data privacy policy
Data Privacy Policy Gisela Backe – Coaching & Design/ Gisela Backe as of Februrary 25th, 2025
We are very pleased that you have shown interest in our business. Data protection is a top priority for the management of Gisela Backe – Coaching & Design. The use of the Gisela Backe – Coaching & Design website is possible without providing personal data; however, if a user wishes to access specific services, processing personal data may become necessary. If processing personal data is required and there is no legal basis for it, we generally obtain consent from the user.
The processing of personal data, such as a user’s name, address, email address, or phone number, will always comply with the General Data Protection Regulation (GDPR) and the applicable country-specific data protection laws related to Gisela Backe – Coaching & Design. Through this data protection declaration, we aim to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Additionally, this declaration informs users of the rights they are entitled to.
As the data controller, Gisela Backe—Coaching & Design has implemented various technical and organizational measures to ensure maximum protection of personal data processed through this website. However, Internet-based data transmissions may inherently contain security gaps, meaning absolute protection cannot be guaranteed. Therefore, users are free to transmit personal data to us through alternative means, such as by phone.
1. Definitions
The data protection declaration of Gisela Backe—Coaching & Design is based on the terminology used by the European legislator during the adoption of the General Data Protection Regulation (GDPR). Our declaration aims to be readable and understandable for the public, as well as our customers and business partners. To achieve this, we will first explain the terminology used.
In this data protection declaration, we use several key terms:
· a) Personal data
Personal data refers to any information related to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, either directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
· b) Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for that processing.
· c) Processing
Processing encompasses any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means. This includes activities such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure through transmission, dissemination, or making available, alignment or combination, restriction, erasure, or destruction.
· d) Restriction of processing
Restriction of processing refers to marking stored personal data to limit its processing in the future.
· e) Profiling
Profiling involves any form of automated processing of personal data that uses such data to evaluate certain personal aspects related to a natural person, mainly to analyze or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
· f) Pseudonymisation
Pseudonymization refers to processing personal data in a way that precludes attribution to a specific data subject without additional information. This extra information must be kept separate and subject to technical and organizational measures to ensure that the personal data cannot be linked to an identifiable natural person.
· g) Controller or controller responsible for the processing
The controller, or controller responsible for the processing, is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing personal data. If the purposes and means of such processing are dictated by Union or Member State law, the controller or specific criteria for its designation may be provided by Union or Member State law.
· h) Processor
A Processor is a natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the controller.
· i) Recipient
A Recipient is a natural or legal person, public authority, agency, or another entity to which personal data are disclosed, whether or not it is a third party. However, public authorities that may receive personal data in the context of a specific inquiry by Union or Member State law are not considered recipients; the processing of such data by these public authorities must comply with the applicable data protection rules according to the purposes of the processing.
· j) Third party
A Third Party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and those who, under the direct authority of the controller or processor, are authorized to process personal data.
· k) Consent
Consent of the data subject refers to any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, whereby they, through a statement or explicit affirmative action, signify their agreement to the processing of personal data relating to them.
2. Name and Address of the Controller
The Controller for the purposes of the General Data Protection Regulation (GDPR), other applicable data protection laws in Member States of the European Union, and related provisions is:
Gisela Backe
Ettlinger Str., 25
68239 Mannheim
Germany
Phone: +49 621 15954423
Email: mail @giselabacke.com
Website: www.giselabacke.com
Objection to Advertising Emails
We hereby object to the use of contact data published in accordance with legal notice obligations and data protection laws to send unsolicited advertising and informational material. The operators of this website expressly reserve the right to take legal action in the event of receiving unsolicited advertising communications, such as spam emails.
3. Cookies
The internet pages of Gisela Backe – Coaching & Design utilize cookies. Cookies are text files stored on a computer system through an internet browser. Many websites and servers make use of cookies. Numerous cookies contain a so-called cookie ID, a unique identifier for the cookie. It consists of a character string that allows websites and servers to associate with the specific internet browser where the cookie was saved. This enables visited websites and servers to distinguish the individual browser of the data subject from other browsers with different cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.
By utilizing cookies, Gisela Backe – Coaching & Design can offer users of this website more user-friendly services that would not be feasible without cookie settings.
Through cookies, the information and offerings on our website can be optimized with the user in mind. As mentioned earlier, cookies allow us to recognize our website users. This recognition aims to simplify the user experience on our website. For example, a user who enables cookies does not need to enter access data every time they visit the site, as the website retains this information, and the cookie is stored on the user’s computer system. Another example is the shopping cart cookie used in online stores, which remembers the items a customer has placed in their virtual shopping cart.
