data protection

Sina Gunkel Coaching, Mentoring & Beratung

Table of content

The protection of your personal data is very important to me. In the following, I will inform you about the processing of your data in the context of using my website and booking my coaching offers.

Responsible body

Sina Gunkel
Coaching, Mentoring & Beratung
Wohlwillstraße 11
20359 Hamburg
info@sinagunkel.com

Data processing

General information on the legal bases for data processing on this website

If you have consented to the processing of your data, I will process your personal data on the basis of Art. 6 (1) lit. a DSGVO or Art. 9 (2) lit. a DSGVO, insofar as special categories of data according to Art. 9 (1) DSGVO are processed. In the case of express consent to the transfer of personal data to third countries, the data processing is also carried out on the basis of Art. 49 (1) lit. a DSGVO. If you have consented to the storage of cookies or to access information on your device (e.g. via device fingerprinting), the data processing will also be carried out on the basis of Section 25 (1) TDDDG. The consent can be revoked at any time.If your data is necessary for the fulfillment of the contract or for the execution of pre-contractual measures, I will process your data on the basis of Art. 6 (1) lit. b DSGVO. Furthermore, I will process your data if this is necessary for the fulfillment of a legal obligation on the basis of Art. 6 (1) lit. c DSGVO.Data processing may also be carried out on the basis of my legitimate interest in accordance with Art. 6 (1) lit. f DSGVO. The specific legal bases applicable in each individual case are explained in the following paragraphs of this data protection declaration.

Collection and processing of personal data

a) When visiting the website: When you visit my website, certain information is automatically collected that cannot be directly linked to your person (e.g. browser type, operating system, date and time of the page view). This information is used solely for statistical purposes and to improve my website. It will not be passed on to third parties.

b) When booking coaching offers: If you book one of my coaching offers, I will collect and process the following personal data from you: first name, last name, address and telephone number. This data is needed to carry out the booking and to plan the coaching sessions. The legal basis for the processing of your data is the fulfillment of the coaching contract.

c) When using the MailPoet newsletter program: If you subscribe to my newsletter, I use the MailPoet newsletter program. Here I collect and process your e-mail address in order to send you regular information and updates about my coaching offers. You can revoke your consent to the use of your e-mail address for sending the newsletter at any time by using the unsubscribe link at the end of each newsletter e-mail.

d) When using the Signal messenger: I use the Signal messenger for communication. If you contact me via Signal, personal data such as your phone number, your name and text messages may be transmitted. This data will only be used to communicate with you and will not be passed on to third parties.

Inquiry by e-mail or telephone

If you contact me by e-mail or telephone, your inquiry including all personal data resulting from it (name, inquiry) will be stored and processed by me for the purpose of processing your request. I will not pass on this data without your consent.

The processing of this data is carried out on the basis of Art. 6 (1) lit. b DSGVO, if your inquiry is related to the fulfillment of a contract or is necessary for the execution of pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective processing of the inquiries addressed to me (Art.6 (1) lit. f DSGVO) or on your consent (Art. 6 (1) lit. a DSGVO) if this has been requested; the consent can be revoked at any time.

The data you send me via contact requests will remain with me until you ask me to delete it, revoke your consent to its storage or the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remainunaffected.

Disclosure of data

I will not pass on your personal data to third parties unless this is necessary for the fulfillment of the contract or I am legally obliged to do so. In certain cases, it may be necessary to pass on your data to processors who support me in the performance of my coaching services (e.g. hosting providers, payment processors). These processors may only use your data in accordance with my instructions and are contractually obliged to comply with the applicable data protection regulations.

Storage of data

Your personal data will only be stored for as long as it is necessary for the performance of the coaching services and to comply with legal retention obligations.

Your rights

You have the right to obtain information about the personal data stored by me and to request its correction, deletion or restriction of processing. You can also object to the processing of your data and assert the right to data portability. For this purpose and for further questions on the subject of data protection, you can contact me at any time using the contact details given above.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 DSGVO)

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 (1) lit. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RESPECTIVE LEGAL BASIS ON WHICH THE PROCESSING IS BASED IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, I WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS I CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) DSGVO).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION UNDER ART. 21 (2) DSGVO).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the allegedinfringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Hosting

External Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art.6 (1) lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1) lit. f DSGVO). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

My hoster will only process your data to the extent necessary to fulfill its service obligations and will follow my instructions regarding this data.

