is stored only briefly and then deleted. It is not combined with other data.
A data processing agreement (Art. 28 GDPR) is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 GDPR). More information: vercel.com/legal/privacy-policy.
4. Contact by phone, email or request form
If you call O'Shana or send an email, your details (e.g. name, phone number, email address and your request) are processed to answer your request and, where relevant, to arrange an appointment. The request form on this website only creates a draft in your email program; the message is sent only when you send it yourself.
The legal basis is Art. 6 (1) (b) GDPR where your request relates to a treatment, coaching or a course, and otherwise Art. 6 (1) (f) GDPR. Emails are received and stored via Gmail, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Your details are deleted once they are no longer needed. Statutory retention obligations, for example for treatment records, remain unaffected.
5. Contact via WhatsApp
You can also message O'Shana on WhatsApp. The WhatsApp links on this website are plain links: WhatsApp is opened and a connection to WhatsApp is made only when you click one. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, part of the Meta group. WhatsApp processes, among other things, your phone number and communication metadata, possibly also in the USA. See the WhatsApp privacy policy for details.
Using WhatsApp is voluntary. The legal basis is Art. 6 (1) (a) GDPR (your consent by contacting us) or Art. 6 (1) (b) GDPR. Please avoid sharing detailed health information via WhatsApp; a personal conversation or a phone call is better suited for that.
6. Health data
If you share information about your health in a request or during treatment, it is processed solely to prepare and carry out the treatment (Art. 9 (2) (h) GDPR in conjunction with § 22 of the German Federal Data Protection Act, or your explicit consent under Art. 9 (2) (a) GDPR). As a Heilpraktikerin, O'Shana is bound by professional confidentiality.
7. Links to other websites
This website links to external services such as Google Maps (route planning), the online shop and courses on alfima, and O'Shana's profiles on Instagram, Facebook and YouTube. These are plain links without embedded content. Data is transferred to these providers only when you click a link; the respective provider's privacy policy then applies.
8. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser's address bar.
9. Your rights
You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR). An informal message to the contact details above is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, lfd.niedersachsen.de.
10. Changes
This privacy policy will be updated if the website or legal requirements change. The version published here applies.