This Privacy Policy informs you about how your personal data is collected, used, and protected when you visit my website or work with me. I value clarity, respect, and self-responsibility. Your data is treated with great care and in alignment with GDPR.

1. Controller

Verena Herberth – Atem • Bewusstsein • Sinne
Am Sohl 13
97753 Karlstadt
Germany

Email: hallo@verenaherberth.com
Phone: +49 163 1648397
Tax Number: 232/230/24238

2. General Information

I collect and process personal data only to the extent necessary, transparent, and in accordance with:

• GDPR (General Data Protection Regulation)
• German Federal Data Protection Act (BDSG)
• German Telemedia Act (TMG)

Your data is never sold, rented, or shared for purposes unrelated to my work.

3. Data That I Process

Depending on how you interact with my website or offerings, the following categories of data may be processed:

When you visit my website

• IP address
• device, browser & technical data
• pages visited, time stamps, cookies

When you contact me

• name
• email address
• phone number (optional)
• your message

When you book a session or program

• contact details
• appointment data
• billing details
• payment information (via Stripe, not visible to me)

When you join my newsletter

• name (optional)
• email address
• tracking data (open rates/clicks via ConvertKit)

When you fill out a questionnaire

• responses in Google Forms
• mentoring-related information you choose to share

When you participate in online sessions

• data processed via Zoom

4. Legal Bases for Processing

Data is processed based on:

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps
• Art. 6(1)(a) GDPR – your consent
• Art. 6(1)(f) GDPR – legitimate interest (e.g., secure website, analytics)

5. Hosting: All-Inkl.com

My website is hosted by:
ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany

All data you enter on my website may be stored on servers in Germany.

A Data Processing Agreement (DPA) is in place.

6. WordPress

My website runs on WordPress.
WordPress may use cookies and process usage data to ensure website functionality and security.

7. Google Analytics

I use Google Analytics to understand how visitors use my website.

Collected data includes:

• IP address (anonymized)
• device & browser information
• activities on the website

Google Analytics uses cookies.
Processing may involve servers in the USA, protected by Standard Contractual Clauses (SCCs).
Legal basis: Art. 6(1)(a) GDPR – consent via cookie banner.

8. Payment Processing: Stripe

For program purchases, I use Stripe.
Stripe processes:

• name
• email
• billing address
• payment details
• transaction data

I do not have access to your full payment information.

Legal basis: Art. 6(1)(b) GDPR.

More information: https://stripe.com/privacy

9. Online Courses: Stan Store

Stan processes:

• email
• course access
• content interactions
• payment information (via Stripe)

A Data Processing Agreement (DPA) is in place.

10. Scheduling Tools

10.1 Calendly

For booking appointments, I use Calendly.
Calendly processes:

• your name
• email
• chosen date/time
• optional notes

Legal basis: Art. 6(1)(b) GDPR.

10.2 Google Calendar

If you book a session, your appointment details may be placed into Google Calendar.

Processed data:

• your name
• appointment time
• optional notes
• email reminder

Google processes data partly in the USA under SCCs.

Legal basis: Art. 6(1)(b) GDPR.

11. Questionnaires: Google Forms

Before or during our work together, you may fill out Google Forms.
Google Forms may process:

• your answers
• name/email (if entered)
• metadata such as time stamps

Data may be stored on servers in the USA under SCCs.
Your responses are voluntary.

Legal basis: Art. 6(1)(a) GDPR – consent.

12. Newsletter: ConvertKit

To send newsletters and updates, I use ConvertKit.

ConvertKit processes:

• name (optional)
• email address
• newsletter engagement data

You can unsubscribe at any time.
Legal basis: Art. 6(1)(a) GDPR – your consent.

13. Online Sessions: Zoom

I use Zoom for online mentoring sessions, group calls, workshops, and community offerings.

Zoom processes:

• your name or display name
• email address
• IP address
• device & technical data
• video/audio/chat content (if you choose to share it)

Recordings

I do not record sessions unless:

• you are informed in advance, and
• you provide explicit written consent

Data Transfer

Zoom may transfer data to the USA under SCCs.

Legal basis:

• Art. 6(1)(b) – performance of contract
• Art. 6(1)(f) – secure digital communication

Zoom privacy policy: https://zoom.us/privacy

14. Cookies

I use essential and analytical cookies.

You can adjust your preferences via your browser or cookie banner.

15. Data Retention

I store personal data only for as long as necessary:

• business emails: 6 years
• invoices & tax data: 10 years
• mentorship notes: deleted after collaboration ends
• newsletter data: until you unsubscribe

16. Your Rights (Art. 12–23 GDPR)

You have the right to:

• access your data
• correct inaccurate data
• request deletion
• restrict processing
• withdraw consent at any time
• data portability
• object to processing

You also have the right to file a complaint with your data protection authority.

17. Disclaimer & Liability Waiver

By working with me, you acknowledge that:

• I do not diagnose illnesses or medical conditions
• I do not offer medical advice or treatments
• My work supports emotional, somatic, and personal development – not medical care
• You must inform me about physical limitations or relevant health conditions
• You are not under the influence of drugs, alcohol, or psychoactive substances

Participation is at your own responsibility and risk.
Liability is excluded to the extent legally permitted.

18. Updates to this Policy

This Privacy Policy may be adjusted when necessary.
The current version will always be available on my website.