REQUEST NOW

Data Protection and Privacy Policy

1. Data Protection at a Glance

General Information

This section provides a brief overview of how your personal data is handled when you visit our website. Personal data refers to any information that can be used to personally identify you. For comprehensive details on data protection, please refer to our privacy policy below.

Data Collection on Our Website

Who is responsible for data collection?
The website operator is responsible for processing data on this website. You can find their contact details in the legal notice provided on this website.

How do we collect your data?
Your data is collected in two ways:
Data You Provide – This includes information you enter into a contact form or provide voluntarily.
Automatically Collected Data – Our IT systems automatically collect certain technical data when you visit our website, such as your browser type, operating system, and the time of your page visit.

Why Do We Collect Your Data?
We collect data for the following purposes:
– To ensure the website functions properly.
– To analyse user behaviour and improve our services.

Your Rights Regarding Your Data
You have the right to:
– Obtain information about the origin, recipients, and purpose of your stored personal data at any time, free of charge.
– Request corrections, blocking, or deletion of your data.
– Contact us at any time using the details provided in the legal notice for further questions on data protection.
– Lodge a complaint with the appropriate regulatory authority.

Analytics and Third-Party Tools
When you visit our website, your browsing behaviour may be analysed using cookies and analytics tools. This analysis is typically anonymous and cannot be traced back to you.
You have the option to opt out of this analysis. More details on how to do so can be found in our privacy policy.

2. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously. Your information is handled confidentially and in compliance with statutory data protection regulations and this privacy policy.
When you use our website, we collect various personal data—information that can be used to identify you. This privacy policy outlines what data we collect, how we use it, and for what purpose.
Please note that data transmission over the internet (e.g: email communication) may have security vulnerabilities. Complete protection against third-party access is not always possible.

Responsible Entity for Data Processing

The entity responsible for processing data on this website is:

Nattika Ayurveda GmbH

Schlosspark 1, 17217 Penzlin, Germany

Phone: +49 3962 221220

Email: [email protected]

Commercial Register: Amtsgericht

Neubrandenburg HRB 21947

Managing Director: Mr. Joseph Kodath

VAT ID No.: DE363082258

Schlosspark Alt Rehse Entwicklungs GmbH

Schlosspark 1, D-17217 Penzlin, Germany

Phone: +49 3962 221220

Email: [email protected]

Commercial Register: Amtsgericht

Neubrandenburg HRB 20320

Managing Director: Gabriele Wahl-Multerer

VAT ID No.: DE308428103

The responsible entity is the person or organization that determines how and why personal data is processed.

Revoking Your Consent to Data Processing

Certain data processing operations require your explicit consent. You may withdraw your consent at any time by sending us an informal email. The legality of data processing carried out before your revocation remains unaffected.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that your data has been handled in violation of data protection laws, you have the right to file a complaint with the appropriate supervisory authority. The relevant authority is the data protection officer of the federal state where our company is based. You can find a list of data protection authorities and their contact details here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or to fulfill a contract, in a structured, commonly used, machine-readable format. If you request that we transfer your data directly to another entity, we will do so if technically possible.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential data (e.g: inquiries or orders), this website uses SSL or TLS encryption. You can identify an encrypted connection when the browser’s address bar changes from “http://” to “https://” and displays a lock icon.
With SSL/TLS encryption enabled, the data you transmit to us cannot be intercepted by third parties.

Encrypted Payment Transactions

If you need to provide payment details (e.g: account number for direct debit authorization) after entering into a paid agreement, your data is necessary for processing payments.
Payment transactions via standard methods (Visa/MasterCard, direct debit) are conducted exclusively through encrypted SSL/TLS connections. You can recognize a secure connection by the “https://” prefix and the lock icon in your browser. With encryption enabled, third parties cannot intercept your payment details.
Right to Information, Blocking, and Deletion
Under applicable legal provisions, you have the right to:

For any inquiries regarding personal data, you can contact us using the details provided in the legal notice.

Objection to Advertising Emails

We prohibit the use of contact information published as part of the legal notice requirement for sending unsolicited advertising and informational materials. The website operators reserve the right to take legal action against unsolicited promotional emails, including spam.

3. Data Protection Officer

Data protection officer required by law
We have appointed a data protection officer for our company.

