Required by German law (Digitale-Dienste-Gesetz, DDG §5).
E-Mail: hello@shewhorests.com
N/A
The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr.
We are not obligated to participate in dispute resolution proceedings before a consumer arbitration board and do not currently participate in such proceedings.
August 2026
Privacy Policy (Datenschutzerklärung)
The controller responsible for the processing of personal data on this website is:
Ritika Arora
trading as SheWhoRests
ARUA is a brand of SheWhoRests
Eichendorffstrasse 17
10115 Berlin
Germany
E-mail: hello@arua-wellness.com
If you have any questions regarding the processing of your personal data or this Privacy Policy, you may contact us using the details above.
No Data Protection Officer has been appointed.
We process personal data only where this is necessary to operate this website, respond to enquiries, provide our services, fulfil contractual or pre-contractual obligations, comply with legal obligations, or where we otherwise have a lawful basis under the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person.
Depending on how you use this website, the data processed may include technical connection data as well as information you voluntarily provide when contacting us.
This website is hosted using services provided by:
Netlify, Inc.
44 Montgomery Street, Suite 300
San Francisco, CA 94104
USA
When you access this website, technical information necessary to deliver and secure the website may be processed. This may include:
This processing is necessary to make the website available, maintain its stability and security, and detect or prevent technical problems or misuse.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically efficient operation of our website.
Netlify may process personal data outside the European Economic Area, including in the United States. Netlify states that it uses recognised mechanisms for international transfers, including the EU-US Data Privacy Framework where applicable and Standard Contractual Clauses where necessary.
Further information about Netlify's processing of personal data is available in the Netlify Privacy Statement.
If you contact us by e-mail, we process the personal data you provide in your message. This may include:
We use this information solely to process and respond to your enquiry and, where applicable, to prepare, establish or manage a business relationship.
Where your enquiry concerns a potential contract or services you are considering booking, processing is based on Art. 6(1)(b) GDPR. For general business enquiries and other communications, processing may be based on Art. 6(1)(f) GDPR, our legitimate interest in communicating with prospective clients, partners and other persons contacting ARUA.
We retain correspondence only for as long as necessary for the relevant purpose, unless statutory retention obligations require us to retain certain information for a longer period.
You can contact us through the enquiry form available on this website.
When you submit the form, we process the information you provide, which may include:
We process this information solely to respond to your enquiry and, where applicable, to discuss, prepare or provide ARUA services.
Legal basis: Where your enquiry relates to entering into a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. For other business enquiries, processing is based on Art. 6(1)(f) GDPR, our legitimate interest in responding to enquiries and conducting our business.
The enquiry form is processed using Netlify Forms, a service provided by:
Netlify, Inc.
44 Montgomery Street, Suite 300
San Francisco, CA 94104
USA
When you submit the form, the information entered is transmitted to and stored by Netlify so that we can receive and process your enquiry. Netlify provides the technical infrastructure used to process the submission.
Netlify may process personal data in the United States and other countries. Netlify states that international transfers are protected using appropriate transfer mechanisms, including the EU-US Data Privacy Framework where applicable and Standard Contractual Clauses.
We retain form submissions only for as long as necessary to process the relevant enquiry and any resulting business relationship, subject to applicable statutory retention obligations. We periodically delete submissions that are no longer required.
We do not automatically add people who submit an enquiry to a newsletter or marketing mailing list.
Further information is available in the Netlify Privacy Statement.
If you or your organisation books an ARUA experience or enters into another business relationship with us, we may process personal data necessary to establish, perform and administer that relationship. This may include:
Processing required for the performance of a contract or pre-contractual measures is based on Art. 6(1)(b) GDPR. Where we are legally required to retain or process information, particularly for accounting or tax purposes, processing is based on Art. 6(1)(c) GDPR.
Relevant business and accounting records may be retained for the periods required under applicable German law.
This website may contain links to external websites or social-media profiles, for example Instagram or LinkedIn. These are ordinary external links. Personal data is generally transmitted to the relevant provider only when you choose to follow such a link.
Once you leave our website, the processing of personal data by the external provider is governed by that provider's own privacy practices. We have no control over the processing of personal data carried out independently by external websites.
At launch, this website does not intentionally use analytics, advertising or marketing tracking technologies such as Google Analytics or Meta Pixel.
We do not use personal data collected through this website to create advertising profiles or track visitors across unrelated websites.
Technically necessary technologies may be used where required for the operation, security or functionality of the website.
If we introduce analytics, marketing technologies or other services requiring consent in the future, we will update this Privacy Policy and, where legally required, obtain consent before activating those technologies.
We do not sell personal data. Personal data may be disclosed to service providers that assist us in operating our website or business where this is necessary for the respective purpose. Depending on the services used, these may include:
Where service providers process personal data on our behalf, appropriate contractual and data-protection arrangements are used where required. Personal data may also be disclosed where we are legally required to do so.
Some service providers may process personal data outside Germany or the European Economic Area. Where personal data is transferred to a country outside the EEA, we seek to ensure that an appropriate legal mechanism is available for the transfer in accordance with the GDPR.
Depending on the provider and destination, this may include an adequacy decision by the European Commission, participation in the EU-US Data Privacy Framework, Standard Contractual Clauses, or another legally recognised transfer mechanism.
We retain personal data only for as long as necessary for the purpose for which it was collected. Different retention periods may apply depending on the nature of the data and the reason for processing it.
Where statutory retention obligations apply, for example to invoices, contracts or accounting records, relevant information may be retained for the period required by law.
After the relevant purpose and any applicable statutory retention period have ended, personal data is deleted or anonymised where appropriate.
Subject to the requirements of applicable law, you have the following rights regarding your personal data:
You may request information about whether we process your personal data and obtain access to that data.
You may request correction of inaccurate personal data or completion of incomplete data.
You may request deletion of your personal data where the legal requirements are met.
You may request restriction of processing in certain circumstances.
Where the legal requirements are met, you may receive personal data you have provided in a structured, commonly used and machine-readable format.
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to processing on grounds relating to your particular situation.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact: hello@arua-wellness.com
If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
For Berlin, the supervisory authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Germany
E-mail: mailbox@datenschutz-berlin.de
Telephone: +49 30 13889-0
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
This website is delivered using encrypted HTTPS/TLS connections. However, no transmission of information over the internet can be guaranteed to be completely secure.
We do not use personal data collected through this website for automated decision-making or profiling within the meaning of Art. 22 GDPR.
We may update this Privacy Policy where our website, services, technical infrastructure or legal requirements change. The current version will always be available on this website.
Last updated: August 2026