Privacy policy

1. Data protection at a glance

General notes

The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can personally identify you.

You will find detailed information in the following sections of this privacy policy.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by Vinayaki-Yoga & Coaching GbR and by Anne Böhme as a freelance yoga teacher (“Vinayaki-Yoga”) – acting as joint controllers for the shared website. You will find the contact details in the section “Responsible parties”.

How do we collect your data?

On the one hand, we collect your data when you share it with us – for example by filling in a contact, registration or withdrawal form, or by contacting us by email or phone.

On the other hand, technical data is transmitted when you open our website – data that is needed to show you the pages at all, such as your IP address and details about your browser. We process this data solely to deliver the page and do not store it in log files. More on this in the section “Hosting and technical operation”.

What do we use your data for?

We process data in particular to provide the website securely, stably and free of errors, to handle your enquiries, to process registrations for events and courses and – only with your consent – to statistically evaluate how our offering is used.

What rights do you have regarding your data?

You have the right to receive information free of charge about the origin, recipients and purpose of your stored personal data at any time. You also have a right to correction or deletion of this data. If you have given consent, you can revoke it at any time with effect for the future.

Under the statutory conditions you also have the right to request that the processing of your personal data be restricted, to object to the processing and to request that your data be handed over in a common, machine-readable format.

You can contact us at any time about this and about any other questions on data protection. You also have the right to lodge a complaint with a data protection supervisory authority.

2. Responsible parties

The parties responsible for data processing on this website are:

For the website, the shared customer base, the forms and the future newsletter, Vinayaki-Yoga & Coaching GbR and Anne Böhme (freelance yoga teacher, “Vinayaki-Yoga”) are joint controllers within the meaning of Art. 26 GDPR. In an agreement we have determined that Vinayaki-Yoga & Coaching GbR takes the lead in fulfilling the information duties and that enquiries are coordinated centrally via datenschutz@vinayaki-yoga-und-coaching.com. Independently of this, you can assert your rights under the GDPR against either of the two controllers. Each provider is solely responsible for its own contract and invoice management.

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. General notes and mandatory information

Data protection

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Please note that data transmission on the internet – for example when communicating by email – can have security gaps. Completely protecting data against access by third parties is not possible.

Storage period

Unless a specific storage period is stated in this privacy policy, we store personal data only for as long as is necessary for the respective purpose.

If you assert a justified request for deletion or revoke consent, we delete your data unless other legally permissible reasons for continued storage exist. These can include statutory retention periods in particular, or the necessity to establish, exercise or defend legal claims.

Legal bases of processing

Where you have consented to processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where the consent covers access to information on your device or the storage of such information, this is additionally based on Section 25(1) TDDDG.

Where processing is necessary to fulfil a contract or to carry out pre-contractual measures, it is based on Art. 6(1)(b) GDPR.

Where processing is necessary to fulfil a legal obligation, it is based on Art. 6(1)(c) GDPR.

Where processing is necessary to protect our legitimate interests or the legitimate interests of third parties, and no overriding interests, fundamental rights or fundamental freedoms of the data subject stand against it, it is based on Art. 6(1)(f) GDPR.

Recipients of personal data

We use service providers for individual technical and organisational services. Where necessary, they process personal data exclusively according to our instructions and on the basis of data processing agreements pursuant to Art. 28 GDPR.

Personal data is only passed on if this is necessary for fulfilling a contract, if a legal obligation exists, if there is a legitimate interest or if another legal basis permits the transfer.

Revoking your consent

You can revoke consent you have given at any time with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected.

Right to object under Art. 21 GDPR

Right to complain to the supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. Responsible is in particular the supervisory authority of the federal state of your habitual residence, your workplace or the place of the alleged breach.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the address bar of your browser starting with “https://” and by the padlock symbol.

4. Hosting and technical operation

This website is operated on technical infrastructure of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany.

The technical operation of the website is handled by VYC Sahitya IT-Solutions GbR as a processor, exclusively according to our instructions and on the basis of a data processing agreement pursuant to Art. 28 GDPR. VYC Sahitya IT-Solutions GbR does not process personal data for its own purposes.

netcup GmbH provides the server and hosting infrastructure and processes personal data as a sub-processor within the scope of the hosting services.

