Privacy Policy

Last updated: 12 September 2026

1. Introduction

This Privacy Policy explains how JOHANNA ONDA collects, uses, stores and protects your personal data when you visit this website, contact us, subscribe to the newsletter, enquire about or book our services, or otherwise interact with us.

We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Johanna Paaso / JOHANNA ONDA
Portugal
Email: johanna@ondaproduction.com

3. Personal Data We Collect

Depending on how you interact with the website and our services, we may collect personal data including:

  • Your name

  • Email address

  • Phone number, if provided

  • Information provided through contact forms, booking or registration forms, emails or other communications

  • Information relating to services, sessions or events you enquire about or book

  • Payment and transaction information necessary to confirm and administer payments

  • Newsletter subscription and communication preferences

  • Technical and website usage information, such as IP address, browser and device information, pages visited, referral source and interactions with the website

  • Cookie and consent preferences

Please avoid providing sensitive personal or health information unless it is relevant and necessary in connection with a service or session.

4. How We Collect Your Data

We may collect personal data when you:

  • Contact us through the website, email or another communication channel

  • Enquire about or book a service, session, event or collaboration

  • Complete a booking, registration or other form provided through MailerLite

  • Subscribe to the newsletter

  • Make a payment for a service or event

  • Browse or interact with the website

  • Accept optional analytics cookies or similar technologies

Some technical information may also be collected automatically when you use the website.

5. How We Use Your Personal Data

We may process your personal data to:

  • Respond to enquiries and messages

  • Communicate with you about our services

  • Manage bookings, registrations, sessions, events and other services

  • Fulfil agreements and provide services you have requested

  • Process and confirm payments

  • Maintain appropriate customer and business records

  • Send newsletters and marketing communications where you have consented to receive them

  • Operate, maintain and improve the website

  • Understand how visitors use the website

  • Maintain the security and functionality of the website

  • Meet legal, tax, accounting and other regulatory obligations

  • Establish, exercise or defend legal claims where necessary

We only process personal data where we have an appropriate legal basis for doing so.

6. Legal Basis for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

Contractual necessity: where processing is necessary to take steps at your request before entering into an agreement or to provide a service you have booked.

Consent: where you have actively consented to processing, for example when subscribing to the newsletter or accepting optional analytics cookies. You may withdraw your consent at any time.

Legitimate interests: where processing is reasonably necessary for operating, protecting and improving our business and services, provided that these interests do not override your rights and freedoms.

Legal obligations: where processing is required to comply with applicable legal, accounting, tax or regulatory requirements.

Submitting an enquiry or making a booking does not automatically constitute consent to receive marketing communications.

7. Service Providers and Sharing of Personal Data

We do not sell or rent your personal data.

We use trusted third-party service providers where necessary to operate the website, manage bookings and customer information, process payments, communicate with customers and provide our services.

These include:

Squarespace – website hosting, infrastructure and website functionality.

MailerLite – booking and registration forms, customer and contact management, newsletter subscription management and email communications. Information you provide when booking, registering, subscribing or completing a relevant form may be stored and processed through MailerLite.

Google Analytics – website analytics, where you have consented to optional analytics cookies.

Payment providers and financial institutions, including PayPal, Revolut and banks used for bank transfers, may process personal data independently in accordance with their own legal obligations and privacy policies.

We may also disclose personal data where required by law or where reasonably necessary to establish, exercise or protect our legal rights.

8. Bookings and Customer Information

When you enquire about, register for or book a JOHANNA ONDA service, session, event or other offering, we may collect information necessary to manage your booking and provide the requested service.

This may include your name, email address, phone number where provided, details of the service or event booked, relevant communications and other information you choose to provide in connection with your booking.

We use MailerLite to manage booking and registration forms and to maintain customer and contact information. Information submitted through these forms may therefore be stored and processed through MailerLite.

Booking and customer information is processed where necessary to take steps at your request before entering into an agreement, fulfil our agreement with you, manage the customer relationship and comply with applicable legal and administrative requirements.

