for Services by Anna Graue (Mentoring, Events, and Digital Resources)

1. General Information

This Privacy Policy explains how your personal data is collected, used, and protected when you engage with services provided by Anna Graue, including mentoring, events, and digital content (such as audio guides and newsletters). Anna Graue is committed to complying with the General Data Protection Regulation (GDPR).

2. Data Controller

Anna Graue

Lutherstr. 64, 09126 Chemnitz, Germany

Email: info@annagraue.com

3. What Personal Data Is Collected?

We may collect the following personal information:

• Name, email address, phone number, and billing address
• Booking details and session records (e.g., date, duration, type of session)
• Payment and invoice information
• Personal reflections, goals, and communication shared in sessions
• Information voluntarily submitted through contact forms or surveys

4. How Your Data Is Used

Your data is processed for the following purposes:

• To deliver coaching and mentoring services
• To manage event participation and scheduling
• For invoicing and payment processing
• To respond to inquiries or client support needs
• For legal or tax documentation (as required by law)
• With your consent, to send occasional updates, resources, or newsletters

5. Legal Basis for Processing

Your data is processed under one or more of the following lawful bases:

• Your explicit consent (Art. 6(1)(a) GDPR)
• Contractual necessity (Art. 6(1)(b) GDPR)
• Legal obligations (Art. 6(1)(c) GDPR)
• Legitimate interest in providing and improving services (Art. 6(1)(f) GDPR)

6. Data Retention

Personal data is retained for up to 2 years after your last session or purchase, unless longer retention is required by law or you request earlier deletion. Data collected for invoicing is retained according to German tax law (typically 10 years).

7. Third-Party Services

We may use GDPR-compliant external providers to support service delivery, such as:

• Zoom for video calls
• Email services (IONOS, Gmail)
• Hosting providers (IONOS)
• Payment processors (e.g., PayPal, Stripe) All third parties are contractually obligated to comply with applicable data protection laws.

8. Cookies and Website Tracking

If you visit the website, cookies may be used to collect usage statistics or improve user experience. You can opt out via your browser settings. No personally identifiable information is stored via cookies without your consent.

9. Your Rights under GDPR

You have the right to:

• Request access to your personal data
• Correct or update inaccurate data
• Request data deletion, unless retention is legally required
• Withdraw your consent at any time
• Object to data processing in certain circumstances
• File a complaint with a data protection authority (e.g. BfDI in Germany)

10. Data Security

We take reasonable measures to protect your personal data from loss, misuse, or unauthorized access. Communication through email or other internet-based tools can involve security risks that are beyond our control.

11. Changes to This Policy

This policy may be updated periodically. You will be informed of any material changes. The current version is always available at www.annagraue.com/legal.