data protection

1. Information about the controller
We will inform you about the collection of personal data when using this website below. The controller within the meaning of Art. 4(7) of General Data Protection Regulation (“GDPR”) and other national data protection laws of the EU Member States as well as other data protection regulations is: Sonnenberger Coaching Karen Sonnenberger Neue Anlage 37 69198 Schriesheim Telefon: 0049 176 70799809 E-Mail: mail@sonnenberger-coaching.de We are not legally obliged to appoint a data protection officer.

 

2. General information about our data processing
We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. As a rule, collection and use of our users’ personal data is only undertaken with the respective user’s consent. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law. In cases where we have obtained consent on the part of the user (also referred to as the “data subject”) to process personal data, Art. 6(1)(a) GDPR serves as the legal basis for processing this personal data. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary in connection with pre-contractual activities. In cases where it is necessary to process personal data to comply with a legal obligation to which we are subject, Art. 6(1)(c) GDPR serves as the legal basis for such processing. Article 6(1)(d) GDPR serves as the legal basis in cases where processing personal data is necessary in order to protect the vital interests of the data subject or those of another natural person. If processing is necessary to protect a legitimate interest of ours or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh these interests, Art. 6(1)(f) GDPR serves as the legal basis for such processing. Personal data of the data subject will be erased or blocked as soon as the purpose for which the data is stored ceases to apply. Furthermore, data may be retained for longer periods if this has been provided for by European or national legislative bodies in EU regulations, laws or other rules to which the controller subject. Data will also be blocked or erased if a retention period prescribed by the laws referred to above has lapsed, unless there is a need for further retention of the data for the conclusion or performance of a contract. When you contact us by e-mail, the data you provide will be stored by us to respond to your question. We erase data collected in this context after retention is no longer necessary, i.e. the purpose for which it was retained no longer applies, or limit processing if statutory retention obligations apply. If we wish to use commissioned service providers for specific functions of our offerings, or use your data for marketing purposes, we will inform you in detail about the respective processes below. We will also indicate the defined criteria for the applicable retention period.

 

3. Your rights as a data subject
You have the following rights with regard to personal data concerning you:
–  Right of access
–  Right to rectification and/or completion or erasure
–   Right to restriction of processing
–   Right to erasure
–   Right to notification
–   Right to data portability
–   Right to object to processing
–   Right to withdraw consent
–   Automated individual decision-making, including profiling

You also have the right to lodge a complaint with a data protection supervisory authority concerning our processing of your personal data. If you have any questions, comments or requests regarding our collection, processing and use of your personal data, please contact us as well using the contact details provided above.

 

4. Collection of personal data when you visit our website

In general, it is possible to use our website without providing any personal data. When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website to you and to guarantee stability and security (legal basis: Art. 6(1)(f) GDPR):

–   IP address

–   Date and time of the request

–   Contents of the request (specific page)

–   Access status/HTTP status code

–   The amount of data transferred in each case

–   The referring website (type of browser)

–   Operating system of the user

–   Language and browser software version

This data is also stored in log files on our system. This does not apply to the IP addresses of the user or other data that would permit association of data with the user. This data is not stored together with other personal data of the user (legal basis: Art. 6(1)(f) GDPR). Data is stored in log files to ensure the functionality of the website. The data is also used to optimize the web page and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context. The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to enable provision of the website, this will be undertaken once the respective session has ended. Any data stored in log files will be erased within seven days at the latest. Retention for longer period is not possible. In this case, the user’s IP addresses will be erased or modified, so that it is not possible to associate the IP address with the requesting client. The collection of data for the provision of the website and the retention of data in log files is absolutely necessary for the operation of the website. Consequently, there is no option to object on the part of the user.

