Privacy Policy

1. Privacy at a Glance​

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our full privacy policy below.

​

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the "Note on the Responsible Party" section of this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us – for example, data you enter into a contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other purchase requests.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

​

2. Legal Notice

The legal notice (Impressum) of this website is accessible at: Legal Notice

There you will find all legally required information about the responsible person as well as further contact options.

​

3. Hosting

We host the content of our website with the following provider: WIX

 

The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter "WIX"). WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies on your browser that are required for the display of the website and to ensure security (necessary cookies).

The data collected via WIX may be stored on various servers worldwide, including servers in the USA.

WIX Privacy Policy

​

According to WIX, data transfer to the USA and other third countries is based on the EU Commission's standard contractual clauses or comparable guarantees pursuant to Art. 46 GDPR.

Details: https://de.wix.com/about/privacy-dpa-users

​

The use of WIX is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable possible presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

The company holds certification under the "EU-US Data Privacy Framework" (DPF).

https://www.dataprivacyframework.gov/participant/5626

 

Order Processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law that ensures that the service processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

​

4. General Information and Mandatory Disclosures Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. We would like to point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

​

Note on the Responsible Party

The responsible party for data processing on this website is:

 

Astrid Ebner

c/o POSTFLEX PFX-566-186
Emsdettener Straße 10
48268 Greven

Phone: +49 163 2317076

Email: astrid@the-quiet-part.com

 

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

​

Data Protection Officer

There is no legal obligation for our company to appoint a data protection officer. A data protection officer has therefore not been appointed. For data protection-related questions, please contact the responsible party directly using the contact details provided above.

​

Storage Duration and Specific Retention Periods

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

The following specific statutory retention periods apply:

• Invoices and tax-relevant documents (e.g. payment receipts, contracts): 10 years pursuant to § 147 German Tax Code (AO) and § 257 German Commercial Code (HGB)

• Business letters and other business-related correspondence: 6 years pursuant to § 257 HGB

• Coaching session notes and documentation: retained for the duration of the coaching relationship and up to 3 years thereafter, unless a longer retention period is required by law

• Contact requests without a contract being concluded: deleted after completion of processing, no later than 3 years

After expiry of the respective periods, the data in question will be routinely deleted.

​

Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if special categories of data pursuant to Art. 9(1) GDPR are processed. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if it is required to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

​

Recipients of Personal Data

In the course of our business activities, we work with various external parties. In some cases, it is necessary to transfer personal data to these external parties. We only pass on personal data to external parties if this is required for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest pursuant to Art. 6(1)(f) GDPR in the transfer, or if another legal basis permits the transfer of data.

​

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The lawfulness of data processing carried out before the revocation remains unaffected.

 

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

​

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged infringement.

 

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, in a commonly used, machine-readable format, delivered to you or to a third party.

​

Access, Rectification and Erasure

Within the framework of applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, where applicable, the right to rectification or erasure of this data.

​

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we generally need time to verify this.

• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.

• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims.

• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your and our interests must be carried out.

​

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

​

Objection to Advertising Emails

The use of contact data published as part of the imprint obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information.

​

5. Processing of Coaching-Specific and Special Categories of Data

In the course of our coaching activities, we process personal data that may provide insight into personal circumstances, goals, challenges, and possibly the mental or physical health of our clients. Where such data constitutes special categories of personal data within the meaning of Art. 9(1) GDPR (e.g. health data), processing is carried out exclusively on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR.

This consent is obtained at the beginning of the coaching relationship, in writing or verbally, and can be revoked at any time.

​

Storage and security of this data:

• Session notes, documentation, and other coaching-related materials are stored exclusively locally on a password-protected device (laptop or external SSD) and are not transferred to cloud services.

• Storage in cloud services (e.g. Google Drive) takes place only at the explicit request of or in agreement with the client, and exclusively for the purpose of shared editing or documentation.

• Access to this data is restricted to the responsible person. No disclosure to third parties takes place.

We are committed to the confidentiality of all information received in the context of coaching. This confidentiality applies beyond the end of the coaching relationship.

​

6. Data Collection on This Website Cookies

Our website uses so-called "cookies." Cookies are small data packets that do not cause any harm to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. You can set your browser to inform you about the placement of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be limited.

​

Cookie Consent Banner

This website uses a Cookie Consent Banner to manage your consent to the use of cookies. The provider of this service is:

Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany

https://usercentrics.com/de/datenschutzerklaerung/

​

WIX Analytics

This website uses WIX Analytics, an integrated web analytics tool provided by the hosting provider WIX. WIX Analytics enables us to analyze visitor data on our website, including number of page views, visitor origins, time spent on the site, pages visited, and devices used.

The data collected in this process is stored by WIX on servers that may be located in the USA. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in optimizing our website). Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

WIX Privacy Policy: https://de.wix.com/about/privacy

​

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent. Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Consent can be revoked at any time.

