Site Logotype

Privacy Policy

Last updated: January 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Sandra de Riel Consulting
Berlin, Germany
Email: welcome@sandraderiel.com

As a sole proprietor, Sandra de Riel Consulting determines the purposes and means of processing personal data.

2. General Information on Data Processing

I take the protection of your personal data very seriously. Your data is processed confidentially and in accordance with statutory data protection regulations, in particular the GDPR, and this privacy policy.

This privacy policy explains:

  • what personal data is collected,
  • for what purposes it is processed,
  • on what legal basis this occurs, and
  • what rights you have as a data subject.
3. Accessing the Website

When you visit this website, the hosting provider automatically collects the following data in so-called server log files:

  • IP address
  • Date and time of access
  • Requested page or file
  • Browser type and version
  • Operating system
  • Referrer URL (if applicable)

This data is technically necessary to ensure the stability and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).

4. Hosting

This website is currently hosted by Bluehost. In the future, hosting may be transferred to IONOS.

The hosting provider processes personal data only to the extent necessary to fulfill its performance obligations and in accordance with my instructions.

A data processing agreement (DPA) exists or will exist with the respective hosting provider as required by Art. 28 GDPR.

5. Contact by Email or Contact Form

If you contact me via email or a contact form, the following data is processed:

  • Name
  • Email address
  • Message content

The data is used solely to process and respond to your inquiry. There is no further disclosure to third parties.

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

The data will be deleted once the inquiry has been fully processed and no statutory retention obligations apply.

6. Newsletter and Email Communication (KIT)

If you subscribe to my newsletter, your email address and any voluntarily provided data will be processed via KIT (formerly ConvertKit).

Newsletter registration uses the double opt-in procedure. You can unsubscribe at any time via the link included in each email.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data is stored until you withdraw your consent.

7. Scheduling and Communication Tools

17hats
Scheduling of appointments may take place via 17hats. In this context, personal data such as name, email address, and appointment details are processed.

Legal basis: Art. 6(1)(b) GDPR (contractual or pre-contractual measures).

Zoom
Online meetings may be conducted via Zoom. A client may explicitly opt in to having a coaching call recorded.

If a recording takes place, you will be informed in advance and your explicit consent will be obtained.

Legal basis:

  • Participation in meetings: Art. 6(1)(b) GDPR
  • Recordings: Art. 6(1)(a) GDPR (consent)

Recordings are stored securely and deleted once their purpose has been fulfilled, unless agreed otherwise.

8. Social Media Links

This website contains links to external social media platforms:

  • Instagram
  • LinkedIn
  • Substack

When clicking these links, you leave this website. The respective platform is responsible for data processing on its services.

Please refer to the privacy policies of the respective providers.

9. Cookies and Tracking

This website:

  • does not use tracking tools or analytics
  • does not set cookies that require consent

Only technically necessary processing may occur via the hosting provider.

10. Data Transfers to Third Countries

Some of the services used (e.g. KIT, Zoom) are based in or process data in third countries (such as the USA).

Data transfers take place on the basis of:

  • EU Commission adequacy decisions and/or
  • Standard Contractual Clausees pursuant to Art. 46 GDPR
11. Data Retention

Personal data is stored only for as long as necessary to fulfill its purpose or as required by statutory retention obligations.

12. Your Rights as a Data Subject

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact: welcome@sandraderiel.com

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

In Germany, the competent authority is the data protection authority of your federal state.

14. Changes to This Privacy Policy

I reserve the right to update this privacy policy to reflect legal or technical changes. The current version is always available on this website.