No access logs

We do not keep access logs of visits to this website. Your IP address is technically required so that the pages can reach you at all, and is only processed transiently in doing so – we do not store it.

The system logs of our application record technical events only, such as start-up and error messages and blocked spam attempts. They contain no IP addresses and no information about who opened which page.

Hoster logs

As part of operating the servers, netcup GmbH logs connection data at infrastructure level, in particular to detect and defend against attacks and to ensure stable operation. According to netcup's documentation, log files containing personal data are retained for a maximum of 14 days and then deleted; this also applies to log data collected automatically in attack scenarios.

The purpose of this processing is the security and stability of the infrastructure; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). The processing takes place on the basis of a data processing agreement.

5. Domains and email communication

For managing our domain names, providing email mailboxes and sending email notifications from our forms we use ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

In particular, email addresses, communication content, metadata of the email communication and technical connection data can be processed.

The processing is carried out to handle your enquiry, to carry out pre-contractual measures or to fulfil a contract on the basis of Art. 6(1)(b) GDPR. Where there is no contract initiation or fulfilment, the processing is based on our legitimate interest in reliable business communication pursuant to Art. 6(1)(f) GDPR.

Domains and mailboxes are provided via VYC Sahitya IT-Solutions GbR, which acts as a processor on our behalf. In this context ALL-INKL.COM processes personal data as a sub-processor within the scope of these services. The processing takes place on the basis of data processing agreements pursuant to Art. 28 GDPR.

6. Cookie and privacy settings

Our website uses no third-party cookies and no tracking cookies.

We use only the technically required storage listed below. It serves to provide you with the functions you request and stores no information for advertising or cross-site tracking.

Cookie

• Name: NEXT_LOCALE
• Purpose: stores the language you selected
• Storage period: browser session; the cookie is deleted when the browser is closed

Local storage

• Name: vyc-sahitya-consent
• Purpose: stores your decision on the optional privacy settings for analytics, maps and convenience
• Storage period: until you delete the entry in your browser. You can change your decision itself at any time via the privacy settings; the entry is overwritten in the process.

• Name: vyc-sahitya-theme
• Purpose: stores the display mode you selected, including the accessibility settings
• Storage period: until you delete the entry in your browser

• Names: vyc-werkzeug-rad, vyc-werkzeug-checkin and vyc-werkzeug-checkin-verlauf
• Purpose: stores your answers in the exercises “Rad des Lebens” and “Achtsamkeit”, only if you switch on “Remember my answers in this browser” in the exercise (details in section 12)
• Storage period: until you switch remembering off, delete your entries in the exercise or delete the entries in your browser

The processing and storage of this technically required information is based on Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website in a user-friendly, low-barrier and technically functional way.

Convenience features of the search

If you activate the optional “Convenience” setting, the search of this website and the search in the wiki store three further entries in your browser's local storage. Both use the same three entries.

• Name: vyc-wiki-suchen
• Purpose: stores your latest search terms
• Storage period: until you clear the history in the search or delete the entry in your browser

• Name: vyc-wiki-verlauf
• Purpose: stores the content you last opened
• Storage period: until you clear the history in the search or delete the entry in your browser

• Name: vyc-wiki-suchopt
• Purpose: stores the search options and search parameters you selected
• Storage period: until you delete the entry in your browser

These three entries are convenience and are not required in order to use the website; the search works fully without them. Their storage therefore takes place solely on the basis of your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. If you withdraw your consent, the three entries are deleted.

Privacy settings

On your first visit to our website the optional settings “Analytics”, “Maps” and “Convenience” are deactivated. They are only activated if you consent via our privacy settings.

Your decision is stored locally in your browser. You can change or revoke your consent at any time with effect for the future via the link “Cookie- und Datenschutzeinstellungen” in the footer of our website. The lawfulness of the processing carried out until the revocation remains unaffected.

7. Contact, forms and registrations

Contact form, event registration and withdrawal form

When you write to us via a contact form, register for an event or use our withdrawal form, we process the data you enter in order to handle your request.