I use the following hoster:

SiteGround Spain S.L.
Calle de Prim 19
28004 Madrid
Spain

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to me as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to me cannot be read by third parties.

Used Software

Audio and Video Conferencing

Data Processing

I use online conference tools, among other things, to communicate with my clients. The specific tools I use are listed below. When you communicate with me via video or audio conference over the internet, your personal data is collected and processed by me and the provider of the respective conference tool.

The conference tools collect all data that you provide/use to use the tools (e-mail address and/or your telephone number). In addition, the conference tools process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other “context information” in connection with the communication process (metadata).

Furthermore, the provider of the tool processes all technical data that is necessary for the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker and the type of connection.

If content is exchanged, uploaded or otherwise provided within the tool, it is also stored on the servers of the tool providers. Such content includes in particular cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that I do not have full control over the data processing operations of the tools used. My options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the data protection declarations of the respective tools, which I have listed below this text.

Purpose and Legal Basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to my clients (Art. 6 (1) lit. b DSGVO). Furthermore, the use of the tools serves the general simplification and acceleration of communication with me or my company (legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO). If consent has been requested, the use of the respective tools is based on this consent; the consent can be revoked at any time with effect for the future.

Storage Period

The data directly collected by me via the video and conference tools will be deleted from my systems as soon as you request me to delete it, revoke your consent to its storage or the purpose for which the data was stored no longer applies. Stored cookies will remain on your device until you delete them. Mandatory legal retention periods remain unaffected.

I have no influence on the storage period of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Zoom

I use Zoom as a conference tool. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to the Zoom privacy policy: https://zoom.us/de-de/privacy.html.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://zoom.us/de-de/privacy.html

Booking System Amelia

On my website, you have the possibility to make appointments with me. For the appointment booking I use the tool “Amelia”. The provider is Amelia Milutina Milankovica street no. 11B, Belgrade, Serbia (hereinafter referred to as “Amelia”).

For the purpose of booking an appointment, you enter the requested data and the desired appointment date in the form provided. The data entered will be used and stored for the planning, execution and, if necessary, for the follow-up of the appointment.

The cookies required for the booking process are automatically deleted after 30 days.

The data you enter will remain with me until you request me to delete it, revoke your consent to its storage or the purpose for which the data was stored no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.

The legal basis for data processing is Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in making it as easy as possible for interested parties and customers to make appointments. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Online Payment Service MOLLIE

a) Payment is processed via the online payment service Mollie. This is a service of Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, hereinafter referred to as “Mollie”.

b) I have integrated Mollie as a payment provider via the Snipcart service. At the end of the order process, you can select several payment methods integrated by Mollie and complete your purchase. Mollie processes the following personal data:

  • Your name;
  • Your IP address;
  • Your internet browser and device type;
  • Your billing and shipping address;
  • Your payment details such as account number or credit card number;
  • Your information about the purchased product or service;
  • the amount of the transaction;
  • the date and time of the purchase.

 

c) If necessary for the fulfillment of the contractual obligation, Mollie may pass on the personal data to affiliated companies.

d) Further information on data usage by Mollie can be found on the Mollie website:

Websitehttps://www.mollie.com
Privacy Policyhttps://www.mollie.com/privacy

lexoffice

Invoices are created via the service provider “lexoffice” (Haufe-Lexware GmbH & Co. KG in Freiburg im Breisgau). I will only pass on your name, your address and, if necessary, further personal data in accordance with Art. 6 (1) lit. b DSGVO to lexoffice exclusively for the purpose of processing your order and only to the extent necessary.

Details on data protection at lexoffice and the privacy policy of Haufe-Lexware GmbH & Co. KG can be found under the following link: https://www.lexoffice.de/datenschutz/

Newsletter

For our newsletters I use the plugin MailPoet from the company Wysija SARL, 6 rue Dieudé 13006, Marseille, France: https://wordpress.org/plugins/mailpoet/. Your data is stored exclusively on servers of my hosting provider. Access is excluded for unauthorized third parties and especially for the plugin provider.

