Privacy Notice

Datenschutzerklärung · Last updated 7 October 2026

1. Controller

Kento Akiyama — Wayfinder

Weinbergsweg 10, 10119 Berlin, Germany

2. General information about processing

We process personal data only to the extent necessary to provide a working website together with our content and services. Processing generally takes place on the basis of your consent (Art. 6 (1) (a) GDPR), to perform a contract or take steps before entering into one (Art. 6 (1) (b) GDPR), or on the basis of our legitimate interests (Art. 6 (1) (f) GDPR).

3. Hosting and server log files

This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. When you visit the site, Netlify automatically records information in server log files that your browser transmits: IP address, date and time of the request, the content requested, the browser and operating system used, and the referrer URL. This data is processed to ensure the site runs without faults and can be delivered to you (Art. 6 (1) (f) GDPR).

As Netlify is based in the United States, hosting may involve a transfer of data to a third country. Further information on the safeguards Netlify applies can be found in Netlify's privacy policy.

4. Google Fonts

This website uses Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, so that typefaces display consistently. When you open the site a connection to Google's servers is established and your IP address is transmitted to Google. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in a consistent presentation of the site.

Further information: Google's privacy policy

5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies and similar technologies that allow your use of the website to be analysed. The information generated, such as your IP address, the pages you visit and how long you stay, is transmitted to Google and processed there.

Storing these cookies and accessing information on your device take place on the basis of your consent under § 25 (1) TDDDG. The subsequent processing of the data takes place on the basis of your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future.

You can also prevent collection by Google Analytics by installing the browser add-on: tools.google.com/dlpage/gaoptout

6. Luma (event calendar)

To display our events we embed a calendar from Luma (Luma HQ, Inc.) in an iframe. When that part of the page loads, a connection to Luma's servers is established and technical data such as your IP address may be transmitted. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in presenting our events clearly. If you register for an event through Luma, Luma's own privacy policy applies in addition.

7. Tally (forms and waiting list)

For waiting list sign-ups and other forms we link to a form provided by Tally (Tally Labs). If you complete such a form, the data you enter, for example your name and email address, is processed directly by Tally. The legal basis is your consent and the taking of steps before entering into a contract (Art. 6 (1) (a) and (b) GDPR). Tally's own privacy policy applies.

8. Booking a retreat

When you book a place on a retreat we process the data needed to do so: your name, email address, billing details, and the information you give us in the intake form, such as dietary requirements, allergies and accessibility needs. The legal basis is Art. 6 (1) (b) GDPR, performance of the contract.

Information about diet, allergies or health may constitute health data within the meaning of Art. 9 GDPR. We process it solely on the basis of your explicit consent (Art. 9 (2) (a) GDPR), only for the purpose of running the retreat, and we pass it to the venue only where that is necessary for your catering or accommodation.

Payments are processed by Stripe Payments Europe, Ltd. We do not receive complete card details. Stripe's own privacy policy applies in addition.

Invoices and booking records are retained for the statutory retention periods (§ 147 AO, § 257 HGB).

9. Emails about our own offerings

If you have taken part in a retreat, we use your email address to tell you about our own similar offerings, such as future retreats, events and programmes. The legal basis is Art. 6 (1) (f) GDPR in conjunction with § 7 (3) UWG, direct marketing to existing customers.

You can object to this at any time, at no cost beyond the basic transmission charges, using the unsubscribe link in any of those emails or by writing to kento@bewayfinder.com. Transactional and organisational emails about a retreat you have booked are not affected.

If you sign up to our waiting list or newsletter without booking, processing takes place on the basis of your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time.

We do not share or sell your email address to third parties for marketing purposes.

10. Photographs and testimonials

Photographs taken during a retreat and the publication of testimonials are based solely on your explicit consent (Art. 6 (1) (a) GDPR). We ask for it on site. Declining has no consequences for your participation. You may withdraw consent at any time with effect for the future, and we will then stop using the material.

11. Contacting us by email

If you contact us by email, the details you provide, such as your email address and any name and message, are stored in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) or (f) GDPR. The data is deleted once it is no longer needed.

12. Your rights

You have the right at any time to:

access the personal data we process about you (Art. 15 GDPR)
have inaccurate data corrected (Art. 16 GDPR)
have your data erased (Art. 17 GDPR)
have processing restricted (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object to processing (Art. 21 GDPR)
withdraw any consent you have given, with effect for the future

An informal email to kento@bewayfinder.com is enough to exercise any of these.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

13. Changes to this notice

We may update this privacy notice if our offering or the legal position changes. The version published on this page is the one that applies.