← Back to home
Legal
Privacy Policy
How we handle your data — short, and in plain language.
English · Deutsche Version
Data we collect
- Your name and email when you join the waitlist or complete the Personality Profile.
- Your answers from the Personality Profile.
- The content of your emails and iMessages, if you write to us directly.
- If you enroll in mentoring: your name, email, billing details and payment status. Card details go directly to our payment provider Stripe; we never see or store your full card number.
- Mentoring content: notes and debrief sheets from our sessions, and what you share with us during the program.
- Session recordings, only if you agree at the start of a session.
- Standard server log data on page load (e.g. IP address, timestamp) that our host records automatically.
Why
- To deliver mentoring and respond to your inquiry.
- To process payments and keep the records German tax law requires.
- To write your debrief sheets (that's what recordings are for).
- To keep the site secure and stable.
Legal basis
We process your data based on your consent (Art. 6(1)(a) GDPR) and, where applicable, to take pre-contractual or contractual steps (Art. 6(1)(b) GDPR). Mentoring and payment processing are based on our contract with you (Art. 6(1)(b) GDPR). Session recordings are based on your consent (Art. 6(1)(a) GDPR), which you can refuse or withdraw at any time without any effect on the program. Keeping billing records is a legal obligation (Art. 6(1)(c) GDPR). Secure site operation relies on our legitimate interest (Art. 6(1)(f) GDPR).
Who we share it with
We never sell your data. We use a few carefully chosen providers that process it only on our behalf:
- IONOS SE (Montabaur, Germany) — hosting. Processing in the EU. A data-processing agreement under Art. 28 GDPR is in place.
- Web3Forms — delivers your form submissions to us by email. Processing may involve servers in the US. A data-processing agreement is in place, and the transfer is covered by EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.
- Zoho Corporation B.V. (Netherlands) — email inbox. Stored and processed in the EU data centre. A data-processing agreement under Art. 28 GDPR is in place.
If you enroll in mentoring, these providers are added:
- Stripe Payments Europe, Ltd. (Dublin, Ireland) — payment processing. Stripe receives your payment and billing details directly. For fraud prevention and its own legal obligations, Stripe acts as an independent controller. Data may be transferred to Stripe, Inc. in the US; this is based on the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses. Details: stripe.com/privacy.
- Zoom Communications, Inc. (USA) — video calls. Zoom processes connection and meeting data (e.g. name, IP address, call times). The transfer to the US is based on the EU-U.S. Data Privacy Framework. Recordings are made locally on our computer, not in Zoom's cloud.
- Apple (Apple Distribution International Ltd., Cork, Ireland) — iMessage for messages between sessions and iCloud for storing session recordings. Both use end-to-end encryption (for iCloud: Advanced Data Protection), so Apple cannot access the content.
Fonts are served locally from our own server (self-hosted). No connection is made to an external font CDN, so no font-related transfer of your IP address takes place.
We set no analytics, tracking, or advertising cookies, and load no external user-tracking scripts. That's why there is no cookie banner.
Retention
We keep your data until you request deletion — and no longer than needed for the purposes above. Statutory retention obligations remain unaffected.
- Session recordings: deleted after 6 months, or earlier on request.
- Mentoring notes and debrief sheets: kept while we work together; deleted on request after the program ends.
- Invoices and payment records: kept for the periods German tax and commercial law require (up to 10 years).
Your rights
At any time you can:
- ask what data we hold about you,
- have it corrected or deleted,
- object to or restrict its processing,
- withdraw a consent you gave, going forward,
- lodge a complaint with a data-protection supervisory authority.
A plain email is enough.