I store at least your e-mail address. If you wish, I will also store your first and/or last name. This way I can also address you personally in my newsletters. This information is not necessary for receiving the newsletter and is therefore voluntary.

Contents: My newsletters contain advertising, information and offers on topics on this website.

Registration: To register for my newsletters, you will find a registration form. After you have finished entering your data, you will receive a confirmation email. By clicking on the link contained therein, you confirm your subscription. This way I can make sure that nobody misuses your data and that you are the one who subscribed to the newsletter. Please understand that I can only include you in our mailing list in this way. The registration process is logged by storing your IP address when you register. I need this storage as proof of your consent.

Performance measurement: My newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from my server when you open the newsletter. I have not booked any further tracking measures with the plugin provider, so that I only see an opening and click rate in total. I can therefore track how many recipients opened the newsletter and whether they used a link. However, I cannot track whether you personally performed these actions.

Cancellation/Termination/Revocation: You have the possibility to cancel or revoke your subscription at any time. For this purpose, you will find an easy-to-click link at the end of each of my newsletters, which will take you to the page where you can cancel or edit your subscription. Your decision will take effect immediately. In rare cases, there may be a short time overlap between unsubscribing and receiving a newsletter.

On the basis of my legitimate interests, I can store the unsubscribed e-mail addresses with the corresponding IP address for up to three years before I delete them. This serves me as proof of your consent, which you once gave. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

The legal bases for data processing are Article 6 (1) (a) GDPR, Article 7 GDPR, in conjunction with Section 7 (2) No. 3 UWG or Section 7 (3) UWG.

Essential Cookies

My website uses cookies. Cookies are small text files that are stored on your computer, either for the duration of your session or for a longer period of time. You can prevent the storage of cookies by adjusting the settings of your internet browser accordingly. However, it is possible that you will then no longer be able to use some functions of this website.

Session Cookies

When you visit my website, a session cookie is stored on your computer for technical reasons. It serves to ensure the proper technical functionality of the website. No personal data is stored and the cookie is automatically deleted from your computer after the end of your internet session.

Note on data transfer to the USA and other third countries

I use, among other things, tools from companies based in the USA or other third countries that do not have a secure data protection level. If these tools are active, your personal data may be transferred to these third countries and processed there. I would like to point out that in these countries no data protection level comparable to that of the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you, as the person concerned, being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data located on US servers for surveillance purposes. I have no influence on these processing activities.

YouTube

I have integrated a YouTube video on my website that is stored on https://www.YouTube.com and can be played directly from my website. In principle, your IP address is sent to Youtube/Google and cookies are installed on your computer when you call up a page with embedded videos. However, I have integrated the videos in “extended data protection mode”, which means that no data about you as a user is transferred to YouTube/Google if you do not play the video. Only when you click on the video to play it will the following data be transferred:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser 
  • Operating system and its interface
  • Language and version of the browser software
  • Hardware used (PC, smartphone etc.)
  • Location (if Google Maps is activated)

 

I have no influence on this data transfer.

By visiting my website and playing the videos, YouTube/Google receives the information that you have called up the corresponding subpage of my website. If you are logged in to Google, this data is directly assigned to your account. If you do not want the assignment to your profile at YouTube, you must log out before activating the button. YouTube/Google also stores data if you do not have a Google user account, in particular: IP address, search queries, browser and operating system version.

YouTube/Google stores the aforementioned data as usage profiles and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in or users without a corresponding account) to provide needs-based advertising and to inform other users of the social network about your activities on my website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Information from the third party provider: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

:https://policies.google.com/technologies/product-privacy?hl=de undhttps://www.google.de/intl/de/policies/privacy.

 

The information collected by this provider’s cookies is usually sent to a server in the USA and stored there. In the case of data transfer to the USA, the data transfer is based on the existence of standard contractual clauses.

I do not process any personal data via YouTube. The disclosure of personal data by Google, in particular to third countries, is beyond my control. I cannot be held liable for this.

Updating the Privacy Policy

I reserve the right to adapt this privacy policy as needed to adapt it to technical or legal developments. The current version can always be found on my website.

Status: July 15, 2023