Depending on the form, this can include in particular your name, email address, phone number, your message or note, details of the desired event or course booking, your preferred payment method, and any further information you share with us voluntarily.

The processing is based on Art. 6(1)(b) GDPR where your enquiry or registration relates to fulfilling a contract or carrying out pre-contractual measures. In all other cases it is based on our legitimate interest in effectively handling the enquiries addressed to us pursuant to Art. 6(1)(f) GDPR. We additionally process a withdrawal declaration to fulfil our legal obligations pursuant to Art. 6(1)(c) GDPR.

Your form entries are transmitted by email to the responsible functional mailbox: contact enquiries to our contact mailbox, event enquiries to our event mailbox and withdrawal declarations to a separate withdrawal mailbox set up for that purpose. Mails are sent via a technical sender address of our own domain.

After sending a form you also receive an automatic acknowledgement of receipt at the email address you provided. It contains a summary of the details you submitted – for a withdrawal declaration additionally the date, time and case number of receipt. An acknowledgement of receipt only documents receipt; it is not a substantive confirmation of booking or effectiveness.

We do not store the contents of contact enquiries in a database of this website; they are transmitted exclusively by email and processed in the mailbox named above. Event registrations, however, are additionally stored in a database of this website: first name, surname, email address, telephone number, remarks, the chosen payment method and the time of receipt. With them we keep the list of registered people for each event, allocate the places and answer queries (Art. 6(1)(b) GDPR). For each registration we also record its status (such as received, on the waiting list, confirmed, declined or cancelled, and after the event also attended), the reason for a decline or cancellation, the language in which you registered, which emails we sent you about your registration and when we were otherwise in contact with you, for example by phone, with a short note. When the status of your registration changes, we send you an email about it, such as the confirmation of your place, information about the waiting list, a decline or a cancellation confirmation. If we write one of these emails ourselves or adapt its text for you, for example when we cancel your registration, we store that text with your registration, so that we can send you the email again if needed. We encrypt your details and our notes before they are stored; the key is not kept in the database. Withdrawal declarations are likewise stored in a database of this website: the declaration itself, the case number, the time of receipt and a log of the transmission attempts. This storage serves the legally required proof of receipt of your withdrawal declaration (Art. 6(1)(c) GDPR), protects your declaration against loss during technical failures and ensures that an accidentally re-sent declaration is not processed twice.

A registration for an event with a limited number of places additionally leaves a technical comparison value in a database of this website: a hash we form with a secret key from the identifier of the event and your email address. We do not store the address itself for this, and without the key it cannot be recovered from that value; with the key, however, one can check whether a given address has registered, so the value is not anonymous. It serves to recognise a second registration from the same address for the same event, so that it is not processed twice, and to keep the number of remaining places up to date. The basis is our legitimate interest in an orderly allocation of places pursuant to Art. 6(1)(f) GDPR.

Different deletion periods apply depending on the form: we delete contact enquiries once processing is complete, at the latest six months after the last correspondence. We delete event registrations, together with their status, the reasons and our contact notes, in the database as in the mailbox, at the latest three months after the event; we delete the technical comparison value used to recognise duplicate registrations at the latest 30 days after the event, or, for a registration we only record after the event, 30 days after we record it. Statutory tax and commercial retention obligations for booking and payment records remain unaffected. Withdrawal declarations and the associated transmission log are retained for six years from the end of the calendar year of receipt, as proof of receipt and due to statutory retention obligations for business correspondence.

Joining our customer base

When you register for an event, you can additionally consent to Anne Böhme (freelance yoga teacher, “Vinayaki-Yoga”) and Vinayaki-Yoga & Coaching GbR keeping you in their shared customer base beyond the event (see section 2). The box for this is marked as optional and not preselected; your registration counts without it. We create a profile from a registration only with this consent. If you are already in our records, we assume no consent you have not given, and an empty box at a later registration does not withdraw an earlier one. If you tick it again, we record the new consent in your profile.

