Privacy Policy

1. General Information

Data processing on this website is carried out by the website operator. You will find their contact details in this section in this privacy policy. Your data is collected, on the one hand, when you provide it to us (e.g. by entering it into a contact form). Other data is collected automatically or with your consent when you visit the website, primarily by our IT systems (mainly technical data such as your internet browser, operating system, or the time of the page request).

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour. Insofar as contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders, or other enquiries.

You have the right at any time to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data, to withdraw any consent you have given, and, under certain circumstances, to request the restriction of processing. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

The responsible for data processing on this website is:

Manuela Orlamünder
Langesche Wiese 39
59557 Lippstadt

Tel.: +49 151 29000193
E-Mail: info@mo-coaching.de
Website: mo-coaching.de

2. General Information on Data Processing

As a matter of principle, we only process our users’ personal data to the extent necessary to provide a functional website together with our content and services. Processing is regularly carried out only with the user’s consent or where a legal basis permits the processing.

Legal Bases

The processing of personal data is based on the following legal bases under the GDPR:

  • 6(1)(a) GDPR – consent of the data subject
  • 6(1)(b) GDPR – performance of a contract or pre-contractual measures
  • 6(1)(c) GDPR – compliance with a legal obligation
  • 6(1)(f) GDPR – protection of legitimate interests

Recipients of Personal Data

In the course of our business activities, we work with various external parties. This sometimes also requires the transfer of personal data to these external parties. We only pass on personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so (e.g. disclosure of data to tax authorities), where we have a legitimate interest in the transfer under Art. 6(1)(f) GDPR, or where some other legal basis permits the data transfer. When using processors, we only pass on our customers’ personal data on the basis of a valid data processing agreement.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by the withdrawal

3. Hosting

We host the content of our website with the following provider:

All-Inkl

The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter All-Inkl). For details, please refer to All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/

The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Data processing agreement: We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

4. Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website.

5. Cookies and Consent Management

Our website uses cookies. Cookies are small text files that are stored on your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR or Section 25(2) TDDDG. All other cookies (e.g. for analysis or the integration of external services) are only set with your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future.

Borlabs Cookie

Our website uses the consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies, and to document this in a data protection-compliant manner. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter “Borlabs”).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the withdrawal of these consents are stored. This data is not passed on to the provider of Borlabs Cookie. The collected data is stored until you ask us to delete it, delete the Borlabs cookie yourself, or the purpose for storing the data ceases to apply. Mandatory statutory retention periods remain unaffected.

Borlabs Cookie is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

6. Contact

Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR, provided your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested.

Enquiry by Email or Telephone

If you contact us by email or telephone, your enquiry, including all resulting personal data, will be stored and processed by us for the purpose of handling your request. We store this data until the purpose of storage ceases to apply, you ask us to delete it, or a statutory retention period ends.

Communication via WhatsApp

For communication with our customers and other third parties, we use, among other things, the instant messaging service WhatsApp in the “WhatsApp Business” variant. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or any other third party from gaining access to the content of the communication. However, WhatsApp receives access to metadata generated in the course of the communication process (e.g. sender, recipient, and time). We also point out that WhatsApp, by its own account, shares its users’ personal data with its US-based parent company Meta. Further details on data processing can be found in WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in communicating with customers, prospects, and other business and contractual partners as quickly and effectively as possible (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, data processing is carried out exclusively on the basis of consent; this can be withdrawn at any time with effect for the future.

The company holds a certification under the “EU-US Data Privacy Framework” (DPF). The data transfer to the USA is additionally based on the standard contractual clauses of the EU Commission (https://www.whatsapp.com/legal/business-data-transfer-addendum). We have configured our WhatsApp accounts so that no automatic data synchronisation with the address book on the smartphones in use takes place. A data processing agreement (DPA) has been concluded with the provider.

7. Appointment Booking / Online Scheduling (Cal.com)

On our website, you have the option of arranging appointments for an initial consultation or a coaching session. For appointment booking, we use the tool Cal.com. The provider is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA (hereinafter “Cal.com”).

For the purpose of booking an appointment, you enter the requested data and your preferred appointment into the form provided (e.g. name, email address, preferred appointment, and possibly other details). The data entered is used for planning, conducting, and, where applicable, following up on the appointment, and is stored on Cal.com’s servers. Cal.com’s privacy policy can be found at: https://cal.com/privacy.

