PRIVACY POLICY

for Your Online Hypnosis by Ewelina Dubiak
Version 1.0
Status: January 2025 With this privacy policy I fulfill my information obligations according to Art. 13 & Art. 14 of the General Data Protection Regulation (GDPR). It is important to me to inform you transparently about the type, scope, purpose and duration of the personal data I process and the measures I take to protect your personal data. This data protection information has been valid since January 2025. If updates to this document become necessary due to the further development of the website or due to changed requirements, I will document this here and mark the amended version in a comprehensible manner. Personal data is collected on this website.

The foundations of a trusting partnership are transparency and reliability: I therefore assure you that your personal data will be processed in accordance with the applicable regulations on the protection of personal data. I process your personal data exclusively with your active consent, exclusively for the purpose of contract processing or to protect my legitimate interests. By processing, I mean the collection, transmission, storage, but also processing on behalf of and deletion of your personal data. How and why your personal data is processed is explained in detail below.

 

Table of contents

  1. Responsible for data processing
  2. General information on data processing
  3. Data collection on this website
  4. Profiles in social networks
  5. Your rights as a data subject

 

1. responsible for data processing

Responsible for data processing in accordance with Art. 4 No. 7 GDPR:’

Your Online Hypnoses
represented by Ewelina Dubiak
Peiner Straße 31, 31228 Peine

E-mail: dubiak.ewelina@googlemail.com

No data protection officer has been appointed for this website.

2. general information on data processing

1. scope of the processing of personal data
I only process personal data on this website insofar as this is necessary to provide a functional website and my content and services. The processing of personal data on this website takes place regularly only after active consent. On this website, the configuration of the consent management tool (colloquially known as the cookie banner) ensures that you actively consent to the processing of your personal data. An exception applies in cases where prior consent cannot be obtained for technical reasons and the processing of the data is permitted by law.

2. legal basis for the processing of personal data
If I obtain the consent of the data subject, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. If the processing is necessary to safeguard my legitimate interests as an entrepreneur or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in regulations, laws or other provisions. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires. Unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

 

3. data collection on this website

Provision of the website and creation of log files
Each time this website is accessed, the system automatically collects data and information from your device’s operating system. The following data is collected:

  • your IP address
  • Date and time of access
  • Specifies the time difference between the requesting host and the web server,
  • Type of request
  • Client information (type of client, client version)
  • your operating system (device, OS version of the device)
  • Website from which you came to my website
  • Content of the request or specification of the retrieved file that was transmitted to you
  • Access status (successful transmission, error, etc.),
  • the amount of data transferred in bytes

This website is operated via the infrastructure of STRATO GmbH hosted, i.e. stored and made available for retrieval. The web server used stores the aforementioned server log files. An AV contract has been concluded with the provider.

  • Purpose of processing: Hosting of the website
  • Legal basis and legitimate interest: The processing is based on my overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of my website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services
  • Data recipient: Strato GmbH, Otto-Ostrowski-Straße 7,
    10249 Berlin
  • Privacy policy of Strato

 

Cookie consent with Borlabs Cookie
This website uses Borlabs Cookie’s cookie consent technology. The tool enables your active consent to the storage of cookies to be obtained and documented. When you enter this website, a cookie is stored in your browser in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of Borlabs Cookie. Borlabs Cookie does not store any personal data. The cookie is deleted automatically.

Provider: Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg
Details on data processing by Borlabs Cookie

 

Uniform presentation/ web fonts
This website uses web fonts provided by the respective provider for the uniform display of fonts. When you access this website, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, your browser connects to the servers of the respective provider. This gives the provider knowledge that this website has been accessed via your IP address. If your browser does not support web fonts, a standard font will be loaded from your computer. We use web fonts from the following Google Fonts.

  • Purpose of processing: Uniform presentation of the website in all media
  • Legal basis and legitimate interests: The integration is based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible licensing restrictions for their integration.
  • Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043,USA
  • Privacy policy

E-mail contact
You can send me e-mails using the address provided. In this case, the personal data transmitted with the e-mail will be processed.

  • Purpose of processing: Processing your request
  • Legal basis: The legal basis for the processing of your personal data is Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual matters.

 

Calendly
I use the Calendly service to book appointments. When you make an appointment, Calendly collects and processes data on my behalf. These data are

  • Name
  • Address,
  • E-mail address
  • Telephone number (optional)
  • Purpose of the processing: Scheduling
  • Legal basis and legitimate interests: Data processing is based on my overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the provision of a stable and professional appointment booking system.
  • Data recipient: Calendly, 271 17th St NW, Ste 1000, Atlanta, GA 30363 USA, https://calendly.com/de/
  • Privacy policy of Calendly: https://calendly.com/de/pages/privacy
  • Transfer to third countries: Standard contractual clauses, which can be accessed via the following link https://calendly.com/de/pages/dpa can be viewed.
  • Storage period until revocation. Processing will then be restricted.

 

Online meeting via Zoom
My workshops, meetings and coaching sessions take place online via the Zoom video conferencing system.

  • Purpose: Implementation of the offer
  • Legal basis: If you book an offer with me, I process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR as part of the contractual measures.
  • Telecommunications service provider: Zoom Video Communications Inc., San José, California
  • Data protection information: https://explore.zoom.us/de/gdpr/

 

Messenger services
I use the following messenger services for asynchronous communication with customers and business partners.