With your consent we store in your profile your name, your email address, your phone number if you give it, the language of your registration and organisational notes about your appointments, for example about how you are travelling. Diagnoses, health details and confidential coaching content do not belong in these notes. We keep no date of birth, address or interests in such a profile. As proof we also record when and how you gave your consent and which version of the text applied; if you consented on a form, it is kept in the profile. We assign your registrations to your profile; we delete the registrations themselves, like every registration, at the latest three months after the event. Of an event you attended, only its date then remains in the profile, so that we can calculate the period below. Everything that names or describes you we store encrypted in a database of this website.

We use these details to recognise you at later registrations and bookings and to reach you about your appointments. We do not use them for advertising. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. If you register by phone or in person, you can also give your consent verbally: we then read the same text to you or explain it, and record when you expressly consented, which version of the text applied and which of us took it down.

You can withdraw your consent at any time with effect for the future, for example by email to datenschutz@vinayaki-yoga-und-coaching.com, by phone or in person. If you have no subscription, no trial or single class and no booked appointment with us, we then delete your profile at once and for good, together with the proof of your consent. If such a contract exists, your profile stays for it (see “Classes, subscriptions and bookings”): we note the withdrawal with its date beside your consent and no longer assign new registrations to you automatically. Without a withdrawal, we delete a profile based solely on your consent 24 months after your last attended appointment, for example the last event you took part in; if you have not attended an appointment yet, 24 months after your most recent consent. Registrations you cancel or do not attend do not extend this period. The lawfulness of the processing until a withdrawal remains unaffected.

If you are already in our customer base, we assign a new registration to your profile automatically when exactly one profile carries the same email address and the same name. If only one of the two matches or several profiles could fit, we check the assignment by hand; a shared email address alone is not enough. For this comparison and for searching in our administration we form technical search values from the email address, the phone number and the name, including the beginnings of the name's parts, with a secret key. Without the key the details cannot be recovered from them; with it they can be linked to a person, so we treat them like the details themselves. They belong to the registration or profile they were formed from and are deleted with it. The legal basis of the assignment is, for a profile based on your consent, that consent; for a profile with a contract, Art. 6(1)(b) GDPR where the assignment concerns the contract, and otherwise our legitimate interest in a complete and correct customer base (Art. 6(1)(f) GDPR).

Classes, subscriptions and bookings

If you book a subscription, a trial or single class, or an appointment for a singing bowl massage, reiki or coaching with us, we keep a profile for it in our shared customer base (see section 2); we need no consent for this. For a subscription we store the class package with its price, the classes and dates, your attendance at each date, a renewal, an early end or a cancellation with its reason, and your payments; for a trial or single class the offer, the class and the date. If someone attends a date in your place, we note that person's name. For an appointment for a singing bowl massage, reiki or coaching we store the service with its price, date, time, duration and place, for an appointment at your home the address for it, a cancellation with its reason, liquidated damages under our terms and your payments. Everything that names or describes you, and our agreements, remarks and freely worded reasons, we store encrypted in a database of this website. The legal basis is the performance of the contract with you (Art. 6(1)(b) GDPR).

Once your last appointment with us lies 24 months back, we remove everything that names or describes you from your profile, that is your name, contact details, address, date of birth, our notes and your documents, and the freely worded details from your subscriptions and bookings. A subscription, class or appointment we created by mistake we delete while no attendance and no payment is attached to it; after 30 days in the trash it is deleted for good.

Records we are required to keep

We keep booking and payment records for as long as tax and commercial law requires (Art. 6(1)(c) GDPR). What remains of them once your name and contact details are removed, that is numbers, dates, services, amounts and payments, carries no name but is not anonymous: through invoices and payment records it can still be linked to a person. Neither the deletion of your profile nor the withdrawal of your consent affects these records.

Spam protection and abuse prevention

To protect our forms against automated access and abuse we use a self-hosted ALTCHA captcha. No data is transmitted to an external captcha provider and no cookies are set.

In addition, your IP address is processed transiently only, as a rate-limit key, to limit repeated or abusive form requests. It is not stored permanently and not logged for this.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and communication channels against spam, abuse and technical attacks.

