Privacy policy

Elena Kochler, Menzelstraße 9, 15831 Mahlow, Germany — hallo@elenakochler.com. I am the controller responsible for the personal data processed through this website.

Information you provide

• Contact details (name, email address, phone number) when you book a call, subscribe or write to me
• Booking details when you schedule a coffee chat or session through Calendly
• Payment information when you purchase a program (processed securely by third-party payment providers — I never see or store card details)
• Anything you choose to share with me during our sessions (strictly confidential)
• Feedback and testimonials you voluntarily provide

Automatically collected information

• Device and browser information
• IP address and approximate location
• Pages visited and time spent on the site
• Referral source (how you found this site)

• To provide, run and improve my services and this website
• To communicate with you about bookings, projects and updates
• To send the Escape the Ordinary newsletter (only with your consent, via Substack)
• To process payments securely
• To comply with legal and tax obligations

• Consent (Art. 6(1)(a)) — newsletter, non-essential cookies and embedded third-party content
• Contract (Art. 6(1)(b)) — delivering programs, sessions and bookings you request
• Legitimate interests (Art. 6(1)(f)) — keeping the site secure and understanding how it is used
• Legal obligation (Art. 6(1)(c)) — retaining invoices and tax records

• TLS/SSL encryption for all data transmitted to and from this site
• Secure third-party payment processors — payment details are never stored by me
• Access to personal data limited to a need-to-know basis
• Regular reviews of the tools and services I use
• Sensitive information shared in sessions is never recorded or stored digitally

Running this site and my work means a handful of processors are involved. Each has its own privacy policy, which I encourage you to read.

• Lovable / Cloudflare — website hosting and delivery
• Calendly — booking coffee chats and sessions
• Substack — newsletter signup and delivery
• YouTube (Google) — the embedded TEDx talk
• Stripe — secure payment processing where applicable
• Zoom — online sessions

Some of these providers are based outside the EU/EEA. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard under Art. 46 GDPR.

When you request a free resource (such as the audio guide) or sign up for one of my emails, you tick a consent box first. The legal basis for those emails is your consent under Art. 6 (1) (a) GDPR.

• I store your first name, your email address, the wording you consented to and the time of your consent — this documents the consent as required by the GDPR
• Emails you then receive: your access link, occasional impulses on nervous-system work and self-employment, and invitations to my masterclasses
• Delivery runs through Lovable's email infrastructure on my own sending domain (notify.elenakochler.com); my newsletter is delivered via Substack
• You can withdraw your consent at any time — use the unsubscribe link in any email or write to hallo@elenakochler.com; withdrawal does not affect emails already sent
• After withdrawal your address is removed from further sending; only the consent record is kept as long as needed to prove lawful processing
• Your data is never sold, rented or passed on for advertising purposes

• Only essential cookies and local storage are used to keep the site working and remember your cookie choice
• No advertising or cross-site tracking cookies are used
• Embedded content (Calendly, Substack, YouTube) may set its own cookies once loaded
• You can change or withdraw your choice at any time — see the cookie policy

• Enquiries and contact messages: for the duration of our relationship plus 2 years
• Payment and invoice records: as required by German law (usually up to 10 years)
• Newsletter subscribers: until you unsubscribe
• Session notes: securely destroyed 2 years after our last session

• Access — request a copy of the personal data I hold about you
• Rectification — have inaccurate data corrected
• Erasure — have your data deleted ('right to be forgotten')
• Restriction — ask me to limit how your data is used
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing, including direct marketing
• Withdraw consent — at any time, where processing is based on consent

You also have the right to lodge a complaint with a supervisory authority. In my case that is the data protection authority of the State of Brandenburg, Germany.

Questions about this policy, or want to exercise your rights? Write to hallo@elenakochler.com. I may update this policy from time to time; any changes appear on this page with a new "last updated" date.