{"id":17377,"date":"2023-02-05T14:05:28","date_gmt":"2023-02-05T13:05:28","guid":{"rendered":"https:\/\/www.freieresleben.com\/privacy-policy\/"},"modified":"2026-06-19T17:04:10","modified_gmt":"2026-06-19T15:04:10","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.freieresleben.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n

Privacy Policy<\/h1>\n

This policy reflects only the services actually used on Freieres Leben (freieresleben.com); services not in use are deliberately omitted. Where data subjects in the EU\/EEA or the UK are concerned, the EU General Data Protection Regulation (GDPR) applies by virtue of the marketplace principle.<\/p>\n

1. Controller<\/h2>\n

PSYSOULOGY LLC<\/strong>, 1242 SW Pine Island Road, Ste 42-348, Cape Coral, FL 33991, United States. Represented by: Kristina Peters (Founder). E-mail: evolve@psysoulogy.com<\/p>\n

2. Overview of processing<\/h2>\n

Categories of data:<\/strong> master data (e.g. names); contact data (e.g. e-mail address, postal address); contract data (e.g. booked coaching services, time-account balance, term); content data (e.g. form entries, content of coaching communication); usage data (e.g. pages accessed, access times); meta\/communication data (e.g. device information, IP addresses).<\/p>\n

Categories of data subjects:<\/strong> customers; prospects; coaching participants; users; communication partners; newsletter recipients.<\/p>\n

Purposes:<\/strong> provision of coaching services and customer care; provision of the online offering; appointment booking; handling enquiries and communication; reach measurement; security measures; direct marketing (newsletter); office and organisational procedures.<\/p>\n

Special categories of personal data (Art. 9 GDPR) are not collected. The offerings serve personal development and lie outside statutorily defined healthcare.<\/p>\n

3. Legal bases (GDPR)<\/h2>\n

Consent (Art. 6(1)(a) GDPR); performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR); legal obligation (Art. 6(1)(c) GDPR); legitimate interests (Art. 6(1)(f) GDPR). National data protection rules at the user\u2019s place of residence remain unaffected.<\/p>\n

4. Security measures<\/h2>\n

We take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk. Transmission is encrypted (SSL\/TLS, recognisable by the https:\/\/ prefix).<\/p>\n

5. International transfers<\/h2>\n

Origin hosting takes place in Switzerland<\/strong>, for which an EU adequacy decision exists (Art. 45 GDPR), so that no third-country transfer in the narrower sense occurs. Where individual services process data outside the EU (in particular Cloudflare, BerqWP\/DigitalOcean, CleanTalk, TidyCal and the communication medium chosen by the customer), this is based on EU Standard Contractual Clauses or Art. 49 GDPR. Details are provided with the respective services.<\/p>\n

6. Erasure of data<\/h2>\n

Data are erased once they are no longer required for their purposes and no statutory retention obligations apply (under commercial and tax law generally 6 or 10 years). Server log files are erased or anonymised after a maximum of 30 days.<\/p>\n

7. Hosting, CDN and proxy<\/h2>\n

To provide the website we use hosting, infrastructure and maintenance services. We process in particular access data\/server log files (pages accessed, date\/time, data volume, browser type\/version, operating system, referrer URL, IP address) for security and stability purposes. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).<\/p>\n

    \n
  • SwissNetWorX (hosting\/server, Switzerland):<\/strong> J. Kuder, Bodenmattstrasse 23, CH-4153 Reinach BL. Server location Switzerland (adequacy decision).<\/li>\n
  • Cloudflare (proxy\/CDN\/security):<\/strong> Cloudflare, Inc. (USA) is placed upstream to deliver, secure and accelerate the website. IP address and technical connection data are processed and may be handled on servers outside the EU, on the basis of EU Standard Contractual Clauses. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).<\/li>\n
  • BerqWP (performance\/CDN):<\/strong> static files (images, CSS, JS) are delivered via a content delivery network using DigitalOcean Spaces (region SFO3, USA). Where delivery occurs via servers outside the EU, this is based on EU Standard Contractual Clauses. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).<\/li>\n <\/ul>\n