 

5. Use and application of cookies

Our website uses cookies. Cookies are small text files that are saved on the hard drive of your computer according to the web browser you use and that send certain information to the party who placed the cookie. Cookies cannot run programs or transmit viruses to your computer. Their purpose is to make our website more user-friendly and functional. The legal basis for processing personal data using cookies is Art. 6(1)(f) GDPR. Our websites use temporary and permanent cookies. Temporary cookies are automatically deleted when you log out or close your browser. Without limitation, these include so-called “session cookies”. They store a so-called “session ID” by means of which various requests from your browser can be assigned to a common session. This allows your browser to be recognized the next time you return to our website. Session cookies are deleted when you log out or close your browser. By contrast, permanent cookies are automatically deleted after a specified period that may vary depending on the cookie. You can delete the cookies at any time using your browser’s security settings. As a rule, our website can also be viewed without cookies. You can configure your browser settings according to your wishes, e.g. reject “third-party cookies” or reject all cookies in general. Cookies that have already been saved can be deleted at any time. This can also be done automatically.  Please note that some features on our website may not work if you have disabled cookies. The following list provides more information about how to change your cookie settings in the browser you are using: https://www.google.com/intl/en/policies/technologies/managing/ http://support.mozilla.com/en-GB/kb/Cookies#w_cookie-settings http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies/ http://www.apple.com/safari/features.html#security

 

6. Objection to or withdrawal of consent to the processing of your data

If you have given consent (Art. 6(1)(a) GDPR) to the processing of your data, you may withdraw it at any time. Such a withdrawal is relevant for purposes of the lawfulness of processing your personal data after you have informed us of your decision. You may object to processing in cases where we are processing your personal data on the basis of a weighing of interests. This is the case if the processing is not necessary, in particular in order to perform a contract to which you are a party. In such cases, we inform you accordingly in the description of the functions concerned (e.g. Art. 6(1)(f) GDPR). When asserting such an objection, we ask that you please explain the reasons why we should not process your personal data as we have previously. Should you have a legitimate objection, we will review the facts and either discontinue or modify our data processing or provide you with compelling legitimate grounds on the basis of which we intend to continue processing. Please send the withdrawal of your consent or your objection to: mail@sonnenberger-coaching.de.

 

7. CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service which organizes and analyzes the distribution of newsletters. The data you provide (e.g. your email address) to subscribe to our newsletter will be stored on CleverReach servers in Germany and/or Ireland. Sending our newsletters with CleverReach enables us to analyze the behavior of newsletter recipients. Among other things, we can find out how many recipients have opened the email containing the newsletter and how often various links contained therein are clicked. With the help of so-called conversion tracking, we can also analyze whether a predefined action (such as the purchase of a product on our website) takes place after clicking on the link in the newsletter. For more information on how data is analyzed by CleverReach, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/. We process your data provided you have given us your consent (Article 6 (1) a) GDPR). You may revoke your consent any time by unsubscribing from the newsletter. Your revocation does not affect the legality of the data processing that has already been carried out. If you do not want CleverReach to analyze your usage of the newsletter, you will have to unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter we send. You can also unsubscribe from the newsletter directly on the website. The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription. Then your data will be deleted from our servers and those of CleverReach. Data stored by us for other purposes (e.g. e-mail addresses for our Members section) remain unaffected thereof. For further information, please refer to the data privacy statement of CleverReach at: https://www.cleverreach.com/de/datenschutz/. Contract concluded for outsourcing data processing We have entered into an agreement with CleverReach for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.

 

8. reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam. For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html

 

9. Google Analytics

This website uses the functions of Google Analytics, a web analysis service. The operator is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. Cookies are text files stored on your computer that enable analysis of how you use our website. As a rule, the information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google Analytics cookies are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Browser plugin You may opt out of the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent data generated by the cookie and related to your use of the website (including your IP address) from being collected and processed by Google, by downloading and installing a browser plug-in from link provided below: https://tools.google.com/dlpage/gaoptout?hl=de This website uses Google Analytics with the extension “anonymizeIP()”, so that IP addresses are only processed in a truncated form in order to exclude the possibility of associating the IP address with a person. Further information on how Google Analytics processes user data can be found at: https://www.google.com/intl/de/policies/privacy/partners http://www.google.com/policies/technologies/ads http://www.google.de/settings/ads http://www.google.com/analytics/terms/de.html http://www.google.com/intl/de/analytics/learn/privacy.html Objection to data collection You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is then set which prevents the collection of your data on future visits to this website: https://tools.google.com/dlpage/gaoptout?hl=de

