1.General Provisions1.1. This policy has been drawn up in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and describes how Jeanna Moudden (hereinafter referred to as the “Controller”), located in Düsseldorf, Germany, processes and protects personal data.
1.2. The policy applies to all information obtained by the Controller when visiting the website https://
[insert-domain].
2.ControllerThe person responsible for the processing of personal data in accordance with Article 4(7) of the GDPR is:
Name: Jeanna Moudden
Address: Hüttenstrasse 5,40215 Düsseldorf, Deutschland
Phone: +49 152 3408 18 52
Email: jeanna.moudden@mybizup.eu
Website: https://jeannamoudden.eu/For any questions regarding data protection, you may contact the Controller using the details above.
3.Principles of Data ProcessingThe processing of personal data is carried out in accordance with the principles of lawfulness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and confidentiality, as set out in Article 5 of the GDPR.
Data is collected in order to provide access to the website, respond to requests via form or email, schedule consultations, maintain client records and fulfil legal or contractual obligations.
4.Categories of Processed DataDepending on the nature of the request or the use of the website’s functionality, the following data may be processed: first name, last name, email address, phone number, IP address, technical information (date and time of request), and any voluntarily provided information (in messages, booking forms, etc.).
Health-related and other sensitive data as defined in Article 9 of the GDPR are processed only with your explicit consent and solely for the purpose of psychological consultation.
5.Legal Basis for ProcessingThe legal bases for processing personal data are:
– consent of the data subject — Article 6(1)(a) GDPR
– necessity for the performance of a contract — Article 6(1)(b)
– legal obligations — Article 6(1)(c)
– legitimate interests — Article 6(1)(f), for example, IT security or statistics
6.Cookies and Log FilesThe website uses only the cookies necessary for proper functionality. Additional cookies (e.g. for analytics) are used only after your consent via the cookie banner.
Each time the website is accessed, the following data is collected automatically: IP address, date, URL, browser, operating system. This data is temporarily stored in log files and is used to ensure the security of the site.
7.Email and Web FormsIf you contact the Controller via forms or email, your data is used only for the purpose of processing your request. It is not passed on to third parties without your consent and is deleted after communication is completed, unless legal obligations require retention.
8.Data SharingPersonal data is disclosed to third parties only when a relevant legal basis exists, for example if required for contract execution, mandated by law, or based on user consent. Data transfers outside the EEA are made only if appropriate legal safeguards are in place (such as standard contractual clauses or an adequacy decision).
9.Data Retention PeriodData is deleted as soon as it is no longer required. Commercial and tax-related records may be stored for up to 10 years in accordance with German legislation.
10. Rights of the Data SubjectThe user has the right at any time to request information about the personal data held by the Controller, its source, the purpose of processing, the retention period and possible recipients. The user also has the right to request rectification, erasure, restriction of processing, to object to processing, to withdraw consent, to exercise the right to data portability in a machine-readable format, and to lodge a complaint with a supervisory authority.
All such requests can be submitted to the email address indicated in Section 1.
11. Supervisory AuthorityLandesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
https://www.ldi.nrw.de12.Policy UpdatesThe Controller may update this policy. The current version is always available on the website.
13.Use of External Booking ServicesCalendly: Consultations are scheduled via Calendly. When booking, your name, email, and appointment time are shared. Calendly processes this data in accordance with its own privacy policy:
https://calendly.com/privacyPayment systems: Payments are processed through third-party providers (such as Stripe, PayPal). In this case, personal data is shared with the respective providers, who process the data in accordance with their own policies.
It is recommended to review the privacy policies of these providers before using their services.