    8. Cookies and consent management<\/h2>\n

    We use cookies in accordance with Sec. 25 TDDDG. For cookies\/services that are not strictly necessary we obtain prior consent; strictly necessary functions may be provided without consent. Consent may be withdrawn at any time.<\/p>\n

      \n
    • Complianz (consent management):<\/strong> stores the user\u2019s consent decision (server-side and\/or in a cookie) as proof. Legal basis: legal obligation (Art. 6(1)(c) GDPR) or legitimate interests (Art. 6(1)(f) GDPR).<\/li>\n
    • CleanTalk (spam protection):<\/strong> sets strictly necessary functional cookies (incl. ct_*, apbct_*) to detect automated input (see section 14).<\/li>\n <\/ul>\n

      9. Appointment booking (TidyCal)<\/h2>\n

      For booking (initial) calls and appointments we use TidyCal<\/strong>. We process in particular name, e-mail address, requested time and any further information you provide. Processing may take place on servers in the USA, on the basis of EU Standard Contractual Clauses or Art. 49 GDPR. Legal bases: performance of a contract\/pre-contractual steps (Art. 6(1)(b) GDPR); legitimate interests in efficient scheduling (Art. 6(1)(f) GDPR).<\/p>\n

      10. Delivery of coaching (time account, communication medium)<\/h2>\n

      To deliver the booked coaching we process the required master, contact and contract data as well as the content of the communication during the engagement. The time account<\/strong> (prepaid minutes) is kept pseudonymised, encrypted and locally; it is not disclosed to third parties for this purpose. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).<\/p>\n

      Coaching sessions take place by default via Zoom<\/strong> (Zoom Communications, Inc., USA); connection, audio and, where applicable, video data are processed. Processing in the USA is based on EU Standard Contractual Clauses. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).<\/p>\n

      At the customer\u2019s express request and on the customer\u2019s own responsibility, a medium other than Zoom may be used (telephone, Signal, Telegram, Threema). The choice of medium and the associated transfer of data to the respective provider are made by the customer on their own responsibility; in this respect the respective provider is the controller within the meaning of the GDPR. WhatsApp and Facebook Messenger are excluded by the provider.<\/strong> Legal basis for use of the chosen medium: consent or performance of a contract (Art. 6(1)(a)\/(b) GDPR).<\/p>\n

      11. Newsletter (MailerLite)<\/h2>\n

      We send newsletters only with the recipient\u2019s consent using the double opt-in<\/strong> procedure; the time of registration and confirmation as well as the IP address are logged as proof. Dispatch is handled via MailerLite<\/strong> (UAB MailerLite, Paupio 46, 11341 Vilnius, Lithuania \/ EU). MailerLite measures open and click rates to the extent covered by consent. You may unsubscribe at any time (link at the foot of each e-mail) or withdraw consent. Legal bases: consent (Art. 6(1)(a) GDPR); legitimate interests in a secure dispatch system (Art. 6(1)(f) GDPR).<\/p>\n

      12. Transactional e-mails (MailerSend)<\/h2>\n

      For reliable dispatch of system\/transactional e-mails (e.g. confirmation and notification mails) we use MailerSend<\/strong> (a provider of the MailerLite group). We process in particular the e-mail address and the content of the respective message. Where processing occurs outside the EU, this is based on EU Standard Contractual Clauses. Legal bases: performance of a contract (Art. 6(1)(b) GDPR); legitimate interests (Art. 6(1)(f) GDPR).<\/p>\n

      13. Web analytics (Matomo, self-hosted)<\/h2>\n

      For reach measurement we use Matomo<\/strong>, operated on our own server (Switzerland); the data collected are stored exclusively in our own database and are not<\/strong> transmitted to third parties. Matomo is operated without cookies<\/strong> and with IP anonymisation<\/strong>; identification of individual users is not possible. No consent is required. You may object to collection at any time via the opt-out function below. Legal basis: legitimate interests in data-minimising reach measurement (Art. 6(1)(f) GDPR).<\/p>\n

      <\/div>\n