https://spritual-soul-art.com
Welcome to Spiritual -Soul Art - Alexandra Hettel - Consulting Coaching Mediation
Preliminary remark:
This text is a translation of the original German version. Translations into other languages are provided for informational purposes only. In the event of any discrepancies or differences in interpretation, the German version shall prevail.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Alexandra Hettel
Beratung Coaching Mediation / Spiritual Soul Art
Mueller-Jung-Str. 4
76476 Bischweier
Germany
Email: mail@spiritual-soul-art.com
2. General Information on Data Processing
We process personal data only to the extent necessary to provide this website, communicate with you, deliver our services, or comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person.
Where you have given us your consent, processing is carried out on the basis of Art. 6(1)(a) GDPR.
Where processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, processing is carried out on the basis of Art. 6(1)(c) GDPR.
Where processing is necessary for the purposes of our legitimate interests and your interests, fundamental rights or freedoms do not override those interests, processing is carried out on the basis of Art. 6(1)(f) GDPR.
3. Hosting and Provision of the Website
This website is hosted by Hostinger.
When you access our website, the web server may process technically necessary data. This may include, in particular, your IP address, date and time of access, pages or files accessed, browser type, operating system and other technical connection data.
This processing serves to ensure the secure and reliable provision of the website and to detect and prevent technical disruptions or misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional provision of our website.
Further information:
https://www.hostinger.com/de/legal/datenschutz-bestimmungen
4. Cookies and Technically Necessary Functions
Our website does not use cookies for analytics, tracking or advertising purposes.
Where cookies or comparable technical information are used, they serve exclusively to provide technically necessary website functions, for example to operate password-protected areas, maintain login status or store technically required settings.
Strictly necessary cookies may be used without consent where they are required to provide a digital service expressly requested by the user.
In particular, we do not use Google Analytics, the Facebook Pixel or comparable analytics or marketing trackers on this website.
5. Password-Protected Area and User Access
Certain content on our website is provided in a password-protected area.
Access credentials are assigned individually by us and are used to enable authorised users to access the content intended for them.
In this context, data such as username, access authorisation, login status and technically necessary connection and session data may be processed.
Password protection is implemented using Sitely’s integrated user and password functionality.
Where access forms part of a contract or an agreed service, processing is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in access control and the protection of content that is not intended to be publicly available.
User accounts are deleted or deactivated when access authorisation ends and no further storage is required.
6. Backup of the Website Project File via iCloud
We use Apple iCloud to back up our website project file.
The website project file may contain access credentials for the password-protected user area, in particular usernames and passwords.
The data is stored for the purpose of securing and restoring the website project file on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure backup and restoration of our website data.
Apple’s privacy policy also applies to data processing carried out by Apple.
Further information:
https://www.apple.com/de/legal/privacy/de-ww/
7. Contact via Contact Form and Email
If you contact us via our contact form or by email, we process the information you provide in order to handle your enquiry.
This may include, in particular, your name, email address, message and any other information you provide voluntarily.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures.
In other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in responding to enquiries.
Where processing is based on your consent, the legal basis is Art. 6(1)(a) GDPR.
The data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations or other legitimate reasons require further storage.
8. Contact by Telephone
If you contact us by telephone, your telephone number and the information required to deal with your enquiry may be processed.
Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling your enquiry and being able to return your call.
Where the contact relates to a contract or pre-contractual measures, Art. 6(1)(b) GDPR also applies.
9. Proton Mail
We use Proton Mail, a service provided by Proton AG based in Switzerland, for our email communication.
Proton provides encrypted communication services. The specific level of encryption depends on the type of communication used.
Processing is carried out, depending on the reason for the communication, on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.
Further information:
https://proton.me/de/legal/privacy
10. Proton Meet
We primarily use Proton Meet, a service provided by Proton AG based in Switzerland, for online meetings.
Proton Meet uses end-to-end encryption. Technically necessary data may be processed in order to provide the service.
Where the online meeting is connected with a contract or a pre-contractual enquiry, processing is carried out on the basis of Art. 6(1)(b) GDPR.
In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure option for online meetings.
Further information:
https://proton.me/meet/privacy-policy
11. Proton Drive
We use Proton Drive, a service provided by Proton AG based in Switzerland, to provide certain videos, audio files and downloads.
When you open a corresponding sharing link, technically necessary data relating to access may be processed. This may include, in particular, the time of access and technical information relating to the use of the sharing link.
Files and shared content stored in Proton Drive are end-to-end encrypted.
Where the provision of the content forms part of a contract or an agreed service, processing is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR.
Further information:
https://proton.me/de/drive/privacy-policy
12. Zoom as an Alternative Video Conferencing Solution
If Proton Meet is unavailable for technical reasons or the use of Zoom is required in an individual case, Zoom may be used as an alternative video conferencing solution.