  • [WhatsApp Business]

4. profiles in social networks

I use social networks to actively contact customers, interested parties and users and to provide information about my services and products. When interacting with customers via the platforms, personal data is processed both by me and by the respective platform operator. These processing activities are carried out under joint responsibility with the respective platform operators in accordance with Art. 26 GDPR. The general information on data processing in this document applies to the processing activities that I carry out.

I am not responsible for the processing activities of the respective platforms; the information provided by the platform operators applies. At this point, I would like to point out that the active use of social media such as Facebook, Instagram or Twitter is exclusively your personal responsibility. This applies in particular to the functions commenting, sharing, rating, etc. Below you will find a list of all the social media platforms where I have a profile.

Instagram
I run the Instagram profile [Profilname]

You can see the current posts on my website as locally saved images, if you click on one of the images, you will be automatically redirected to Instagram. The Instagram service is a Meta product provided by Meta Platforms Ireland Limited. The use of Instagram is free of charge. As a meta-product, Instagram, like Facebook, is financed by personalized advertisements that are determined by evaluating your personal data.

 

Youtube
I run a Youtube channel under the name [Profilname]

YouTube is a video portal that has been a subsidiary of Google LLC since 2006. The portal offers content producers the opportunity to make their video content available to an audience online free of charge.

  • Joint controller: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
  • Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Data protection information: https://policies.google.com/privacy?hl=de

 

LinkedIn
You can find me on LinkedIn at [Profilname]

LinkedIn is a social network for maintaining and building business contacts. The basic version of LinkedIn is free to use. In principle, you have the option of viewing my LinkedIn profile to a limited extent even without registering on the platform. Log out of LinkedIn or deactivate “stay logged in”, delete the cookies stored on your device and restart your browser. Restricted use means that interaction (liking, commenting, sharing, messages, etc.) is not possible, as this requires you to log in.

 

5 Your rights as a data subject

If your personal data is processed, you are the data subject (see Art. 4 para. 1 GDPR), so you have the following rights vis-à-vis me as the controller:

5.1 Right to information
You can ask me in writing at any time whether I am processing personal data concerning you. If such processing is taking place, I will provide you with the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom your personal data have been or will be disclosed;

(4) the planned duration of the storage of your personal data or, if specific information on this is not possible, criteria for determining the storage period;

(5) the existence of a right to rectification or erasure of your personal data, a right to restriction of processing or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority,

(7) all available information on the origin of the data if the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

You can exercise this right by contacting me by e-mail with the subject: Request for information.

5.2 Right to rectification
If you find that your personal data is incorrect and/or incomplete, you have the right to have it corrected and/or completed. Please send me an e-mail with the subject: Request for correction. I will process your request as quickly as possible and confirm the correction.

5.3 Right to restriction of processing
Under the following conditions, you can request that I restrict the processing of your personal data:

(1) if you dispute the correctness;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) I no longer need the personal data for the purposes of the processing, or

(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether my legitimate reasons for the processing outweigh your reasons.

If you wish to restrict processing, please send me an e-mail with the subject: Restriction of processing.

If the processing of your personal data has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, I will inform you before the restriction is lifted.

5.4 Right to erasure

5.4.1 Obligation to delete
You have the right to request the immediate deletion of your personal data. I am obliged to delete this data immediately if one of the following reasons applies:

(1) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing. Or you object to the processing pursuant to Art. 21 (2) GDPR.

(4) Your personal data has been processed unlawfully.

(5) The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which I am subject.

(6) Your personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

5.4.2 Information to third parties
If I, as the controller, have made your personal data public and I am obliged to erase it pursuant to Art. 17 (1) GDPR, I will take reasonable steps to inform controllers that you have requested the erasure of any links to, or copy or replication of, your personal data.

5.4.3 Exceptions
The right to erasure does not exist if the processing is necessary,

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5) for the assertion, exercise or defense of legal claims.

You can exercise this right by contacting me by e-mail with the subject: Delete my personal data.

5.5 Right to information
If you have exercised your right to rectification, erasure or restriction of processing, I am obliged to notify all recipients to whom I have disclosed your personal data of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to ask me to inform you about these recipients.

5.6 Right to data portability
You have the right to receive your personal data that you have provided to me in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller without hindrance from me. Write me an email with your request for data transfer and I will check whether this is technically possible.

5.7 Right of objection

You have the right to object at any time to the processing of your personal data, which is based on my overriding legitimate interest (Art. 6 para. 1 lit. f GDPR); this also applies to profiling based on these provisions.

I will no longer process your personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms. Or the processing serves the assertion, exercise or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object to this specific processing at any time. This also applies in particular to profiling, insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

5.8 Right to revoke the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

5.9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data carried out here infringes the GDPR. The supervisory authority with which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy. The competent supervisory authority is

Federal authority:

The Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153
53117 Bonn
Phone: +49(0)228 997799-0
E-mail: poststelle@bfdi.bund.de
De-Mail: poststelle@bfdi.de-mail.de

State authority:

Lower Saxony
the State Commissioner for Data Protection of Lower Saxony
P.O. Box 221, 30002 Hanover
Prinzenstraße 5, 30159 Hanover
Phone: 0511/120 – 45 00
Fax: 0511/120 – 45 99
E-mail: poststelle@lfd.niedersachsen.de
Internet: www.lfd.niedersachsen.de