Users can prevent the setting of cookies through our website at any time by adjusting the settings of their internet browser, thereby permanently denying cookie placement. Additionally, already-set cookies can be deleted at any time using an internet browser or other software applications. This is achievable in all popular internet browsers. If a user turns off cookie settings in their internet browser, not all features of our website may be fully accessible.
4. Collection of general data and information
The website of Gisela Backe – Coaching & Design collects a series of general data and information when a data subject or automated system accesses the website. This general data and information are stored in the server log files. The collected data may include: (1) the types and versions of browsers used, (2) the operating system of the accessing system, (3) the website from which an accessing system reaches our website (known as referrers), (4) the sub-websites, (5) the date and time of access to the site, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may assist in the event of attacks on our information technology systems.
When using this general data and information, Gisela Backe – Coaching & Design does not draw any conclusions about the data subject. Instead, this information is necessary to (1) deliver the content of our website accurately, (2) optimize the content of our website and its advertisements, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement with the information required for criminal prosecution in the event of a cyber-attack. Therefore, Gisela Backe – Coaching & Design analyzes these anonymously collected data and information statistically, aiming to enhance our enterprise’s data protection and security and ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data provided by a data subject.
5. Registration on our website
The data subject can register on the controller’s website by providing personal data. The corresponding registration input form determines the specific personal data transmitted to the controller. The personal data entered by the data subject is collected and stored solely for the controller’s internal use and purposes. The controller may request the transfer of this data to one or more processors (e.g., a parcel service), which also uses personal data for an internal purpose attributable to the controller.
By registering on the controller’s website, the IP address assigned by the Internet Service Provider (ISP) and the date and time of registration are also recorded. This data storage is conducted to prevent misuse of our services and, if necessary, to facilitate the investigation of any offenses committed. Thus, storing this data is essential for ensuring the controller’s security. This information is not transmitted to third parties unless there is a legal obligation to do so or if the transfer supports criminal prosecution.
By voluntarily providing personal data during registration, the data subject enables the controller to offer content or services exclusively available to registered users due to the nature of the subject matter. Registered individuals can modify their provided personal data at any time or request removal from the controller’s records.
The data controller shall provide each data subject with information regarding the personal data stored about them upon request. Furthermore, the data controller will correct or delete personal data at the data subject’s request unless there are legal storage requirements. All controller employees are available to the data subject as contact persons in this regard.
6. Contact possibility via the website
The website of Gisela Backe – Coaching & Design contains information that enables quick electronic contact with our enterprise and direct communication with us, including a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller are stored for processing or contacting the data subject. There is no transfer of this personal data to third parties.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or if the purpose for its storage no longer pertains (e.g., after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
7. Routine erasure and blocking of personal data
The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the storage purpose or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject.
If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased by legal requirements.
8. Rights of the data subject
· a) Right of confirmation
Each data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, they may contact any controller employee at any time.
· b) Right of access
Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing;
- the existence of the right to complain with a supervisory authority;
- where the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
Furthermore, the data subject shall have a right to obtain information on whether personal data are transferred to a third country or an international organization. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, he or she may contact any employee of the controller at any time.
· c) Right to rectification
Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including using providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may contact any employee of the controller at any time.
· d) Right to erasure (Right to be forgotten)
Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:
- Personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
- The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
- The data subject objects to the processing under Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
- The personal data have been unlawfully processed.
- The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- The personal data have been collected about the offer of information society services referred to in Article 8(1) of the GDPR.
If one of the reasons above applies, and a data subject wishes to request the erasure of personal data stored by Gisela Backe – Coaching & Design, they may, at any time, contact any employee of the controller. An employee of Gisela Backe – Coaching & Design shall promptly ensure that the erasure request is complied with immediately.
Where the controller has made personal data public and is obliged under Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. Gisela Backe – Coaching & Design employees will arrange the necessary measures in individual cases.
· e) Right of restriction of processing
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by the data subject for a period, enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
- The controller no longer needs the personal data for the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.
- The data subject has objected to processing under Article 21(1) of the GDPR pending the verification of whether the controller’s legitimate grounds override those of the data subject.
Suppose one of the conditions above is met, and a data subject wishes to request the restriction of the processing of personal data stored by Gisela Backe – Coaching & Design. In that case, they may at any time contact any employee of the controller. The employee of Gisela Backe – Coaching & Design will arrange the processing restriction.
· f) Right to data portability
Each data subject shall have the right granted by the European legislator to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used, and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent under point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract under point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability under Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
To assert the right to data portability, the data subject may at any time contact any employee of Gisela Backe—Coaching & Design.