Enquiries by email or phone

If you contact us by email or phone, we process your enquiry including all personal data arising from it – such as name, contact details and the content of the enquiry – in order to handle your request. If you register for an event by phone, by email or in person, we enter you in the same list of registered people as a registration through the form: your name, the day of registration and, if you give them to us, your email address, your phone number and a remark. We store these details encrypted in the same way; for an event with a limited number of places they take a place (with the technical comparison value described above), and they are deleted after the same periods. If you have given us an email address, we send you the emails about your registration described above. The legal basis is Art. 6(1)(b) GDPR.

Where necessary, the processing is based on Art. 6(1)(b) GDPR for carrying out pre-contractual measures or fulfilling a contract. Otherwise it is based on Art. 6(1)(f) GDPR, on our legitimate interest in reliable communication with the people interested in our offerings.

8. Web analytics with Umami

We use the self-hosted web analytics software Umami to statistically evaluate the use of our website and improve our offering.

Umami runs on our own technical infrastructure. No analytics data is transmitted to external analytics providers. Umami sets no cookies.

Umami is only activated if you have consented to the “Analytics” setting via the privacy settings. Without your consent the analytics script is not loaded. The processing is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Within the web analytics, in particular the page visited, the time of the page view, the referrer information, device type, browser, operating system and screen size are processed.

In addition, we record individual events that show how our pages are used: the submission of our forms, saving a date to a calendar, printing a price list or a wiki article, recommending an event to someone, opening our search, playing a song or music video on our pages and copying the song link, clicks on phone, email, registration, price, voucher and coaching links, and on links to YouTube and into our app. For the exercises on the topic pages, we record that an exercise was started, completed or evaluated, that an example was viewed, that a result was saved as a PDF, that remembering the answers was switched on, or that a result was set aside for an enquiry or sent with one. We store only the name of the event and, where it is needed for the analysis, a neutral identifier of the course, date, price list, wiki article, song, exercise or price overview concerned and of the place the click came from, and for the “Rad des Lebens” whether it is filled in alone or as a couple. Content you enter into our forms, such as your name, your email address or your message, and your answers in the exercises are not transmitted.

Your IP address is not stored in the process. It is combined with a random value that changes daily into a session identifier and used for a location lookup that runs entirely on our own server. Only its results are stored: country, region and city. This does not allow us to link the data to you as a person; the data is pseudonymous.

For a randomly selected share of visits, Umami also creates heatmaps and a recording of the visit. For the heatmaps we record where on a page someone clicked and how far they scrolled, each with the address of the page and the size of the window and the page. The recording captures how the page looked and changed during the visit, including mouse movements, clicks and scrolling, and ends after five minutes at the latest. Both belong to the “Analytics” setting and only run with your consent.

What you type into input fields is not recorded; the recording shows only placeholder characters in its place. Our forms, their confirmations and your search history are hidden entirely: in the recording they appear as an empty area, and only where someone clicked inside it remains visible, not what. On the pages of the journey “Zurück zu mir”, with its exercises and the survey, we create neither heatmaps nor recordings (section 12).

Analytics data, including heatmaps and recordings, is deleted after 13 months.

You can revoke your consent at any time with effect for the future via the link “Cookie- und Datenschutzeinstellungen” in the footer of this website. The lawfulness of the processing carried out until the revocation remains unaffected.

9. OpenStreetMap

On the contact page and on event detail pages we may use map material from OpenStreetMap.

The map is only loaded if you actively request it via the respective map function or have activated the “Maps” setting in the privacy settings.

When the map is loaded, a connection to servers of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, is established. In particular, your IP address is transmitted to the OpenStreetMap Foundation.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can revoke your consent at any time via the cookie and privacy settings.

An adequacy decision of the European Commission exists for the United Kingdom.

10. Locally provided content

Fonts

For a uniform appearance we use the fonts Libre Baskerville, Playball and Atkinson Hyperlegible. These fonts are provided entirely by our own website.

When you open the website, no connection to servers of Google or other external font providers is established.

Videos

The videos on the start page and the music videos on the “Zurück zu mir” page are delivered as local files from our own website. No transmission to external video platforms takes place during playback.

11. Social media and external links

Our website contains links to our profiles on Instagram, Facebook and YouTube, links to individual videos on our YouTube channel, buttons for sharing content via Facebook, WhatsApp or email, a link for adding events to a calendar, and individual links to external offerings, such as course registration with the adult education centre (Volkshochschule).

