Privacy Policy

Last Updated & Effective: January 1, 2026 • Governed under Regulation (EU) 2016/679 (GDPR) and UK Data Protection Act 2018

1. Introduction and Data Controller Overview

Rankletcompss Wellness Escapes Ltd. ("Rankletcompss", "we", "our", or "us"), registered at 14 Kurhaus Promenade, 76530 Baden-Baden, Germany (Company Registration No. HRB-739218) and operating its United Kingdom branch at 88 St. Andrew's Hill, London EC4V 5JA, acts as the Data Controller responsible for personal data processed through rankletcompss.xyz.

We are dedicated to safeguarding the privacy and digital tranquility of our visitors, readers, and retreat participants. This Privacy Policy details our operational protocols concerning data collection, lawful bases, third-party disclosures, retention schedules, and your individual statutory rights under European and international privacy frameworks.

2. Categories of Personal Data Collected

Depending on your direct interaction with our wellness platform, we may collect and process the following categories of information:

Direct Identification Data: Full legal name, email address, telephone contact number, country of residence, and postal address submitted via our concierge inquiry forms.
Wellness & Travel Preferences: Destination interests, dietary preferences, mobility requirements, and preferred thermal bath modalities voluntarily provided during bespoke itinerary consultations.
Technical & Telemetric Information: Anonymized IP addresses, browser specifications, operating system versions, device identifiers, time-zone configurations, referring URLs, and dwell time across our editorial dossiers.
Communication Records: Transcripts of email exchanges, concierge consultation logs, and customer service satisfaction records.

3. Lawful Bases for Processing Under GDPR Article 6

Every processing operation executed by Rankletcompss is anchored upon an explicit statutory lawful basis:

Performance of a Contract (Art. 6(1)(b)): Necessary to curate bespoke slow travel routes, reserve retreat spots, and fulfill advisory concierge engagements.
Legitimate Interests (Art. 6(1)(f)): Necessary to protect the cybersecurity of our digital infrastructure, analyze aggregate content performance, and prevent fraudulent inquiries.
Explicit Consent (Art. 6(1)(a)): Applicable where you have willingly subscribed to our seasonal wellness almanac newsletter or granted consent for analytical cookies via our persistent consent banner.
Compliance with Legal Obligations (Art. 6(1)(c)): Fulfilling mandatory financial, tax, and accounting reporting requirements under German commercial law (HGB) and UK HMRC statutes.

4. Third-Party Processors and International Transfers

Rankletcompss does not sell, lease, or monetize your personal information under any circumstance. Data is shared exclusively with vetted data processors who adhere to strict confidentiality and security agreements, including:

Cloud hosting and Content Delivery Networks (CDNs) situated within the European Economic Area (EEA).
Secure encrypted transactional email dispatch services.
Authorized boutique sanctuary partners and retreat centers solely for confirmed itinerary bookings upon your explicit instruction.

Where personal data is transferred outside the EEA or United Kingdom, we enforce standard contractual clauses (SCCs) approved by the European Commission, ensuring an equivalent standard of data protection.

5. Data Retention Protocols

We retain personal data strictly for the duration necessary to satisfy the objectives for which it was captured. Inquiry correspondence without subsequent booking activity is permanently purged after twenty-four (24) months. Financial transaction records and contractual retreat receipts are retained for ten (10) years in compliance with German statutory retention obligations (§ 257 HGB).

6. Your Statutory Rights Under GDPR and CCPA

Under the General Data Protection Regulation and California Consumer Privacy Act, you maintain extensive rights regarding your data:

Right of Access (Art. 15): Request a copy of all personal data held in relation to your identity.
Right to Rectification (Art. 16): Demand correction of outdated or inaccurate personal information.
Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your personal records where no overriding statutory basis compels retention.
Right to Restriction of Processing (Art. 18): Restrict active processing during dispute resolution.
Right to Data Portability (Art. 20): Receive your structured data in a commonly readable machine format.
Right to Object (Art. 21): Object to any processing founded on legitimate interest grounds.

7. Data Protection Officer & Supervisory Authority

To exercise any of your statutory data rights, or to submit formal queries regarding our data governance, please reach our Data Protection Officer:

Data Protection Officer
Rankletcompss Wellness Escapes Ltd.
14 Kurhaus Promenade, 76530 Baden-Baden, Germany
Email: [email protected]

You also have the right to lodge a formal complaint with your relevant supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI Baden-Württemberg) or the UK Information Commissioner's Office (ICO).