Akshay V B – IT Administrator
Nattika Beach Resorts Pvt Ltd
Nattika Beach PO, Thrissur
Kerala, India, Pin: 680566
Phone: +91 (0) 487 2402770
E-mail: [email protected]

4. Data Collection on Our Website

Cookies

Our website uses cookies to enhance user experience, improve functionality, and ensure security. Cookies are small text files stored on your device by your browser. They do not harm your computer or contain viruses.
Most of the cookies we use are session cookies, which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them, allowing us to recognize your browser upon your next visit.
You can configure your browser to:

Disabling cookies may affect the functionality of our website.
Cookies necessary for electronic communication or specific functions (e.g: shopping cart) are stored based on Art. 6(1)(f) GDPR, as they serve the legitimate interest of ensuring an error-free and optimized service. Other cookies, such as those used for analytics, are addressed separately in this privacy policy.

Server Log Files

Our website provider automatically collects and stores certain information in server log files, which your browser transmits to us. This includes:

This data is not combined with other data sources. Data processing is based on Art. 6(1)(f) GDPR, which allows processing for contract fulfillment or pre-contractual measures.

Contact Form

When you submit an inquiry through our contact form, we store the details you provide, including your contact information, to process your request and handle any follow-ups. Your data will not be shared without your consent.
The processing of your data is based solely on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time by sending us an informal email. The legality of data processing prior to revocation remains unaffected.
We will store your data until:

Mandatory statutory retention periods remain unaffected.

5. Analysis Tools and Advertising

Google Analytics

Our website utilizes Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Google Analytics uses cookies, which are text files stored on your computer that help analyze your usage of the website. Information generated by these cookies is typically transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6(1)(f) GDPR, as the website operator has a legitimate interest in analyzing user behavior to optimize both the website and its advertising efforts.

IP Anonymization

We have activated IP anonymization on this website, meaning that Google truncates your IP address within the European Union or other signatory states of the European Economic Area before transmitting it to the USA. In rare cases, the full IP address is sent to a Google server in the USA and shortened there. Google processes this data on our behalf to evaluate website usage, generate reports, and provide other related services. The IP address collected by Google Analytics is not merged with other Google data.

Browser Plugin

You can prevent the storage of cookies by adjusting your browser settings. However, this may limit some website functions. Additionally, you can prevent Google from collecting and processing data related to your website usage (including your IP address) by installing the browser plugin available at:
Google Opt-Out Plugin

Objection to Data Collection

To prevent Google Analytics from collecting your data, click the following link to set an opt-out cookie, which stops data collection on future visits: [Deactivate Google Analytics]
For more details on Google Analytics’ data policies, visit:
Google’s Privacy Policy

Data Processing Agreement

We have entered into a data processing agreement with Google, ensuring compliance with strict German data protection regulations.
Demographic Data in Google Analytics
This website uses Google Analytics’ demographic features, allowing reports on visitors’ age, gender, and interests. This data comes from Google’s interest-based advertising and third-party visitor data. It cannot be linked to a specific individual. You can disable this feature via the Google Ad Settings or opt out of Google Analytics data collection as described above.

Google AdWords & Conversion Tracking

This website uses Google AdWords, an online advertising service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
As part of Google AdWords, we use conversion tracking. When you click on a Google ad, a cookie is set for tracking purposes. These cookies expire after 30 days and do not personally identify users. If you visit specific pages before the cookie expires, Google and we can recognize that you clicked on the ad and were redirected to our site.
Each Google AdWords customer receives a unique cookie, meaning cookies cannot be tracked across different websites. Data collected via conversion tracking is used to create statistics for AdWords customers. However, no personally identifiable information is shared.
If you do not wish to participate in conversion tracking, you can disable the Google Conversion Tracking cookie via your browser settings. The storage of conversion cookies is based on Art. 6(1)(f) GDPR, as analyzing user behavior helps us optimize our website and advertising strategies.
For more details, visit:
Google Privacy Policy

Newsletter Subscription

Newsletter Data,
To subscribe to our newsletter, we require:

No additional data is collected unless provided voluntarily. Your data is used exclusively for sending the requested newsletter and is not shared with third parties.
Newsletter data is processed based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time via the “Unsubscribe” link in the newsletter. Any data processing conducted before revocation remains lawful.
Your data will be stored until you unsubscribe from the newsletter, at which point it will be deleted. Other data collected for different purposes (e.g: member area registrations) remain unaffected.

MAILCHIMP

This website uses Mailchimp for sending newsletters. The provider is Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA. Mailchimp is a service that allows us to manage and analyze our newsletter campaigns. The data you provide for the purpose of receiving the newsletter (e.g: your email address) is stored on Mailchimp’s servers in the USA.

