1.Data controller
The controller within the meaning of data protection law is:
Alkanna Buist · origin coaching90419 Nürnberg, Germany
Email: info@origincoaching.de
Phone: +49 160 9965 1481
The full postal address is stated in the Imprint.
2.Hosting & server logs
This website is hosted by IONOS SE, Montabaur, Germany. The servers are located in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.
When you open the website, the hosting provider automatically records data in server log files:
- IP address
- date and time of access
- page or file requested
- browser and operating system used
- referrer URL (the page visited before)
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing the website securely and reliably). This data is not combined with other sources and is deleted by the hosting provider once it is no longer needed for technical operation and attack detection.
This website uses no tracking or marketing cookies and embeds no analytics tools. Only technically necessary cookies are used, and only where they are required to operate the site.
3.Getting in touch
If you contact me by email, phone, WhatsApp or LinkedIn, the details you provide (name, contact details, content of your message) are used solely to handle your enquiry and to communicate with you. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).
This website has no contact form. The WhatsApp and LinkedIn buttons are plain links: data is only sent to those providers once you click. From that point their own privacy terms also apply.
4.Data processed during coaching
Within a coaching relationship the following personal data may be processed:
- first and last name
- postal address (for invoicing)
- phone number and email address
- bank details (for invoicing)
- the content of coaching conversations, as far as it is needed for the work
The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR for statutory retention obligations.
My session notes are never digitised. I write them by hand, treat them confidentially and keep them in a secure place. They are not stored electronically, not transmitted and not shared with anyone.
5.Retention periods
Personal data is kept only as long as necessary. Different categories carry different periods:
- Invoices and accounting records (name, address, bank details, date of service, invoice content): 8 years under § 147(3) AO and § 14b UStG.
- Profit calculation records and annual documents: 10 years under § 147(3) AO.
- Business correspondence – messages that prepare, carry out or end an agreement: 6 years under § 147(3) AO.
- Other correspondence: up to 48 months. The legal basis is Art. 6(1)(f) GDPR: the limitation period for potential claims is three years and only starts at the end of the year in which the claim arose (§§ 195, 199 BGB).
- Session notes: up to 24 months after the coaching relationship ends, since clients often return once a topic has settled. They are not digitised.
- Server log files: by the hosting provider, see point 2.
Statutory periods each begin at the end of the calendar year in which the document was created (§ 147(4) AO). The same data may fall under more than one category – an address as part of an invoice and in another context at the same time. In that case the longest applicable period governs. Once it expires, the data is deleted or anonymised.
6.Sharing with third parties
Your personal data is shared with third parties only where this is necessary to perform the contract (for example with my tax advisor) or where there is a legal obligation.
This website embeds no third-party content. Fonts, images and scripts are served exclusively from my own server. Opening the site therefore transfers no data to providers outside the EU.
7.Your rights
You have the right at any time:
- to information about the personal data stored (Art. 15 GDPR),
- to rectification of inaccurate data (Art. 16 GDPR),
- to erasure of your data (Art. 17 GDPR),
- to restriction of processing (Art. 18 GDPR),
- to data portability (Art. 20 GDPR),
- to object to processing (Art. 21 GDPR),
- to withdraw consent you have given (Art. 7(3) GDPR).
An informal email to info@origincoaching.de is enough. You will receive a reply within the statutory period of four weeks.
You also have the right to lodge a complaint with the competent supervisory authority (for Bavaria: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach).