← Back

Privacy Policy

This page explains what personal data is collected when you use this website, why, and what rights you have. Last updated: 10.08.2026.

1. Who is responsible

[FULL NAME]
[STREET, POSTCODE, CITY, AUSTRIA]
Email: [EMAIL]

You can contact me at the address above about anything relating to your data.

2. What data is collected, and why

Coaching application form

When you submit the application form, the following is collected:

• First name and last name
• Email address
• Phone number
• Instagram handle
• Anything you write in the free-text field
• Confirmation that you are 18 or over, and your consent to be contacted

Purpose: to review your application, get back to you, and arrange a call.

Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Retention: if we don't work together, your data is deleted after 6 months. If we do, it is kept for the duration of the coaching and afterwards for as long as required by German tax and commercial law (generally 6–10 years under §147 AO / §257 HGB).

Providing this data is voluntary, but without it I can't process an application.

Server logs

When you visit this site, the hosting provider automatically processes technical data such as your IP address, the time of the request, the page requested and your browser type. This happens for every website and is necessary to deliver the page securely.

Legal basis: legitimate interest in secure and reliable operation of the website (Art. 6(1)(f) GDPR).

Cookies and analytics

This site sets no cookies and uses no analytics or tracking tools. Fonts are hosted on this server, so no data is transmitted to third parties when the page loads. [UPDATE THIS SECTION IF ANALYTICS, A PIXEL OR EMBEDS ARE ADDED LATER.]

3. Service providers

The following processors handle data on my behalf, under data processing agreements:

• Cloudflare, Inc. (USA) — hosting of this website [CONFIRM THE DPA / SCCs ARE IN PLACE VIA THE CLOUDFLARE DASHBOARD]
• Formspree, Inc. (USA) — receives and forwards form submissions [CONFIRM CURRENT TRANSFER MECHANISM: EU-US Data Privacy Framework certification and/or Standard Contractual Clauses]
• [EMAIL PROVIDER] — correspondence with you
• [ADD LATER: booking tool, video call tool, payment provider]

Your data is not sold, and is not passed to anyone else except where I am legally required to do so.

4. Transfers outside the EU

Some of the providers above are based in the United States. Data transferred there is protected either by the provider's certification under the EU-US Data Privacy Framework or by Standard Contractual Clauses approved by the European Commission. Despite these safeguards, US authorities may in principle be able to access data, and the level of protection may not fully match that of the EU. [CONFIRM WHICH MECHANISM APPLIES TO EACH PROVIDER.]

5. Your rights

Under the GDPR you have the right to:

• Access the data held about you
• Have inaccurate data corrected
• Have your data deleted
• Have processing restricted
• Receive your data in a portable format
• Object to processing based on legitimate interest
• Withdraw consent at any time, with effect for the future

To exercise any of these, email [EMAIL]. You also have the right to complain to your local German data protection authority, or to the authority for the German state (Bundesland) where you live.

6. Minors

This website and the coaching offered through it are intended for adults. No application is accepted from anyone under 18, and no data is knowingly collected from minors. If you believe a minor has submitted data, contact me and it will be deleted.

7. Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place. Applications are read and assessed by a person.

8. Data security

This website is delivered over an encrypted TLS connection, which you can recognise by the padlock in your browser's address bar. Appropriate technical and organisational measures are in place to protect your data against loss, misuse and unauthorised access.

9. Data protection officer

A data protection officer is not required under Art. 37 GDPR and has not been appointed. For any data protection matter, use the contact details in section 1.

10. Changes

This policy may be updated when the website or the services behind it change. The current version always applies.