Privacy Policy

Legal Notice

This English translation is provided for convenience and informational purposes only.
Heartaq Coaching is a business established in Germany and subject to German law.
In the event of any discrepancies, inconsistencies or differences in interpretation between this English version and the original German version, the German version ("Datenschutzerklärung") shall prevail and shall be legally binding.

1. Data Controller

The data controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Heartaq Coaching
Owner: Leandri Meyer
Im Heimgarten 5
45149 Essen
Germany
Email: leandri.meyer@heartaqcoaching.com

2. General Information

Protecting your personal data is important to me. I process your personal data confidentially and in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection regulations.
This Privacy Policy explains what personal data is collected when you visit my website, why it is processed, and what rights you have regarding your personal data.

3. Website Hosting

This website is hosted by GoDaddy Operating Company, LLC.
When you visit this website, the hosting provider automatically processes certain information in server log files. This may include:
IP address
Date and time of access
Browser type and browser version
Operating system
Referring URL
Pages visited
Access status
Amount of data transferred
This information is processed solely to ensure the technical operation, security, and stability of the website.
Regular backups of the website are also created to ensure availability and enable data recovery in the event of technical issues.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).

4. Use of WordPress and Technical Plugins

This website is built using the WordPress content management system.
To ensure the technical operation, optimization, and maintenance of the website, the following plugins are currently used:
Divi Pixel
Rank Math SEO
Autoptimize
BackUpWordPress
Based on the current configuration, these plugins are used solely for the technical functionality, search engine optimization, performance optimization, and backup of the website. They do not independently process visitors' personal data.
Legal basis: Article 6(1)(f) GDPR.

5. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption.
This ensures that any confidential information you transmit through the website is encrypted during transmission.

6. Contact by Email

If you contact me by email, I will process the personal data you provide solely for the purpose of responding to your inquiry.
This may include:
Name
Email address
Content of your message
Any additional information you choose to provide
Legal basis:
Article 6(1)(b) GDPR (pre-contractual measures)
Article 6(1)(f) GDPR (legitimate interest in communication)
Your data will be deleted once it is no longer required for the respective purpose, unless statutory retention obligations apply.

7. Appointment Booking via Microsoft Bookings

To schedule discovery calls and coaching sessions, I use Microsoft Bookings.
The booking calendar is embedded into this website via an iframe.
When the booking page is loaded, a connection may be established to Microsoft servers. During this process, technical information such as your IP address, browser information, and other technically required data may be transmitted to Microsoft.
If you book an appointment, the personal data you enter (such as your name, email address, and appointment details) will also be processed.
Your data is processed solely for organizing and providing the agreed coaching session.
Legal basis: Article 6(1)(b) GDPR.
Further information can be found in Microsoft's Privacy Statement.

8. Online Coaching Sessions

Online coaching sessions are conducted using Microsoft Teams.
Only the personal data necessary to provide the coaching sessions will be processed.
Coaching sessions are not recorded.
Legal basis: Article 6(1)(b) GDPR.

9. Payment Processing

Payments are processed through Stripe.
If you purchase coaching services, Stripe processes the personal data necessary to complete the payment, including:
Name
Billing address
Payment information
Transaction details
Your data is processed solely for fulfilling the coaching agreement.
Legal basis: Article 6(1)(b) GDPR.
Further information is available in Stripe's Privacy Policy.

10. Invoicing

Invoices are created by me and sent as PDF documents via email.
Invoice data is retained in accordance with applicable commercial and tax laws.
Legal basis:
Article 6(1)(b) GDPR
Article 6(1)(c) GDPR

11. Newsletter

At present, no newsletter is offered.
Should a newsletter be introduced in the future, personal data will only be processed based on your explicit consent.
This Privacy Policy will be updated accordingly.

12. Cookies and Cookie Consent

This website only uses technically necessary cookies where required for the secure and proper operation of the website.
A cookie consent management tool (currently planned: CookieYes) is used to manage your cookie preferences.
Should analytics or marketing cookies be introduced in the future, they will only be stored after you have provided your explicit consent in accordance with Article 6(1)(a) GDPR.
You may withdraw or change your consent at any time through the cookie banner.

13. Google Fonts

Google Fonts used on this website are hosted locally on the web server.
No connection to Google servers is established when you visit this website.
Accordingly, no personal data is transmitted to Google through the use of fonts.

14. Links to Social Media

This website contains standard external links to my profiles on:
Instagram
LinkedIn
No social media plugins are used.
Personal data is only transmitted to the respective provider once you actively click one of these links.
Each platform is solely responsible for processing your personal data in accordance with its own privacy policy.

15. Analytics and Marketing Tools

Currently, this website does not use analytics or marketing tools such as Google Analytics, Google Tag Manager, Meta Pixel, or similar tracking technologies.
Should such services be introduced in the future, they will only be used after appropriate notice has been provided and, where legally required, based on your explicit consent.

16. Data Retention

Personal data is stored only for as long as necessary to fulfill the respective processing purposes or to comply with applicable legal retention obligations.
Once the applicable retention period has expired, the data will be deleted unless another legal basis permits further processing.

17. Recipients of Personal Data

To provide my services, personal data may be shared with the following service providers:
GoDaddy (website hosting)
Microsoft (Microsoft Bookings and Microsoft Teams)
Stripe (payment processing)
Personal data is only shared where necessary for fulfilling the coaching agreement, providing the website, or complying with legal obligations.

18. International Data Transfers

Where personal data is transferred to organizations located outside the European Union (EU) or the European Economic Area (EEA), such transfers are carried out only in accordance with the requirements of the GDPR.
Where necessary, transfers are based on adequacy decisions issued by the European Commission or on appropriate safeguards such as the European Commission's Standard Contractual Clauses pursuant to Article 46 GDPR.

19. Your Rights

Under the GDPR, you have the right to:
Access your personal data (Article 15 GDPR)
Correct inaccurate personal data (Article 16 GDPR)
Request deletion of your personal data (Article 17 GDPR)
Restrict processing (Article 18 GDPR)
Data portability (Article 20 GDPR)
Object to processing (Article 21 GDPR)
Withdraw any consent you have provided with future effect (Article 7(3) GDPR)

20. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
The competent supervisory authority for Heartaq Coaching is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)

21. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

22. Changes to This Privacy Policy

I reserve the right to update this Privacy Policy where necessary due to legal changes or technical developments affecting this website.
The version published on this website at the time of your visit shall apply.