Last updated: 21 October 2026 Who handles your data Filipa Faustino, of Aura Espaço, Rua do Valverde, 39, 2415-776 Leiria, Portugal, Portuguese tax number 227957466, is the controller. For any question about personal data, write to info@filipafaustino.com. What data is processed, what for, and on what basis To book and hold sessions, enrol people on training, sell and ship works and books, and give access to the reserved area, the following are processed: name, email address, telephone number, delivery address, invoicing details, history of bookings and enrolments, and access credentials. The basis is performance of the contract and pre-contractual steps, under article 6(1)(b) of the General Data Protection Regulation. To issue invoices, keep tax records and answer complaints, identification and invoicing data are processed, on the basis of compliance with a legal obligation, under article 6(1)(c). To send the newsletter, the email address is processed on the basis of consent, under article 6(1)(a). You may withdraw consent at any time, through the link in each message or by email, without affecting the lawfulness of processing carried out beforehand. To keep the site secure, prevent fraud and defend legal claims, technical access data is processed on the basis of legitimate interests, under article 6(1)(f). Sensitive data Taking part in sessions and training may involve information revealing philosophical or spiritual beliefs, and accompaniment notes may contain information about your wellbeing. This data belongs to special categories and is processed only with your explicit consent, collected separately and for a specified purpose, under article 9(2)(a) of the Regulation. Only what is necessary for the accompaniment is collected. It is kept in restricted-access storage, separate from commercial records, and is never used to target communications or for any promotional purpose. You may decline to provide it, in which case the accompaniment proceeds without written notes. Who has access Data is processed by Filipa Faustino and by the providers that keep the service running, all bound by contract under article 28 of the Regulation: the platform hosting the site and database, Stripe for payment processing, the email and newsletter provider, the video call service used for remote sessions, the platform hosting recorded courses, and carriers for shipped orders. At payment, card details are collected directly by Stripe, which acts as an independent controller for that part, and they never pass through, nor are accessible to, Filipa Faustino's systems. Some of these providers belong to groups with entities outside the European Union. Those transfers rest on an adequacy decision or on standard contractual clauses approved by the European Commission, under chapter V of the Regulation. Data is also disclosed to the Portuguese tax authority where the law requires it. For how long Invoicing records are kept for ten years, as required by the Portuguese VAT code. Complaints and their supporting documents, for three years. Contracts, confirmations and the declarations given when ordering are kept during performance and for five years after the contract ends, as evidence. Reserved area data is kept while the account is active and for two years of inactivity, after which the account is deleted, with prior notice. The newsletter email address is kept while consent lasts and, after it is withdrawn, for one year, solely to show that earlier mailings were lawful. Accompaniment notes are kept for the period strictly necessary for the accompaniment contracted and are deleted or anonymised at its end. Contact details of people who ask for information without going on to contract are deleted after one year. Your rights You may ask for access to your data, its rectification, its erasure, restriction of processing, portability, and object to processing based on legitimate interests, and you may withdraw any consent you have given at any time. To exercise any of these rights, write to info@filipafaustino.com. Requests are answered within one month. You may also complain to the Comissão Nacional de Protecção de Dados (the Portuguese data protection authority) at cnpd.pt. Required data and automated decisions The fields marked as required in the forms are those needed to enter into the contract. Without them, a booking, enrolment or order cannot go ahead. No decisions are taken by automated means alone, and no profiling is carried out. Cookies The site uses cookies strictly necessary for it to work. Any other cookie depends on your consent. The purposes, duration and owner of each are set out in the Cookie Policy, and you may change your preferences at any time through the link in the footer.
Aura Espaço, Rua do Valverde, 39, 2415-776 Leiria