Privacy policy

Draft – pending legal review. The German version is legally binding. Items in [square brackets] still need to be checked.

1. Controller

Frank Ellendt, Samariterstraße 18, 10247 Berlin, Germany
Email: frank.ellendt@posteo.de

2. In brief

This website uses no cookies and no tracking.
No external content is loaded – no third-party fonts, scripts or services.
I only collect what is needed for a session request or a message, and delete it automatically.

3. Hosting and server log files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement under Art. 28 GDPR is in place.

When you visit the website, the server stores technically necessary information in log files: IP address, date and time, page requested, amount of data transferred, browser and operating system. STRATO anonymises the IP address in these logs. This serves the secure operation of the website (Art. 6(1)(f) GDPR). Log files are deleted [ask STRATO: after … days].

4. Session requests

When you request a session, I process: first name, optionally last name, email address, phone number (optional; required only if you choose “phone” as the format), session type, format, requested time, the language of the page and optionally a keyword about your topic. Please don’t enter anything personal or health-related there – a keyword is enough.

The purpose is to arrange and hold the session. The legal basis is your consent (Art. 6(1)(a) GDPR) and steps prior to entering into an agreement (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by email.

Retention: All details of an appointment are deleted automatically 30 days after the appointment. If I don’t confirm a request, it expires after 72 hours at the latest; its data is also deleted 30 days after the requested time.

5. Contact form

When you write to me via the contact form, I process: first name, optionally last name, email address, optionally phone number, preferred language and format, rough time preferences and optionally a keyword about your topic. The purpose is to answer your request; the legal basis is your consent (Art. 6(1)(a) GDPR) and steps prior to entering into an agreement (Art. 6(1)(b) GDPR).

Retention: 30 days after I mark the request as done, at the latest 90 days after it was received.

6. Emails

The website sends emails about requests and appointments to you (receipt, confirmation, cancellation) and to me. They are sent via STRATO’s mail server; my mailbox is hosted by Posteo e. K., Berlin. Emails are usually encrypted in transit but not end-to-end encrypted, so please don’t send me confidential content by email.

7. Calendar entries and Google Calendar link

With the confirmation you receive a calendar file (.ics) and a link “Add to Google Calendar”. The calendar file is loaded from my website. Only if you click the Google link is the appointment data transmitted to Google (Google Ireland Limited, Dublin; possibly transferred to the USA on the basis of the EU-US Data Privacy Framework). Whether you use it is up to you.

For my own overview I add appointments to my personal calendar – only initials, session type and format, no names or contact details.

8. Online sessions with Google Meet

For online sessions I use Google Meet (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). I send you the link separately for each session. When you take part, Google processes technical data such as your IP address and device information, as well as video and audio during the session; a transfer to the USA is possible (EU-US Data Privacy Framework). I do not record sessions. The legal basis is Art. 6(1)(b) GDPR. If you’d rather not use Google Meet, sessions can take place in person in Berlin or – for the intro chat – by phone.

9. Coaching sessions

Content from our sessions is not processed via this website. For my training I document sessions only in anonymised form and only with your consent, which I ask for separately at the start of the coaching.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to frank.ellendt@posteo.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Alt-Moabit 59–61, 10555 Berlin, Germany).

11. No automated decision-making

There is no automated decision-making or profiling.

Last updated: [enter date at launch]