Last updated: September 29, 2025

1. Data Controller

Data Controller: Qi Institut – Maximin Gaillard
Legal Status: Sole Proprietorship (Auto-entrepreneur)
Email: contact@qiinstitut.com
Website: www.qiinstitut.com

2. Data We Collect

In order to provide personalized Ba Zi (Chinese astrology) analyses, Qi Institut may collect the following personal information through forms on our website (hosted by Systeme.io):

• First name

• Date of birth

• Time of birth

• Place of birth (city and country)

• Email address

3. Purpose of Data Collection

Personal data is collected and processed solely for the following purposes:

• To prepare and deliver the personalized Ba Zi analysis requested by the Client

• To send additional materials related to the analysis (PDF, follow-up if applicable)

• To include the Client in Qi Institut’s mailing list for newsletters, special offers, or updates, only with the Client’s explicit consent

Clients may unsubscribe at any time by clicking the “unsubscribe” link included in every email.

4. Legal Basis for Processing

The processing of personal data is based on:

• Performance of a contract: to deliver the personalized service requested by the Client

• Explicit consent: in cases of newsletter subscription, or when a Ba Zi analysis is requested for a child

• For minors, parental or legal guardian consent is required before processing any data

5. Protection of Minors’ Data

Qi Institut offers Ba Zi analyses for children only upon explicit request by parents or legal guardians.

• Children’s birth data is handled with the highest level of confidentiality

• Data is used exclusively for the requested service

• No information will ever be sold, shared, or used for commercial purposes

6. Data Storage & Security

Personal data is securely stored on Systeme.io, a GDPR-compliant platform.

Data is accessible only to the Data Controller and will never be shared, transferred, or sold to third parties.

Qi Institut implements reasonable technical and organizational measures to protect data against loss, misuse, unauthorized access, disclosure, or alteration.

7. Data Retention

Personal data is retained only for as long as necessary to complete the requested service and for related administrative purposes.

Unless required by law, data will not be kept for more than three (3) years after the last interaction with the Client.

Clients may request deletion of their data at any time by contacting us at the email address provided above.

8. Your Rights

In accordance with European GDPR and applicable international data protection laws, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Request deletion of your data (“right to be forgotten”)

• Object to certain types of processing

• Request data portability

To exercise these rights, please contact us at the email address listed above.

9. Cookies & Tracking

This website may use technical cookies necessary for proper navigation and functionality.

Currently, no advertising cookies or third-party tracking tools (e.g., Google Analytics, Facebook Pixel) are used.

If such tools are introduced in the future, this Privacy Policy will be updated accordingly, and consent will be requested where required.

10. Contact

For any questions regarding this Privacy Policy or your personal data, please contact us at the email address listed above.