Being a customer or making a booking does not automatically subscribe you to marketing communications. Where consent is required for newsletter or marketing communications, this is requested separately.

When you make a payment, the relevant payment provider or financial institution may process information necessary to complete the transaction, such as your name, payment details, transaction amount, date and other transaction information.

JOHANNA ONDA may receive and retain information necessary to confirm and administer your payment and comply with applicable accounting, tax and legal obligations. PayPal, Revolut and relevant banks or financial institutions process personal data in accordance with their own privacy policies and legal obligations.

9. Google Analytics

This website uses Google Analytics to help us understand how visitors use the website, including how visitors arrive at the website, which pages they visit and how they interact with its content.

Google Analytics may use cookies and similar technologies to collect information about website usage.

Optional analytics cookies are used only where you have provided the required consent through the website's cookie consent mechanism.

You can reject optional analytics cookies when visiting the website and can change or withdraw your cookie preferences through the cookie settings available on the website.

Information collected through Google Analytics may be processed by Google in accordance with Google's privacy practices.

10. Cookies

This website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function correctly and may be used without your consent where permitted by applicable law.

Other cookies, including analytics cookies, are optional and are used only after you have provided the required consent.

Cookies may be used to:

  • Enable essential website functionality

  • Remember preferences and cookie choices

  • Maintain website security and performance

  • Measure and understand website traffic and usage

When you first visit the website, you can choose whether to accept or reject optional cookies through the cookie banner.

You can change or withdraw your cookie preferences through the cookie settings available on the website. You may also manage cookies through your browser settings.

Please note that disabling necessary cookies may affect the functionality of the website.

11. Newsletter and Email Marketing

If you subscribe to the JOHANNA ONDA newsletter, we process information such as your name, where provided, and email address for the purpose of sending you news, updates, event information and marketing communications relating to our services.

We use MailerLite to manage our customer/contact database, newsletter subscriptions and email communications.

Receiving a service from JOHANNA ONDA, making a booking or being included in our customer records does not, by itself, mean that you are subscribed to our newsletter.

Newsletter subscriptions and marketing communications are based on consent where required by applicable law.

You can unsubscribe at any time by clicking the unsubscribe link included in any marketing email or by contacting us directly.

Withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

Your personal data will not be sold or provided to third parties for their own independent marketing purposes.

12. International Data Transfers

Some of the service providers we use may process or store personal data outside Portugal or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate safeguards will be used where required under applicable data protection law, such as an adequacy decision or approved contractual safeguards.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may vary depending on the nature and purpose of the information.

Booking and customer records may be retained for as long as reasonably necessary to manage the customer relationship and comply with applicable accounting, tax, legal and administrative requirements.

Newsletter information and marketing preferences may be retained while you remain subscribed or as otherwise necessary to maintain a record of your communication preferences.

When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.

14. Your Data Protection Rights

Under the GDPR and applicable data protection law, you may have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete personal data

  • Request deletion of your personal data

  • Request restriction of processing

  • Object to certain processing

  • Withdraw consent at any time where processing is based on consent

  • Request portability of your personal data where applicable

  • Lodge a complaint with a competent data protection supervisory authority

These rights may be subject to certain legal conditions and exceptions.

To exercise your rights, please contact: johanna@ondaproduction.com

You also have the right to lodge a complaint with the Portuguese data protection supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

Comissão Nacional de Proteção de Dados (CNPD)

15. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

16. Third-Party Websites and Links

This website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing the relevant privacy policy when visiting an external website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, service providers, legal requirements or data-processing practices.

The current version will be published on this page, and the “Last updated” date will be changed accordingly.

18. Contact

If you have questions about this Privacy Policy, how your personal data is processed, or wish to exercise your data protection rights, please contact:

Johanna Paaso / JOHANNA ONDA
Portugal
Email: johanna@ondaproduction.com