Privacy Policy
Last updated: 15.02.2025
1. Scope of Application
This privacy policy applies to the use of the website https://sallyschulze.com/ and for the provision of services by the controller.
2. Controller
The controller responsible for the collection and processing of personal data in connection with the use of this website and the services offered on it is:
Dipl.-Psych. Sally Schulze
Ludwig-Landmann-Str. 393
60487 Frankfurt
Phone: +49 (0) 152 5101 3852
Email: sally@sallyschulze.com
3. Data Subjects
This privacy policy applies to users of this website and if you are a customer of mine.
4. Categories of Personal Data, Purposes and Legal Basis
I collect and process your personal data only for the following purposes:
- Website – To enable you to access and use our website, it is technically necessary that certain data transmitted by the browser used to access and use the website are processed.
- Contact form
- Provision of my services.
The Website Data section contains detailed information on:
- the categories of personal data that I collect from you or from third parties (e.g., authorities or other bodies), as well as other personal data that you actively provide to me (e.g., when you fill out forms on our website or send me an email);
- the purposes for which I process these personal data; and
- the legal basis for the collection and processing of your personal data (unless otherwise specified – e.g., when collecting the data from you).
Please note that I process your personal data for other purposes only if I am obliged to do so due to legal requirements (e.g., transfer to courts or law enforcement authorities), if you have consented to the respective processing or if the processing is otherwise lawful under applicable law. If processing is carried out for another purpose, you will be informed separately (as far as legally permissible).
5. Recipients and Categories of Recipients
I transmit your personal data for the respective purposes to the recipients and categories of recipients listed below or disclose them to these – further information on the recipients and categories of recipients mentioned under 5.1 and 5.2 can be found in the Website Data section.
- Private third parties
- Processors – Certain third parties who process personal data on my behalf and in my name and according to my instructions that are necessary for the respective processing purposes. Such processors are contractually obliged in particular to take appropriate technical and organizational security measures to protect personal data and to process personal data only as instructed.
- Administrative authorities, courts, external consultants and similar third parties who are public bodies, to the extent this is required or permitted by applicable law.
6. International Data Transfer
Data transfer to countries outside the European Union or the European Economic Area generally does not take place.
7. Storage Duration and Deletion
Your personal data will be stored by me and/or our service providers in accordance with applicable data protection law, to the extent and for as long as necessary to fulfill the purposes for which the personal data are collected. Subsequently, your personal data will be deleted from IT systems and/or in other records and/or measures will be taken to properly anonymize them, so that you can no longer be identified from this data. The foregoing does not apply insofar as there is an obligation to retain your personal data to comply with legal or regulatory obligations. For example, personal data contained in contracts, communications and business letters may be subject to statutory retention obligations that may require retention for generally 6 to 10 years (in particular according to the Commercial Code ("HGB") and the Tax Code ("AO")). If applicable, other personal data will generally be deleted 5 years after the termination of the respective contractual relationship between you and me.
8. Updates to the Privacy Policy
This privacy policy may require updates from time to time – e.g., due to the introduction of new technologies, the introduction of new features or extension of my services or changes to the scope of services provided. In the event of an update, I will make the new version of the privacy policy available on this website and/or inform you accordingly (e.g., by email).
9. Rights as a Data Subject
You have the right
- according to Art. 7 Para. 3 GDPR, to withdraw your consent to the processing of personal data at any time. This has the consequence that the data processing which was based on this consent may no longer be continued for the future – the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
- according to Art. 15 GDPR, to request information about your personal data processed by me. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data, if these were not collected by me or through me, as well as about the existence of automated decision-making including profiling and, if applicable, meaningful information about their details, whereby the right to information may be restricted by applicable law, in particular according to Section 34 of the Federal Data Protection Act ("BDSG");
- according to Art. 16 GDPR, to immediately request the correction of incorrect or completion of your personal data stored by me and, taking into account the purposes of the processing, also the right to request the completion of incomplete personal data – including by means of a supplementary declaration;
- according to Art. 17 GDPR, to request the deletion of your personal data stored by me, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims, whereby the right to deletion may be restricted by applicable law, in particular according to Section 35 BDSG;
- according to Art. 18 GDPR, to request the restriction of processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and the data are no longer needed, but you need them for the assertion, exercise or defense of legal claims or you have objected to the processing according to Art. 21 GDPR;
- according to Art. 20 GDPR, to receive your personal data, which you have provided to me, in a structured, common and machine-readable format or to request the transfer to another controller ("Right to data portability") and
- according to Art. 77 GDPR, to lodge a complaint with a supervisory authority.
10. Right to Object
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for this arising from your particular situation. This also applies to profiling based on these provisions. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you wish to exercise your right to object, an email to sally@sallyschulze.com is sufficient.
Website Data
# | Purpose of Processing | Categories of Personal Data | Legal Basis | Recipients or Categories of Recipients |
---|---|---|---|---|
1. |
Access to the Website
It is technically necessary that certain data are processed so that you can access and use the website at all. |
IP address of the device you use IP address of the website data accessed Content of the request (specific page) Access status/status code Amount of data transferred in each case Website from which the request comes Internet service provider Browser type Operating system and its interface Language and version of the browser used |
Legitimate interest (Art. 6 Para. 1 lit. f GDPR) The processing is technically necessary to enable you to access our website technically and to deliver the contents of our website correctly. |
Hosting provider as processor STRATO AG, Pascalstraße 10, 10587 Berlin, Germany |
2. | Contact Form on Website |
Required information, without which your request cannot be answered Name Email address Optional Phone number Additional data that you enter in the "Your request" field |
The data processing is necessary for the implementation of pre-contractual measures that are carried out at your request (contact request)(Art. 6 Para. 1 (b) GDPR). | |
3. |
Provision of Services
Seminars Individual coaching Consulting for clients of the commissioning center/practice/clinic This includes processing, to be able to identify you as a customer; to be able to register you as a customer and conclude a contract for the services offered, including fee agreement and other contract-related agreements with you; for the purpose of corresponding with you; to be able to advise you appropriately and provide the services contractually agreed between us; for billing and invoicing; for the settlement of any existing liability claims and the assertion of any claims against you. |
Form of address, first name, last name a valid email address address if applicable, company or firm telephone number (landline and/or mobile) if applicable, fax number other contact details provided by you information required for the provision of the service, including documents of any kind and form (including those in electronic form) that you provide to us. This includes contract data such as content of the assignment, fees, terms, payment data (account data, payment history, etc.). If you do not provide the personal data mentioned, the purposes mentioned in the adjacent column (left) may not or not completely be fulfilled and, in particular, no contract and other agreements regarding my services may be concluded with you and/or I may not be able to advise you or not comprehensively advise you or provide my services. Automated decision-making including profiling does not take place. |
The collection and processing of this data takes place and is necessary pursuant to Art. 6 Para. 1 S. 1 lit. b EU General Data Protection Regulation ("GDPR"), for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. | |
4. |
Email Confirmations (via Mailjet)
Sending email confirmations after e.g. contact form inquiries, seminar bookings or service agreements. |
Email address of the recipient Name (if provided in the form) Contents of the confirmation email (e.g. booking details, summary of the request, etc.) if applicable, date and time of the booking/request |
Art. 6 Para. 1 lit. b GDPR (Contract fulfillment): When the confirmation email is related to a contract or a booking. Art. 6 Para. 1 lit. f GDPR (Legitimate interest): Our legitimate interest is to inform customers about the receipt of their inquiries or bookings and to provide them with a confirmation. |
Mailjet (as processor) [Mailjet's complete address and contact details - Insert Mailjet's complete address here] |