1. Controller
The controller responsible for processing personal data is:
Nicole Arzt
Coaching Place – Hypnosis | Hypnocoaching
Dorotheenstraße 56
10117 Berlin
Germany
Email:
This privacy policy explains how personal data is processed when you visit our website, contact us or use our services.
2. Visiting our website
When you visit our website, technically necessary data is processed. This includes your IP address, the pages requested, the time of access, browser and device information and, where transmitted, the previously visited page.
This processing serves to provide the website, resolve faults and protect against misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
We use Google Cloud EMEA Limited, Ireland, for hosting. Other companies within the provider’s group may be involved in delivering the service. Google provides information in its Cloud Data Processing Addendum.
Retention of access data is determined by its necessity for operation and security and for investigating faults and specific security incidents.
3. Cookies and consent
Our website uses cookies and similar technologies, for example to remember your privacy choices or analyse website use.
Storage on, or access to information on, your device that is strictly necessary is based on section 25(2), point 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG). Other storage or access generally requires your consent under section 25(1) TDDDG. Processing personal data also requires a legal basis under the GDPR.
Processing to manage and document your consent is based on Article 6(1)(c) GDPR.
You can change your choices and withdraw consent for the future through the website’s cookie settings. You can also delete cookies or restrict their storage through your browser.
4. Contact, appointments and services
When you contact us, arrange an appointment or book a service, we process the information required for that purpose. This includes your name, contact details, messages, appointment preferences and contractual and billing information.
Processing to deal with your enquiry and prepare, provide and administer our services is based on Article 6(1)(b) GDPR. General enquiries are processed on the basis of our legitimate interest in communicating with you under Article 6(1)(f) GDPR. Statutory retention obligations are based on Article 6(1)(c) GDPR.
We use services including IONOS for email communication. The message, address and connection data required for delivery is processed for this purpose.
When you use a form, we process the information you enter and, where applicable, technical data relating to transmission and protection against misuse. Fields marked as required are needed to process the relevant enquiry or service.
Coaching and related questionnaires may involve processing personal information about your concerns and goals. Where this includes health data and processing is based on consent, your explicit consent under Article 9(2)(a) GDPR is required. You receive additional information in connection with the relevant service.
5. WhatsApp
You may choose to contact us through WhatsApp, provided by WhatsApp Ireland Limited, Ireland.
We process your telephone number, any profile name and your messages to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for contractual enquiries and otherwise Article 6(1)(f) GDPR, based on our legitimate interest in communicating with you.
A standard WhatsApp link does not establish a connection to WhatsApp merely because you visit our website. When you open the link or use the service, WhatsApp processes data under its own terms. Data may also be processed outside the European Economic Area.
You can alternatively contact us by email or telephone. Further information is available in WhatsApp’s privacy policy.
6. Personalised Hypnoji Bot
Purpose and personal data
A personalised Hypnoji Bot provides supplementary AI support in connection with our hypnocoaching. We use OpenAI’s ChatGPT to provide this service. OpenAI Ireland Limited, Ireland, is responsible for users in the European Economic Area.
For personalisation, the information agreed with you is transferred to OpenAI and processed there. This may include your preferred form of address, personal goals and selected information about your concerns, habits and support needs. Depending on its content, this may include health data.
Personalisation is based on your consent under Article 6(1)(a) GDPR. Processing health data additionally requires your explicit consent under Article 9(2)(a) GDPR. Administration of the agreed service is based on Article 6(1)(b) GDPR.
Use is voluntary. Without the necessary consent, the corresponding personalised AI support cannot be provided.
Use and processing by OpenAI
You use the service through your own ChatGPT account. As the creator of the bot, Coaching Place cannot view your individual conversations. You decide what additional information to share during a conversation.
OpenAI processes your account and usage data and conversation content in accordance with its privacy policy and the applicable account settings. Your account’s data controls allow you to manage settings concerning the use of your content and your chat history.
When additional features such as web search are used, information required for those features may be sent to other providers. Additional details are provided in the accompanying privacy and usage information.
Please keep your access link confidential. Other people who obtain the link may also be able to access the bot.
Duration, withdrawal and deletion
The service is provided for the agreed period of use. You may withdraw your consent at any time for the future by emailing . This does not affect the lawfulness of processing before withdrawal.
When provision ends or following the relevant withdrawal of consent, the personalised bot created by Coaching Place is deleted. Contractual, billing and consent records that must be retained may be kept separately.
Deleting the bot does not automatically remove conversations from your own ChatGPT account. You manage these through your account. Further processing and deletion by OpenAI are governed by its privacy policy.
Data may also be processed outside the European Economic Area, particularly in the United States. Information about recipients, transfer mechanisms, retention and your rights is available in OpenAI’s European privacy policy.
7. Newsletter
Newsletter registration is available through our German-language website. If you subscribe, we process your email address, the other information provided in the registration form and information about registration and confirmation, which may include timestamps and IP addresses.