Newsletter Analytics with Mailchimp

Mailchimp enables us to track the behavior of newsletter recipients. For example, we can analyze how many recipients open our emails, which links are clicked, and how often. This information helps us optimize future newsletters and tailor content to your interests. In some cases, conversion tracking is also used to determine whether a specific action (such as completing a purchase on our website) occurred after a newsletter link was clicked.
More details about how Mailchimp analyzes data can be found here:
Mailchimp’s Privacy Policy

Legal Basis

The processing of your data is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time by unsubscribing from the newsletter. The legality of any data processing carried out prior to your revocation remains unaffected.
If you do not wish to have your newsletter activity analyzed by Mailchimp, you must unsubscribe from the newsletter. A corresponding link is included in every newsletter. You can also unsubscribe directly via our website.
We will retain the data you provide for the newsletter subscription until you unsubscribe, after which it will be deleted from both our systems and Mailchimp’s servers. Data stored for other purposes (e.g: email addresses used in member areas) remain unaffected.

Data Processing Agreement

We have signed a Data Processing Agreement with Mailchimp to ensure full compliance with European data protection regulations, particularly those enforced by German authorities.

7. Plugins and Tools

WordPress Active Plugins: 17

  1. All-in-One WP Migration: Makes moving your entire WordPress site simple. Export or import your database, media, plugins, and themes with just a few clicks.
  2. Better Search Replace: A small plugin for running a search/replace on your WordPress database.
  3. Classic Editor: Enables the WordPress Classic Editor and the old-style Edit Post screen with TinyMCE, Meta Boxes, etc.
  4. Classic Widgets: Enables the classic widgets settings screens and disables the block editor for widgets.
  5. Elementor: The Elementor Website Builder: drag and drop page builder, pixel perfect design, mobile responsive editing, and more.
  6. Elementor Pro: Unlocks Pro widgets and kits, Theme Builder, Pop Ups, Forms, and WooCommerce capabilities.
  7. MC4WP: Mailchimp for WordPress: Adds various highly effective Mailchimp sign up methods to your site.
  8. Modern Image Formats: Converts images to modern formats like WebP or AVIF during upload.
  9. Performance Lab: A collection of standalone performance features from the WordPress Performance Team.
  10. Polylang Pro: Adds multilingual capability to WordPress.
  11. Post SMTP: First WordPress SMTP plugin with OAuth 2.0 support for Gmail, Hotmail, and Yahoo. Easy setup with a Configuration Wizard.
  12. Real3D Flipbook PDF Viewer Lite: Create realistic 3D flipbooks from PDFs or images.
  13. Redirect Redirection: Create URL redirections and rules via a user-friendly interface.
  14. TinyPNG – JPEG, PNG & WebP image compression: Automatically optimize your JPEG, PNG, and WebP images to speed up your site.
  15. WordPress Importer: Import posts, pages, comments, custom fields, and more from a WordPress export file.
  16. Yoast Duplicate Post: Clone posts and pages with features like Rewrite & Republish.
  17. Yoast SEO: All-in-one SEO solution including content analysis, XML sitemaps, and more.

YouTube

Our website integrates YouTube plugins, a service operated by YouTube, LLC (901 Cherry Ave, San Bruno, CA 94066, USA), a subsidiary of Google Inc.
When you visit a page on our website that includes a YouTube plugin, a connection is established with YouTube’s servers. This allows YouTube to determine which of our pages you have visited.
If you are logged into your YouTube account, YouTube can associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.
The use of YouTube plugins is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in providing an engaging and visually appealing online experience.
For more details on how YouTube handles user data, please refer to YouTube’s Privacy Policy:
YouTube Privacy Policy

Google Web Fonts

Our website utilizes Google Web Fonts to ensure a consistent and visually appealing display of text. When you visit our site, your browser loads the necessary web fonts into its cache to properly render fonts and text.
To facilitate this process, your browser must establish a connection with Google’s servers, notifying Google that your IP address accessed our website. The use of Google Web Fonts is based on Art. 6(1)(f) GDPR, as it contributes to a uniform and optimized presentation of our online services.
If your browser does not support web fonts, it will default to a standard system font.
For more details, visit:
Google Web Fonts FAQ

Google Maps

Our website integrates the Google Maps service via an API. The provider of this service is Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
To enable the functionality of Google Maps, your IP address must be stored and transmitted to Google servers, typically located in the USA. Please note that we have no control over this data transfer.
The integration of Google Maps is based on Art. 6(1)(f) GDPR, as it enhances user experience by providing a convenient way to locate the places mentioned on our website.
For more information on how Google handles your data, visit:
Google Privacy Policy

Note on This Privacy Policy

The primary goal of the European General Data Protection Regulation (GDPR) is to ensure that you, as a data subject, receive clear and comprehensive information regarding the collection, storage, and processing of your data, as well as your associated rights.
If you have any questions or require further clarification regarding specific points in this privacy policy, please do not hesitate to contact our Data Protection Officer mentioned above.