​

Inquiries by Email or Phone

If you contact us by email or phone, your inquiry, including all personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Consent can be revoked at any time.

​

Communication via WhatsApp

Among other channels, we use the instant messaging service WhatsApp for communication with customers. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Communication is carried out via end-to-end encryption. Nevertheless, it cannot be ruled out that WhatsApp may gain access to metadata. Use is based on Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest in efficient communication). We point out that no sensitive data should be transmitted via this channel.

​

7. Social Media

Instagram – Link to Our Profile

Our website contains a link to our Instagram profile (@wearethequietpart). This is a simple hyperlink only – no Instagram plugins, buttons, or widgets are embedded on our website. No data is therefore transferred to Instagram simply by visiting our website.

When you click the link and access Instagram, the privacy policy of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, applies. Meta, as the operator of the platform, may collect and process data about your usage behavior on Instagram. We have no influence over this data processing.

Instagram/Meta Privacy Policy: https://privacycenter.instagram.com/policy/

 

LinkedIn – Link to Profile

Our website contains a link to the LinkedIn profile of the founder, Astrid Ebner. This is a simple hyperlink only – no LinkedIn plugins, buttons, or widgets are embedded on our website. No data is therefore transferred to Instagram simply by visiting our website.

When you click the link and access LinkedIn, the privacy policy of LinkedIn Ireland Unlimited Company with its address at Wilton Place, Dublin 2, Ireland, applies. LinkedIn, as the operator of the platform, may collect and process data about your usage behavior on LinkedIn. We have no influence over this data processing.

https://privacy.linkedin.com/

​

8. Registration on the Website

You can register on this website to use additional functions. The data entered for this purpose is used exclusively for the purpose of using the respective offer. Processing is based on Art. 6(1)(b) GDPR.

​

9. Plugins and Tools

Google Fonts (Local Hosting)

This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts. Google Fonts are installed locally. No connection to Google servers takes place.

More information: https://developers.google.com/fonts/faq

 

10. Appointment Booking and Calendar Functions

WIX Bookings

For booking coaching appointments, we use the integrated tool WIX Bookings, provided by the hosting provider WIX. When you request or book an appointment via WIX Bookings, the data you enter (name, email address, desired appointment, and any additional information) is processed for appointment management and confirmation. Processing is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

WIX Privacy Policy: https://de.wix.com/about/privacy

 

Google Calendar

For internal appointment management, we use Google Calendar. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Appointments arranged via this website may be entered into Google Calendar. Processing is based on Art. 6(1)(b) GDPR. Google is certified under the EU-US Data Privacy Framework (DPF).

Google Privacy Policy: https://policies.google.com/privacy

​

11. Conference Tools

Google Meet

We use Google Meet for online meetings. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When participating in a meeting, personal data is processed (e.g. name, email address, and possibly audio/video data). Use is based on the performance of contractual services (Art. 6(1)(b) GDPR). Google is certified under the EU-US Data Privacy Framework (DPF).

Google Meet Privacy Policy: https://policies.google.com/privacy

​

12. Other Services

Google Drive

We have integrated Google Drive on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Drive allows us to integrate an upload area on our website where you can upload content. When you upload content, it is stored on Google Drive's servers. The use of Google Drive is based on Art. 6(1)(f) GDPR (legitimate interest in a reliable upload area). Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

Note: Coaching-related documents are only shared via Google Drive at the explicit request of the client (see Section 5).

https://www.dataprivacyframework.gov/participant/5780

Google Drive Privacy Policy: https://policies.google.com/privacy

 

Order Processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service.

​

13. Processing of Customer and Contract Data

We collect, process, and use personal data insofar as this is necessary for the establishment, substantive configuration, or amendment of the legal relationship. Processing is based on Art. 6(1)(b) GDPR. The collected customer data will be deleted after completion of the order or termination of the business relationship, taking into account statutory retention periods (see Section 4, "Storage Duration and Specific Retention Periods").

​

14. Payment Services

Payment services are used on this website to provide you with a secure and convenient payment option. Your payment data is processed directly by the respective payment service provider for the purpose of payment processing. Processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a secure payment process).

​

Apple Pay

On our website, we offer payment via Apple Pay. The provider of this payment service is Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. When you select payment via Apple Pay, the payment data you have entered will be transmitted to Apple. The transmission of your data is based on Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

Apple Privacy Policy: https://www.apple.com/de/legal/privacy/de-ww/

​

Card Payment (WIX Payments)

Card payments (e.g. Visa, Mastercard) are processed via WIX Payments, the integrated payment service of the hosting provider WIX. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Your payment data is processed directly by WIX Payments and transmitted in encrypted form. We have no direct influence over the storage and processing of your payment data by WIX.

WIX Payments Privacy Policy: https://de.wix.com/about/privacy

​

Direct Bank Transfer

We also offer the option of direct bank transfer. In this case, payment takes place outside of this website. We process only the data required for invoicing (name, address if applicable, invoice amount). No payment data is transmitted via this website in the case of a direct bank transfer.