· g) Right to object
Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.
Gisela Backe—Coaching & Design shall no longer process the personal data in the event of the objection unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
If Gisela Backe – Coaching & Design processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing personal data concerning them for such marketing. This applies to profiling to the extent that it relates to such direct marketing. If the data subject objects to Gisela Backe – Coaching & Design processing for direct marketing purposes, Gisela Backe – Coaching & Design will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to Gisela Backe—Coaching & Design processing of personal data concerning him or her for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may contact any employee of Gisela Backe—Coaching & Design. In addition, the data subject is free, in the context of the use of information society services and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.
· h) Automated individual decision-making, including profiling
Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is not based on the data subject’s explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject’s explicit consent, Gisela Backe – Coaching & Design shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may contact any employee of Gisela Backe—Coaching & Design at any time.
· i) Right to withdraw data protection consent
Each data subject shall have the right granted by the European legislator to withdraw his or her consent to the processing of his or her data at any time.
If the data subject wishes to exercise the right to withdraw consent, he or she may contact any employee of Gisela Backe—Coaching & Design at any time.
9. Data protection provisions about the application and use of Facebook
On this website, the controller does not have integrated components of the Facebook enterprise.
10. Data protection provisions about the application and use of Google
On this website, the controller has not integrated the Google Analytics component.
11. WordPress Stats
This website uses the WordPress Stats tool to statistically analyze visitor traffic. This service is provided by Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110-4929, USA.
WordPress Stats uses cookies that are stored on your computer and allow analysis of website use. The information generated by the cookies about website use is stored on servers in the USA. Your IP address will be anonymized after processing and before storage.
WordPress Stats cookies remain on your device until you delete them.
The storage of “WordPress Stats” cookies is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to accept cookies under certain conditions automatically, always reject them, or automatically delete cookies when closing your browser. The functionality of our services may be limited when cookies are disabled.
You can object to collecting and using your data at any time with future effect by clicking on this link and setting an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.
If you delete the cookies on your computer, you must set the opt-out cookie again.
12. Google Web Fonts
This page uses web fonts provided by Google to represent fonts uniformly. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose, your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done to ensure a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
If your browser does not support web fonts, your computer uses a standard font.
Further information about handling user data can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.
13. SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, third parties cannot read the data you transfer to us.
14. Data protection provisions about the application and use of YouTube
On this website, the controller has YouTube-integrated components. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, and it also provides free viewing, review, and commenting on them. YouTube allows you to publish all kinds of videos, so you can access full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.
The company that operates is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During this technical procedure, YouTube and Google gained knowledge of the specific sub-pages of our website that were visited by the data subject.
If the data subject is logged in on YouTube, YouTube recognizes, with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site the data subject visited. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google will receive information through the YouTube component that the data subject has visited our website if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video. If transmitting this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the subject logs off from their own YouTube account before a call-up to our website is made.
YouTube helps make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about YouTube and Google’s collection, processing, and use of personal data.
15. Legal basis for the processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. Suppose the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service. In that case, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations, which are necessary for carrying out pre-contractual measures, for example, in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations? The processing is based on Art? 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. For example, this would be the case if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then, the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations that are not covered by any of the abovementioned legal grounds if processing is necessary for the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because the European legislator specifically mentions them. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
16. Data transmission on conclusion of the contract for services and digital content
We only transfer personal data to third parties if this is necessary within the scope of the contract, for example, to the bank responsible for processing the payment.
Further data transmission does not occur unless you have expressly consented to the transmission. Transferring your data to third parties without explicit consent, such as for advertising purposes, does not occur.
The basis for data processing is Art. 6(1) lit. b GDPR allows data processing to fulfill a contract or pre-contractual measures.
17. The legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1) lit. f GDPR, our legitimate interest is to carry out our business in favor of the well-being of all our employees and shareholders.
18. Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After the expiration of that period, the corresponding data is routinely deleted as long as it is no longer necessary to fulfill the contract or initiate a contract.
19. Provision of personal data as a statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; possible consequences of failure to provide such data
We clarify that the provision of personal data is partly required by law (e.g., tax regulations) or can also result from contractual provisions (e.g., information on the contractual partner). Sometimes, it may be necessary to conclude a contract that the data subject provides us with personal data, which we must subsequently process. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with them. The non-provision of personal data would result in the contract with the data subject not being concluded. Before the data subject provides personal data, the data subject must contact any employee. The employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
20. Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
The DGD has generated this Privacy Policy—Your External DPO’s privacy policy generator, which was developed in cooperation with German Lawyers from WILDE BEUGER SOLMECKE, Cologne.