Cookie Policy

This Cookie Policy explains which cookies and similar storage technologies (such as local storage) we use on atlascove.health, why we use them, and how you can control or revoke your consent at any time. It supplements our Privacy Policy, which describes the broader context of how we handle your personal data.

1. What are cookies?

A cookie is a small text file that a website stores on your device (computer, tablet or phone) when you visit it. Cookies are widely used to make websites work, to make them work more efficiently, and to provide information to the operators of the site. We also use related browser storage mechanisms such as local storage and session storage; for the purposes of this policy, we treat them in the same way as cookies.

2. Legal basis

We rely on the following legal bases:

• Strictly necessary cookies / storage: Article 6 (1)(f) GDPR (legitimate interest in operating a secure, functional website) and Article 5 (3) of the ePrivacy Directive 2002/58/EC, as transposed in Portugal by Lei n.º 41/2004 (storage strictly necessary to provide the service you requested).
• All other cookies / storage (analytics, marketing, communication): Article 6 (1)(a) GDPR (your consent) and Article 5 (3) of the ePrivacy Directive 2002/58/EC, as transposed in Portugal by Lei n.º 41/2004 (consent for non-necessary storage).

You can withdraw your consent at any time, with effect for the future, via the Cookie Settings (also accessible from the footer).

3. Which cookies and storage do we use?

The following table lists every cookie and storage entry that may be set on your device when you visit our website. Items marked as opt-in are only set after you have given your consent via our consent banner.

3.1 Strictly necessary

3.2 Analytics

On this marketing website only, and only after you opt in via our consent banner, we use a set of analytics and advertising tools to understand how the website is used and to measure which of our advertisements lead to bookings. The tools are listed in the tables below.

Marketing-website tools only — no health data. The tools described below (Google Analytics 4, Google Ads, Google Tag Manager and the Meta Pixel / Conversions API) run only on this marketing website (atlascove.health) and only after you opt in via our consent banner. They are never loaded in the Atlas Cove product / application, and no health data and no special-category data is ever sent to Google or Meta. The retreat booking health questionnaire (PAR-Q) and the capacity-analysis pages are excluded from all marketing tags. Our backend, application data and any health data stay on our own EU / self-hosted infrastructure at Hetzner (Germany) and never reach a US analytics or advertising provider.

Once you opt in, these tools may set the following cookies. None of them are set before you give consent.

Cookie names and lifetimes are set by the respective providers and may change; the providers' own documentation is authoritative. Google Consent Mode signals and the self-hosted Tag Manager container do not themselves store cookies.

Where these tools transfer personal data to the United States, we rely on the EU–US Data Privacy Framework (Google LLC and Meta Platforms, Inc. are certified) together with Standard Contractual Clauses as a fallback. We operate Google Consent Mode v2, so these tags only fire once you have given consent, and you can withdraw it at any time via the Cookie Settings. We rely on Google's data-protection terms (Google is our processor for Analytics under Article 28 GDPR, and an independent controller for Google Ads conversion data); for the Meta Pixel / Conversions API event data, Meta and Atlas Cove act as joint controllers under Article 26 GDPR (see our Privacy Policy, section 3.2).

3.3 Marketing (opt-in)

3.4 Communication (reserved)

3.5 Error monitoring

We use Sentry (Sentry GmbH, EU hosting at de.sentry.io) to detect and diagnose errors on our website. Sentry does not set cookieson your device. It collects technical error information and limited request metadata; sensitive fields and any health-related data are scrubbed before transmission. Sentry runs under Article 6 (1)(f) GDPR (legitimate interest in operating a stable service); it is listed in our consent banner under “Essential” for transparency.

4. Outbound links to third-party services

Our website contains outbound links to third-party platforms, for example chat.whatsapp.com on our community page and businessofhealth.substack.com on our blog page. These links are plain hyperlinks; we do not embed third-party scripts or pixels on our site for them. When you clicksuch a link, you are redirected to the third-party platform and that platform's privacy policy applies. The relevant third parties are:

• Meta Platforms Ireland Ltd. (WhatsApp) — Privacy Policy
• Substack Inc. — Privacy Policy

5. How to control or withdraw your consent

You can change your cookie preferences at any time by clicking Cookie Settings here, or by using the “Cookie Settings” link in the footer. Withdrawing consent is as easy as giving it.

You can also block or delete cookies through your browser settings. Please note that blocking strictly necessary cookies may affect the proper functioning of the website.

6. Changes to this policy

We may update this Cookie Policy from time to time, for example when we add or remove tools, or when legal requirements change. The latest version is always available at this URL with the update date shown at the top.

7. Contact

For questions about this Cookie Policy or our data handling in general, please contact us at privacy (at) atlascove (dot) health. Full operator details are available in the Imprint.