Access to the booking page is provided on our website via a link or button that takes you to the booking page hosted by Cal.com. Data processing by Cal.com therefore only takes place once you access this booking page and actively enter data there.

The legal basis for the processing is Art. 6(1)(b) GDPR (performance of pre-contractual measures or performance of a contract) as well as our legitimate interest in the most straightforward possible scheduling of appointments with prospects and customers (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. A data processing agreement (DPA) has been concluded with the provider.

8. Audio and Video Conferencing

Microsoft Teams

For communication with our customers, we use, among other things, the online conferencing tool Microsoft Teams. If you communicate with us via video or audio conference, your personal data will be collected and processed by us and by the provider of the conferencing tool. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The conferencing tool collects the data you provide in order to use it (e.g. email address and/or telephone number), as well as metadata about the communication process (duration, start and end, number of participants) and technical data for handling the online communication (e.g. IP addresses, device IDs, information about camera, microphone, and speakers). Insofar as content (e.g. recordings, chat messages, files) is shared, this is also stored on the provider’s servers.

The use is for communication with prospective or existing contractual partners (Art. 6(1)(b) GDPR) as well as on the basis of our legitimate interest in simplified and accelerated communication (Art. 6(1)(f) GDPR). Where consent has been requested, use is based on this consent; it can be withdrawn at any time. Details on data processing can be found in Microsoft’s privacy policy: https://privacy.microsoft.com/en-us/privacystatement. A data processing agreement (Microsoft Data Protection Addendum) has been concluded with Microsoft as part of the Microsoft 365 usage.

Cal Video

Alternatively, we conduct video conversations via the video function integrated into our scheduling tool Cal.com (“Cal Video”). The video conversations are technically provided via the service Daily.co (provider: Pluot, Inc. / Daily.co, USA). In doing so, the data required to conduct the video conference is processed, in particular audio and video data, connection and metadata (e.g. IP address, device and browser information, start and duration of the conversation).

The use is for communication with prospective or existing contractual partners (Art. 6(1)(b) GDPR) as well as on the basis of our legitimate interest in conducting online conversations without complications (Art. 6(1)(f) GDPR). Where consent has been requested, use is based on this consent; it can be withdrawn at any time. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Further information can be found in Cal.com’s privacy policy (https://cal.com/privacy).

9. Fonts (Google Fonts, locally hosted)

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally on our server and are delivered from there. No connection to Google’s servers takes place in the process; no personal data (in particular no IP address) is transmitted to Google.

The use of locally hosted fonts is in the interest of a uniform and appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

10. Web Analytics (Matomo)

This website uses the open-source web analytics service Matomo. With the help of Matomo, we are able to collect and analyse data on the use of our website by website visitors. This enables us to find out, among other things, when which page views took place and from which region they originate. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used).

The use of this analytics tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device within the meaning of the TDDDG. Consent can be withdrawn at any time.

IP anonymisation: When analysing with Matomo, we use IP anonymisation. Your IP address is shortened before the analysis, so that it can no longer be clearly attributed to you.

Hosting: We host Matomo exclusively on our own servers, so that all analytics data remains with us and is not passed on.

11. Our Social Media Presence (LinkedIn)

We maintain a publicly accessible profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

By visiting our LinkedIn presence, the operator can analyse your user behaviour and create user profiles. If you are logged into your LinkedIn account, LinkedIn can attribute the visit to your user account. The legal basis for our presence is our legitimate interest in a comprehensive presence on the internet (Art. 6(1)(f) GDPR). The analysis processes initiated by LinkedIn may be based on different legal bases, which are to be specified by LinkedIn.

If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. The data transfer to the USA is based on the standard contractual clauses of the EU Commission; LinkedIn is also certified under the EU-US Data Privacy Framework. Details on how your personal data is handled can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

12. Storage Period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing ceases to apply. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law).

13. Your Rights as a Data Subject

You have the right at any time:

  • to request information about your personal data stored by us (Art. 15 GDPR)
  • to request the rectification of inaccurate data (Art. 16 GDPR)
  • to request the erasure of your data (Art. 17 GDPR)
  • to request the restriction of processing (Art. 18 GDPR)
  • to object to the processing (Art. 21 GDPR)
  • to request data portability (Art. 20 GDPR)
  • to withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR)

For this and for any further questions on the subject of data protection, you can contact us at any time (contact details see section 1).

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).

Objection to Advertising Emails

The use of contact data published within the scope of the legal notice obligation for the purpose of sending unsolicited advertising and information material is hereby objected to. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.

14. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.