PRIVACY POLICY | BEWUSST ERSCHAFFEN

(Information obligations pursuant to Art. 13 GDPR)

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Snježana Tjaden
Hypnosis Studio Bewusst Erschaffen
Fürstenwall 99
40217 Düsseldorf, Germany

Phone: +49 1515 094 23 76
E-Mail: snjezana.tjaden@bewusst-erschaffen.com

1. General Information

The protection of your personal data is very important to us.

Data processing is carried out exclusively in accordance with applicable data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG).

This website is accessible internationally. Data processing is based on European data protection law.

2. Collection and Processing of Personal Data

a) Contacting Us

When you contact us (e.g. by email or contact form), we process the following data:

  • Name
  • Email address
  • Telephone number (if provided)
  • Voluntary information (e.g. personal concerns)

Purpose: Processing your inquiry and communication

Legal basis: Art. 6 (1) (a) and (b) GDPR

The data will be deleted as soon as the purpose no longer applies and no statutory retention obligations exist.

Note:

Please do not transmit sensitive data (e.g. health-related information) via unencrypted channels. Such channels should only be used for initial contact.

b) Coaching and Hypnosis Services

Within the scope of our collaboration, we process:

  • Basic personal and contact data
  • Contract and billing data
  • Appointment and communication data
  • Voluntarily provided content
  • Where applicable, special categories of personal data (Art. 9 GDPR)

Purpose: Delivery of the agreed coaching and hypnosis services

Legal basis: Art. 6 (1) (b) GDPR, Art. 9 (2) (a) GDPR

Data processing is carried out exclusively on a voluntary basis within the scope of the cooperation.

3. External Service Providers and Technical Infrastructure

As part of our activities, we use various external service providers who may process personal data on our behalf or have technical access to it.

This is done exclusively in accordance with Article 28 GDPR and, where applicable, Article 6 GDPR.

Services used:

  • Google Workspace & Google Calendar – email communication & appointment scheduling
  • Zoom – online coaching and video conferencing
  • Brevo (Newsletter & SMTP) – newsletter distribution
  • STRATO AG – hosting & DNS
  • Vercel Inc. – hosting, deployment & CDN
  • Strapi – content management system
  • Traduora – management of multilingual content

Transfer to third countries:

A transfer of personal data to third countries (in particular the USA) cannot be excluded.

Such transfers are carried out exclusively on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR:

  • EU-U.S. Data Privacy Framework (where certified)
  • Standard Contractual Clauses (SCCs) of the European Commission

4. Newsletter

Provider: Brevo (Sendinblue SAS), 106 Boulevard Haussmann, 75008 Paris, France

Processed data: Name and email address

Purpose: Sending information and offers

Legal basis: Art. 6 (1) (a) GDPR

Double opt-in procedure is used. Consent can be withdrawn at any time.

5. Online Appointment Booking (Google Calendar)

For appointment scheduling, we use Google Calendar.

Processed data: Name, email address, and appointment details

A transfer of data to the USA cannot be excluded.

Legal basis: Art. 6 (1) (b) GDPR

6. Hosting and Server Log Files

This website is hosted by Vercel Inc. (USA).

When accessing the website, the following data is automatically processed:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL

Purpose: technical provision of the website and security

Legal basis: Art. 6 (1) (f) GDPR

7. Domain and DNS Infrastructure

The domain is managed by STRATO AG.

8. Data Retention Periods

  • Contact inquiries: until final processing is completed
  • Contract and billing data: 10 years (legal obligation)
  • Newsletter data: until consent is withdrawn
  • Communication data: purpose-bound

9. Cookies

This website does not use any proprietary cookies.

No tracking, analytics, or marketing cookies are used.

10. Data Subject Rights

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent (Art. 7 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

11. Data Security

We implement appropriate technical and organizational measures to protect personal data.

This website uses SSL/TLS encryption.

12. No Automated Decision-Making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

13. Contact for Data Protection Inquiries

snjezana.tjaden@bewusst-erschaffen.com

14. Status of this Privacy Policy

April 2026