 

10.1. LinkedIn Plugin

This website uses functions of the network LinkedIn. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time a page on this website containing LinkedIn functions is accessed, a connection is made to LinkedIn servers. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button while you are logged in to your LinkedIn account, it is possible for LinkedIn to associate your visit to this website with you and your user account. Please note that we as the provider of these pages have no knowledge of the content of the data transferred or of the use thereof by LinkedIn. The use of the LinkedIn plugin takes place on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in ensuring as much visibility as possible on social media. For further information on this, please see the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy.

 

10.2. XING Plugin

This website uses functions of the network XING. The provider is XING AG, Dammtorstr. 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING functions is accessed, a connection is created to XING servers. To our knowledge, no storage of personal data takes place in the process. In particular, no IP addresses are stored, nor is user behavior analyzed. The storage and analysis of the data take place on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in ensuring as much visibility as possible on social media. Where consent to this has been requested (e.g., consent to store cookies), the processing takes place exclusively on the basis of point (a) of Article 6(1) GDPR; consent may be withdrawn at any time. For further information on data protection and the XING Share button, please see the XING data protection statement at https://www.xing.com/app/share?op=data_protection.

 

10.3. Instagram Plugin

Buttons of the Instagram service are included on our pages. These functions are provided by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of these pages, we are not aware of the content of the data transmitted or how Instagram uses it.

For more information, please see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

 

10.4. Facebook Plugin

This site uses social plugins (buttons) of the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be identified by one of the Facebook logos (e.g. white or blue “f” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin” or “share on Facebook”.

When a user clicks such a button on a website of Facing Finance (this website), his browser establishes a direct connection to Facebook’s servers. The content of the plugin is then transmitted directly from Facebook to your browser and integrated into the website. We therefore have no influence on the amount of data Facebook collects with the help of this plugin and therefore direct users to the following knowledge:

By clicking on the button, Facebook receives information that a user has called up the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for the  protection of users’ privacy, can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/

If a user is a Facebook member and does not want Facebook to use this offer to collect data about him or her and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting our website

 

11. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We do not give this data without yours Consent continues. The processing of the data entered into the contact form is therefore exclusively based on your consent (Art. 6 (1) lit. DSGVO). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. The information you provide in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or delete the purpose for data storage (for example, after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.

 

12. Data Security

All information that you transmit to us will be stored on servers within the European Union, unless otherwise stated in this Privacy Policy. Unfortunately, the transmission of information via the Internet is not completely secure. For this reason, we cannot guarantee the security of data transmitted to our website via the Internet. However, we secure our website and other systems against loss, destruction, access, alteration or dissemination of your data by unauthorized persons via appropriate technical and organizational measures.

 

13. No sharing of your personal data

We do not share your personal data with third parties unless you have consented to having your data shared or we are entitled or obliged to share data on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, emergency response or enforcing intellectual property rights.

 

14. Data protection and third-party websites

The website may contain hyperlinks to and from websites operated by third parties. If you follow a hyperlink to one of these websites, please note that we cannot assume any responsibility or guarantee for third-party content or data protection conditions. Please be sure to read the applicable privacy policy before submitting personal data to any third-party website.

 

15. Changes to our Privacy Policy

We reserve the right to amend our Privacy Policy at any time with future effect. The current version is available on the website. Please visit the website regularly and review the applicable data protection policies.

Karen Sonnenberger
Marktplatz 5 · 69469 Weinheim (Germany)
+49 176 70799809 · +49 6220 2561456
mail@sonnenberger-coaching.de