When you open our website, no content from these platforms is embedded and no data is transmitted automatically to these providers.

Only when you click an external link is a connection to the respective platform or service established. The respective provider is responsible for the data processing there. Please note the privacy information of the respective provider.

12. Exercises on the topic pages

On the topic pages of the journey “Zurück zu mir” we offer you exercises: the “Rad des Lebens” (wheel of life) and a mindfulness check-in. Your answers can concern personal areas of your life, including your health and wellbeing. That is why we describe here exactly what happens to them.

Filling in and evaluating

The exercises run in your browser. The evaluation and the snapshot are calculated from your answers and shown there. While you fill in and evaluate an exercise, your answers are transmitted neither to us nor to third parties. There are no heatmaps or recordings (section 8) on the pages of the journey.

Remembering answers in this browser

Only if you switch on “Remember my answers in this browser” in an exercise does your browser store your answers in your device's local storage, so that they are there again on your next visit. For the mindfulness check-in this includes a history of at most twelve earlier snapshots. Without this switch the exercise stores nothing; your answers last only while the page is open.

• vyc-werkzeug-rad: your ratings in the “Rad des Lebens” and the area you chose; when filled in as a couple, also the second person's ratings and the two names, if you entered any
• vyc-werkzeug-checkin: your answers in the mindfulness check-in
• vyc-werkzeug-checkin-verlauf: earlier snapshots with the date, your classification and the number of statements you answered “clearly” or “strongly”

These entries exist only on your device; we have no access to them. If you have consented to web analytics (section 8), we record only that remembering was switched on. You delete them by switching remembering off or by deleting your entries in the exercise, and at any time via your browser's settings. If several people use the same device and browser, they can see remembered answers. The storage on your device is based on Section 25(2) no. 2 TDDDG, because it is required for the function you expressly request with the switch.

Result as a PDF

The PDF you can download in an exercise is created in your browser and saved directly on your device. Your answers are not transmitted for this.

Sending results with a coaching enquiry

If you like, you can add results of the exercises to an enquiry through our contact form. With “Send to coaching”, your browser first only sets the result aside for the enquiry, in the session storage of this browser tab (entry vyc-anfrage-ergebnisse); it is deleted when you close the tab, send the enquiry or delete your entries in the exercise. In the contact form you see every result you added and can view and deselect each one. Nothing is transmitted until you send the form.

When you send the form, your browser transmits the answers of the exercises you added, not a file. Our server checks them, creates one PDF per exercise from them and sends it together with your enquiry by email to our contact mailbox; we do not store them in a database of this website. The automatic acknowledgement of receipt sent to you names only the results you added, not their content. If you have consented to web analytics (section 8), we also record that a result was set aside for an enquiry and sent with it, and from which exercise, never with which answers.

Your answers can contain information about your health, that is, special categories of personal data under Art. 9 GDPR. We therefore process them only with your express consent, which you give with a separate checkbox before sending (Art. 9(2)(a) and Art. 6(1)(a) GDPR), and only to handle your enquiry and prepare a coaching conversation. Your consent is voluntary. You can withdraw it at any time with effect for the future, for example by email to us; we then delete the results.

A “Rad des Lebens” you filled in as a couple also contains the second person's ratings and, where entered, their name. You can only add such a result if you confirm before sending that the second person agrees.

Recipients, mailbox and processing on our behalf are the same as for the contact form (sections 5 and 7). We delete the results together with your enquiry once processing is complete, at the latest six months after the last correspondence.

Survey on discussion circles

On the “Zurück zu mir” page we ask whether you would be interested in a discussion circle and when it would suit you. We store only your answer and its time, without an IP address, without a cookie and without any feature that links several answers to each other or to you. Your IP address is processed only transiently as a rate-limit key, as with our forms (section 7, on the basis of Art. 6(1)(f) GDPR). We delete the answers once the planning of the circles has been decided.

13. Currency and changes to this privacy policy

This privacy policy is dated October 2026.

We will adapt it whenever this becomes necessary due to changed data processing, new technical features or changed legal requirements.