Privacy Policy

Last updated: 5 October 2026

This policy explains what personal data Sirius collects through siriusmeditation.org, why we collect it, who we share it with, and the rights you have over it. We have tried to write it in plain language rather than legal boilerplate.

Who is responsible for your data

What we collect, and why

When you reserve your place

The form asks for your first name, last name and email address, your preferred language and, optionally, your country. It also records which mornings you chose and whether you join online or in the room.

We need this to hold your place, to send you the confirmation with the link to join, to write to you in your language with the start time where you are, and to count how many countries and languages take part. The legal basis is steps taken at your request so that you can take part.

We do not ask for your telephone number or address, and we do not store your IP address with your registration.

What you confirm on the form

The form asks you to confirm two things — that the sessions are filmed and streamed live, and that you have read the medical and educational disclaimer. We record the date and time at which you confirmed them, as evidence.

Filming and live stream

Every session is filmed and streamed live on YouTube. The recordings stay available on YouTube after the event and may be used later, including to present Sirius and to announce future editions. If you take part in the room you may be visible or audible in the stream and in the recordings; by reserving a place in the room you accept this. If you follow the stream online you are not filmed. The legal basis is our legitimate interest in recording and presenting the event.

When you donate

Donations are processed by Stripe. Your card details are entered on Stripe’s own secure page and never reach our servers — we never see or store your card number. Stripe tells us whether the payment succeeded, the amount, the reference and the email address you gave, which we use to send you one thank-you message.

We keep the record of your donation because tax and accounting law requires us to.

When you talk to the guide

The guide on the site is an AI assistant. What you type and the answers you receive are stored so that the conversation can continue while you browse and so that we can improve the answers. The messages are processed for us by an AI language model provider. Please do not share personal or medical details in the chat. The legal basis is our legitimate interest in answering questions about the event.

When you write to us

If you reply to one of our emails or write to info@siriusmeditation.org, we keep your message so that we can answer you.

When you simply visit

Our hosting provider keeps standard server logs (IP address, browser type, time of request) to keep the site running and to defend against abuse. The legal basis is our legitimate interest in a secure, working website. We also apply basic rate limiting to the forms and the guide for the same reason.

Cookies and measurement

Sirius does not use analytics or advertising cookies. The little we store in your browser to make the site work is listed in our Cookie Policy.

Who we share it with

We do not sell, rent or trade your personal data. We share it only with the services that make Sirius work:

Some of these companies are based outside the European Economic Area, mainly in the United States. Where that is the case, transfers rely on the European Commission’s adequacy decisions or on Standard Contractual Clauses.

How long we keep it

• Registrations — 12 months after the end of the event, then deleted.
• Conversations with the guide — 12 months, then deleted.
• Donation records — for as long as Croatian accounting law requires. The technical record of each payment notification from Stripe is reduced to a summary without personal data after 24 months.
• Emails — 12 months after our last message to each other.
• Recordings of the sessions — kept and published on YouTube without a fixed end date.
• Server logs — a short rolling window kept by our hosting provider, then overwritten.

Your rights

Under the GDPR you may ask us to:

• See the personal data we hold about you;
• Correct anything that is wrong or incomplete;
• Delete it, where we are not required to keep it;
• Restrict or object to how we use it;
• Receive a copy in a portable format.

Write to info@siriusmeditation.org — or simply reply to any of our emails — and we will respond within one month. The same address is how you withdraw from the event.

Complaints

If you believe we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Croatian supervisory authority:

Security

The site is served over HTTPS. Payment card data never touches our servers. Access to the registration records is limited to the small team running the event, over an encrypted connection; the organiser’s overview is protected by a password.

Changes

If we change how we handle your data we will update this page and the date at the top.

See also our Cookie Policy and Terms of Participation.