Privacy Policy
Updated October, 2026

Overview

Based on Articles 12 to 14 GDPR (DSGVO) and § 25 TDDDG.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. Nora Engelbert
Am Kaltenborn 4
61462 Königstein
Germany
Email: nora@noraengelbert.de

2. General principles

We process personal data only where this is necessary to provide a functioning website and our content and services, or where you provide data to us voluntarily. Processing takes place only on a legal basis under Article 6 GDPR.

3. Provision of the website and server log files

When you visit this website, our hosting provider processes technically necessary data, such as IP address, date and time of access, the page accessed, the amount of data transferred and browser type. This processing is necessary to deliver the website securely and reliably (Art. 6 para. 1 lit. f GDPR). Hosting provider: [TO CONFIRM: name and location of hosting provider] Data processing agreement (Art. 28 GDPR): [TO CONFIRM] Log files are deleted automatically after [TO CONFIRM: retention period, e.g. 7 days].

4. Contact by email and contact form

If you contact us by email or through the contact form, we process the data you provide (e.g. name, email address, phone number and content of your message) to handle your request. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures or contract) or Art. 6 para. 1 lit. f GDPR (our legitimate interest in handling enquiries). The contact form is provided by: [TO CONFIRM: form service or plugin and provider] We delete your data once your request has been fully handled and no statutory retention obligations apply.

5. Introductory call and appointment booking

You can book an introductory call or other appointments via our website using Calendly, operated by Calendly LLC, USA. Calendly processes the data you provide (e.g. name, email address, selected appointment and topic information). The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or, where applicable, Art. 6 para. 1 lit. f GDPR. Calendly also processes data in the United States. The transfer is based on [TO CONFIRM: EU-U.S. Data Privacy Framework adequacy decision, if Calendly is certified, or Standard Contractual Clauses. Check current status.] [TO CONFIRM: Calendly link and whether the booking widget is embedded. Embedded widgets may set cookies. If so, add the widget to section 9 and to the consent banner.]

6. Online sessions and video calls

For remote sessions, coaching, workshops and meetings, we use video conferencing software. [TO CONFIRM: name of the tool(s) you use, e.g. Zoom, Microsoft Teams or Google Meet, and the provider.] We process the data necessary to run the meeting (e.g. name, email address, meeting content you share, and technical connection data). The legal basis is Art. 6 para. 1 lit. b GDPR (performance of the contract) or Art. 6 para. 1 lit. f GDPR. We do not record sessions unless all participants have given their prior consent. Recordings are used only for the agreed purpose and deleted once no longer needed. [TO CONFIRM: Data transfers to the provider's country (e.g. USA) and the safeguards used, as in section 5.]

7. Trusted partners and recipients

For larger engagements, we sometimes work with trusted partners. Where a partner needs personal data to deliver agreed services, we share only the data necessary for that purpose. Partners are bound by confidentiality and, where required, by a data processing agreement under Art. 28 GDPR. Cyprus is a member state of the European Union. Work carried out from Cyprus therefore does not constitute a transfer to a third country within the meaning of the GDPR.

8. AI-based tools

[TO CONFIRM: Include this section only if AI-based tools are used to process personal data in our work. Describe: which tools, for what purpose, whether client data is used to train any model (should be "no"), the provider's location and the legal basis. Otherwise delete the section.]

9. Cookies and similar technologies

This website uses only technically necessary cookies or similar technologies. These are required for the website to operate (§ 25 para. 2 no. 2 TDDDG, Art. 6 para. 1 lit. f GDPR). Consent is not required for these. [TO CONFIRM: No analytics, marketing or tracking tools are currently selected. Check whether external fonts (e.g. Google Fonts), videos or embeds are loaded. If Google Fonts are loaded from Google servers, either host them locally or add a section here.]

10. External services and embeds

[Include this section only if embedded. Podcast player (Podigee), YouTube videos or social media embeds: for each service, name the provider, purpose, legal basis, whether consent is obtained through a consent tool, and any transfer to third countries.]

11. Your rights

You have the following rights regarding your personal data: - Right of access (Art. 15 GDPR) - Right to rectification (Art. 16 GDPR) - Right to erasure (Art. 17 GDPR) - Right to restriction of processing (Art. 18 GDPR) - Right to data portability (Art. 20 GDPR) - Right to object to processing based on Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR) - Right to withdraw consent at any time with effect for the future (Art. 7 para. 3 GDPR) To exercise your rights, email us at nora@noraengelbert.de.

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit). [TO CONFIRM: postal address and website, e.g. https://datenschutz.hessen.de]

13. Dispute resolution

The Provider is neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board (§ 36 VSBG).

14. Final provisions

15.1 German law applies, excluding the UN Convention on Contracts for the International Sale of Goods (CISG). For consumers, mandatory consumer protection provisions of their place of habitual residence remain unaffected. 1
5.2 Where the Client is a merchant (Kaufmann), a legal person under public law or a special fund under public law, the place of jurisdiction is [TO CONFIRM: place of business of the Provider, e.g. Königstein im Taunus].
15.3 Changes and additions to these Terms must be in writing. This also applies to any waiver of this written-form requirement.
15.4 If any provision of these Terms is or becomes invalid, the remaining provisions remain in effect. The invalid provision shall be replaced by a valid provision that comes as close as possible to the economic purpose of the invalid one.
15.5 The contract language is English, unless agreed otherwise in writing. The English version of these Terms is binding, unless mandatory consumer protection law provides otherwise.