The newsletter is sent on the basis of your consent under Article 6(1)(a) GDPR. Registration uses a confirmation procedure. Documentation serves to demonstrate your consent and protect against unauthorised registrations.
We use MailPoet, part of the Automattic group, for the newsletter. Delivery information and, depending on the features used, opening and click information are also processed. Any individual-level measurement requiring consent is subject to the corresponding consent.
You can unsubscribe at any time using the unsubscribe link or by emailing . Necessary evidence and suppression records may be retained to document and respect your unsubscribe request.
Further information is available in Automattic’s privacy policy.
8. Reviews and testimonials
When you submit a review, we process the information in the review form, including the review text, star rating, display name, any location details and information needed to contact you and check the review. Your IP address and submission time may also be stored to prevent misuse.
The information designated for publication in the form is published. Your email address and any full name requested separately for verification are not published as part of the review.
Publication is based on your consent under Article 6(1)(a) GDPR. Necessary checks and prevention of misuse are based on our legitimate interest in authentic reviews under Article 6(1)(f) GDPR.
Published reviews are publicly accessible and may be indexed by search engines. For a correction, withdrawal of consent or deletion request, please contact .
9. Website analytics
Our website uses Google Analytics, provided by Google Ireland Limited, Ireland, to analyse page views and interactions. Usage, device and browser information may be processed for this purpose.
Google Analytics is controlled through our consent settings. The legal basis is Article 6(1)(a) GDPR. Storage on or access to your device requiring consent is subject to section 25(1) TDDDG.
You can withdraw your consent through the cookie settings. Information about Google’s processing and possible international transfers is available in Google’s privacy policy.
10. External content and protection against misuse
Our website incorporates services from external providers:
- YouTube to display videos;
- Google Maps to display maps;
- Google Fonts to display typefaces;
- Google reCAPTCHA to check form submissions;
- ProvenExpert to display external reviews.
When these resources load, your IP address, browser and device information and the page accessed may be transmitted to the provider. reCAPTCHA may additionally analyse interactions to identify automated submissions. If you are signed into an account with the provider, it may be able to associate the visit with that account.
Depending on how the content is embedded, a connection may be established when the page is opened or only after you activate the content.
Processing requiring consent is subject to Article 6(1)(a) GDPR and, for the relevant access to your device, section 25(1) TDDDG. Where processing is permitted without consent, it serves our legitimate interests in presenting and protecting our website under Article 6(1)(f) GDPR.
The provider of the Google services listed above is generally Google Ireland Limited, Ireland. ProvenExpert is provided by Expert Systems AG, Germany. Further information is available in Google’s privacy policy and ProvenExpert’s privacy policy.
11. Other recipients and data security
We use service providers for website operation, communication, backups and IT security. They may receive personal data insofar as necessary for their respective tasks.
In addition to the providers listed above, this includes Google for storing backups. Security checks may involve processing IP addresses and information about suspicious access.
Necessary processing for backups and system security is based on Article 6(1)(f) GDPR. Our legitimate interest is protection against data loss, unauthorised access and disruption.
Further disclosure may be necessary to fulfil legal obligations or establish, exercise or defend legal claims.
Our website uses HTTPS to encrypt transmission. Technical and organisational measures are used to protect personal data.
12. International transfers
Some providers may process data outside the European Economic Area.
Such transfers are subject to Articles 44 et seq. GDPR. Applicable mechanisms include a relevant European Commission adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses.
Further details are provided in the linked provider information. You can also request information about the safeguards applicable to our transfers by emailing .
13. Retention
Retention depends on the purpose of processing and the applicable legal requirements.
Relevant criteria include the time needed to deal with your enquiry, the duration and administration of an agreed service, consent, statutory retention obligations, necessary evidence and the resolution of legal claims or security incidents.
When the purpose no longer applies and there is no other legal basis for retention, the data must be deleted. Where statutory retention obligations apply, further use must be limited to the permitted purpose.
For data processed by external providers in their own capacity as controllers, their retention policies also apply.
14. Your rights
Subject to the statutory conditions, you have the right to access, rectification, erasure, restriction of processing and data portability under Articles 15 to 20 GDPR.
Withdrawal of consent: You may withdraw consent at any time for the future. This does not affect the lawfulness of processing before withdrawal.
Objection: Where processing is based on Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving reasons. This also applies to profiling related to direct marketing.
To exercise your rights, please contact .
You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.
Copyright
The texts, photographs, graphics and other content published on this website are protected by copyright or other intellectual property rights to the extent provided by law. The rights belong to the respective rights holders.
Uses that go beyond statutory permissions or an expressly granted licence require the prior consent of the relevant rights holder. This applies in particular to reproducing content on other websites or in your own publications. Uses permitted by law remain unaffected.
For enquiries about using our content, please contact .