When Zoom is used, data such as your name, technical connection data, and audio and video data may be processed where the corresponding functions are used during a meeting.
Processing is carried out, depending on the reason for the meeting, on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.
Zoom is not used as our standard solution, but only as an alternative where required.
Further information:
https://www.zoom.com/de/trust/privacy/privacy-statement/
13. Contact via Messenger Services
As an alternative to contacting us by telephone or email, we may offer communication via messenger services.
Use of these services is voluntary and serves communication with you in connection with our services.
We may use the following messenger services:
Signal:
https://signal.org/legal/
Telegram:
https://telegram.org/privacy
Threema:
https://threema.ch/privacy
Depending on the service used, data such as your telephone number, username, profile information, communication content and technical connection data may be processed.
Processing is carried out, depending on the reason for the communication, on the basis of Art. 6(1)(a), (b) or (f) GDPR.
The privacy policies of the respective messenger providers also apply to data processing carried out by them.
14. Payment by Bank Transfer
If you pay by bank transfer, the personal data required to process the payment will be processed.
This may include, in particular, your name, bank account details, payment amount, payment reference and transaction data.
Processing is carried out for the performance of the contract on the basis of Art. 6(1)(b) GDPR and, where statutory retention obligations apply, on the basis of Art. 6(1)(c) GDPR.
Our bank is:
Deutsche Apotheker- und Ärztebank eG (apoBank)
Richard-Oskar-Mattern-Straße 6
40547 Düsseldorf
Germany
Further information:
https://www.apobank.de/datenschutz
15. Payment Processing via Stripe
Where payment via Stripe is offered for our services and selected by you, the data required to process the payment will be processed by Stripe.
This may include, in particular, your name, contact details, payment details, transaction data and technical data.
Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR and, where required, for compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.
Further information:
https://stripe.com/de/privacy
16. Payment Processing via Wise
Where payment via Wise is offered and used by you, the personal data required to process the payment will be processed by Wise.
This may include, in particular, your name, bank account details, payment amount and transaction data.
Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR and, where applicable, for compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.
Further information:
https://wise.com/privacy-policy
17. Google Business Profile
We maintain a business profile on Google.
Users can access information about our business through this profile and may also leave reviews.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If you access our Google Business Profile or publish a review there, personal data is processed by Google in accordance with Google’s privacy policy.
We maintain the business profile on the basis of our legitimate interest in presenting our services publicly pursuant to Art. 6(1)(f) GDPR.
No Google analytics or tracking services are integrated into our own website, and the Google Business Profile is not embedded on our website.
Further information:
https://policies.google.com/privacy
18. Disclosure of Personal Data and Data Processing on Our Behalf
Personal data is disclosed to third parties only where this is necessary to provide our services, comply with legal obligations or where another legal basis applies.
Where external service providers process personal data on our behalf, we enter into a data processing agreement with them pursuant to Art. 28 GDPR, where legally required.
19. Transfers of Data to Third Countries
When using certain service providers, personal data may be processed outside the European Union or the European Economic Area.
Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met.
Depending on the provider, data transfers may in particular be based on an adequacy decision by the European Commission, appropriate safeguards pursuant to Art. 46 GDPR, Standard Contractual Clauses or, for appropriately certified companies in the United States, the EU-U.S. Data Privacy Framework.
20. Storage Period and Deletion
Personal data is stored only for as long as necessary for the respective purpose of processing.
Once the purpose of processing no longer applies, the data will be deleted unless statutory retention periods or other legal reasons require continued storage.
Where commercial or tax law retention obligations apply, the relevant data will be retained for the period required by law.
After expiry of the relevant retention period, the data will be deleted unless another legal basis requires continued storage.
21. Automated Decision-Making and Profiling
We do not use automated decision-making within the meaning of Art. 22 GDPR and do not carry out profiling.
22. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.
Data transmitted between your browser and our website is protected by SSL/TLS encryption.
23. Your Rights
Subject to the applicable legal requirements, you have the right:
to obtain access to your personal data pursuant to Art. 15 GDPR,
to have inaccurate data corrected pursuant to Art. 16 GDPR,
to request deletion pursuant to Art. 17 GDPR,
to request restriction of processing pursuant to Art. 18 GDPR,
to data portability pursuant to Art. 20 GDPR,
and to object to processing pursuant to Art. 21 GDPR.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.
24. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
(Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg – LfDI BW)
Heilbronner Straße 35
70191 Stuttgart
Germany
Postal address:
Postfach 10 29 32
70025 Stuttgart
Germany
Telephone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Irrespective of this, you may also contact a data protection supervisory authority, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement.
25. Updates to this Privacy Policy
This Privacy Policy will be updated if the services we use, the technical configuration of our website or the applicable legal requirements change.
Last updated: September 2026
