LEGAL CHARTER · EU GDPR COMPLIANCE
Effective Revision: 14 October 2026
DATA PROTECTION & CONFIDENTIALITY CHARTER
How we safeguard your sensitive psychiatric, somatic, and personal narratives under European GDPR and Dutch confidentiality statutes.
Zero Commercialization
Your intake evaluations and psychological history are never leased, monetized, or shared with third-party brokers.
Dual-Facilitator Vault
Sensitive screening logs are strictly restricted to primary stewards Dirk Plas and Nayma Genin.
Dutch AP Oversight
Operated in strict adherence with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
DOCUMENT CONTENTS
9 Articles
1. Controller & Ethics012. Personal & Contact Data023. Special Category Health Data034. Video Calls & Intake Notes045. Lawful Bases (GDPR Art. 6 & 9)056. Container Sanctity & Cohort Rules067. Technical Safeguards & Sub-Processors078. Retention Lifecycles & Purging089. Rights & Regulatory Recourse09
Direct Data Officer Inquiries
Direct access or redaction requests may be initiated at any moment:
Het Voorhuis · Havelte, Drenthe
All physical paperwork, intake cards, and dietary questionnaires are destroyed immediately following residential integration.
“In somatic and inner psychological inquiry, trust is not merely a legal checkbox—it is the biological foundation that allows the autonomic nervous system to let down its guard.”
Dirk Plas & Nayma Genin · Clinical Stewards, Metamorphosis Retreats
01 / SECTION
This Privacy Policy details the policies, organizational safe-keeps, and statutory procedures governed by Metamorphosis Retreats B.V. (in formation), operating its residential cohort programs at Meeuwenveen Accommodaties, Meeuwenveenseweg 1, 7971 PK Havelte, Drenthe, Netherlands (“Metamorphosis”, “we”, “our”, or “the Organization”).
We act as the primary Data Controller as prescribed by the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Dutch GDPR Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming – UAVG). Because our retreats involve profound personal exploration, intentional psilocybin journeys, and somatic therapeutic integration, we apply medical-grade care and unyielding discretion to all disclosures made through this digital portal and our residential facilities.
02 / SECTION
To ensure clear correspondence, tailored room allocations, and safe travel arrangements to Drenthe, we process standard identifying parameters strictly necessary for the performance of our residential agreements:
Identity & Contact
• Full legal name and preferred pronouns
• Verified email address & mobile telephone
• Date of birth and primary country of residence
• Designated emergency contact details
Hospitality & Logistics
• Room tier selection (Het Voorhuis private ensuite)
• Severe allergies & dietary restrictions
• Arrival logistics (Meppel / Steenwijk rail shuttles)
• Billing details & SEPA bank transaction identifiers
03 / SECTION
Under Article 9 of the GDPR, physiological metrics, pharmacological profiles, and psychiatric histories represent “Special Category Data” requiring heightened physical and administrative safeguards. We explicitly process the following health self-disclosures:
Psychopharmacological & Psychiatric History
Previous or current use of SSRIs, SNRIs, MAOIs, tricyclics, lithium, or anti-psychotics; history of bipolar mania, schizophrenia, psychosis, or active dissociation.
Cardiovascular & Somatic Conditions
History of uncontrolled hypertension, cardiac arrhythmia, aneurysm risk, epilepsy, or recent major surgical interventions.
Somatic & Intentional Self-Report
Personal inquiries regarding childhood patterns, grief, burnout, nervous system states, and emotional recalibration aspirations.
Strict Scope Limitation: Health data is processed exclusively for (i) determining medical suitability under our exclusionary criteria, (ii) preparing somatic facilitator dosage and grounding parameters, and (iii) immediate medical intervention in emergency circumstances.
04 / SECTION
Each candidate participates in a mandatory 30-minute 1:1 suitability video conference. We maintain the highest standards of audiovisual hygiene:
05 / SECTION
In compliance with EU regulations, we map every data process to explicit lawful bases:
CATEGORY
GDPR BASIS
PURPOSE & SCOPE
General Identity
Art. 6(1)(b) Contractual Performance
Fulfilling room reservations, retreat coordination, and dietary provisions.
Health & Psychiatric Intake
Art. 9(2)(a) Explicit Consent
Screening contraindications and crafting somatic ceremonial dosing levels.
Emergency Contacts
Art. 6(1)(d) Vital Interests
Protecting bodily integrity during rare medical acute events in Havelte.
Accounting & Invoices
Art. 6(1)(c) Legal Obligation
Compliance with Dutch Tax Administration (Belastingdienst) 7-year audit requirements.
06 / SECTION
The profound intimacy of an 8-to-10 person psilocybin retreat requires peer agreements that exceed typical web disclosures. Prior to stepping foot on the grounds of Het Voorhuis, every participant and team member signs the Sacred Container Agreement:
Total Digital Abstinence & No Media Capture
No photographs, audio snippets, video captures, or voice recordings are permitted inside ceremony rooms, integration lounges, or cohort dining spaces. Phones remain parked in private rooms or safekeeping during ceremonies.
Non-Attribution of Fellow Participant Vulnerabilities
You may speak freely of your own somatic awakenings, insights, and lessons following the retreat. You are contractually and ethically bound never to disclose the identity, occupation, stories, emotional outpourings, or presence of any peer outside the cohort.
07 / SECTION
We vet all technical systems through Dutch and European privacy lenses. Data resides exclusively in certified EU data centers or within services bound by the EU-U.S. Data Privacy Framework:
Google Workspace EU
AES-256 encrypted drives, multi-factor hardware keys, geographically locked within Western Europe.
Calendly LLC
Used solely for scheduling discovery calls. Screen questions are stripped of clinical detail.
Rabobank & Mollie
Regulated Dutch financial interfaces executing PCI-DSS Level 1 tokenized transactions.
08 / SECTION
We practice principled data minimization. Information is retained only as long as clinically protective or legally mandated:
Declined or Withdrawn Applications
Screening forms and medical entries for non-attending applicants.
Purged within 90 Days
Post-Retreat Integration Notes
Observations and dosage logs retained to guide 4-week follow-up care.
12 Months Post-Ceremony
Statutory Financial Ledger
Payment receipts, invoices, and VAT tax records required by Dutch law.
7 Years (Belastingdienst)
09 / SECTION
As a resident of the European Economic Area or a visitor receiving services within the Netherlands, you hold the following rights without reservation:
Right to Access (Art. 15)
Request an unhurried, readable copy of all dossiers connected to your name.
Right to Erasure (Art. 17)
Command immediate irreversible purging of non-statutory records (“Right to be forgotten”).
Right to Rectification (Art. 16)
Update outdated health assessments, medications, or logistical addresses.
Right to Restrict (Art. 18)
Freeze the processing of specific psychological reflections while disputing accuracy.
Should you feel our stewardship does not honor your dignity or statutory requirements, you have the right to lodge a formal complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) via autoriteitpersoonsgegevens.nl.
Formal Privacy Office & Data Lead
Metamorphosis Retreats B.V. · Data Protection Department
Meeuwenveen Accommodaties · Meeuwenveenseweg 1
7971 PK Havelte, Drenthe, The Netherlands
Email: hello@metamorphosisretreats.nl (Subject: Attention Data Protection Steward)
Commitment: We respond to all verified identity-checked requests within thirty (30) calendar days.
ETHICAL DISCERNMENT
If you take sensitive prescription treatments or hold questions about sharing psychiatric history, we invite you to an unhurried, non-recorded preliminary consultation.
