Privacy Policy

1. Data Controller

For questions about data protection, contact the email address above.

2. What Data We Collect

We collect data in two ways:

Data You Give Us Directly

• Name (from contact form or coaching inquiry)
• Email address (from contact form, coaching inquiry)
• Phone number (optional, from coaching inquiry)
• Message content (from contact form)
• Coaching goals and information (from coaching intake form)

Data Collected Automatically

• Pages you visit on our website
• Time spent on each page
• Device type (phone, tablet, computer)
• Browser type
• Approximate location (city level, from IP address)
• Links you click
• How you found our website (referrer)

This automatic data comes from Google Analytics (website visitor tracking), cookies on your device, and web server logs.

3. Why We Collect This Data (Legal Basis)

Contact Form Submission

Why: To answer your question
Legal reason: Legitimate interest (responding to your message)

Coaching Inquiry Details

Why: To assess if we can help
Legal reason: Legitimate interest

Website Analytics (Google Analytics)

Why: To improve our website
Legal reason: Your consent (cookie banner)

4. Who We Share Your Data With

Google Analytics

What they do: Track website visitor behavior
Their privacy policy: https://policies.google.com/privacy
Data they receive: Pages visited, time on site, device type, anonymized IP
Legally protected by: Data Processing Agreement (DPA)

Hosting Provider (Hostinger)

What they do: Host our website
Their privacy policy: https://www.hostinger.com/privacy-policy
Data they receive: Server logs with IP addresses

5. How Long We Keep Your Data

• Contact form message: 30 days after we reply
• Coaching client data: 2 years
• Google Analytics data: 26 months
• Website logs: 30 days

6. Your Rights

You have the following rights under German and EU law:

Right to Access

You can ask for a copy of all data we hold about you. Email heiko@heikostribl.com. Response within 30 days. Free for the first request per year.

Right to Correction

You can ask us to fix incorrect data about you. Response within 30 days.

Right to Deletion (Right to Be Forgotten)

You can ask us to delete your data. Email heiko@heikostribl.com with subject "Please delete my data". Response within 30 days. Exceptions: If we are required by law to keep it (e.g., tax records for 7 years).

Right to Object

You can ask us to stop processing your data for certain purposes. Email heiko@heikostribl.com with subject "Opt-out Request".

How to opt-out of specific things:

• Analytics tracking: Adjust your preferences in the cookie banner

Right to Portability

You can ask for your data in a portable format (CSV or JSON file). Email with subject "Data Portability Request". Response within 30 days.

Right to Lodge a Complaint

If you believe we have violated your data protection rights, you can complain to the German Data Protection Authority:

Landesbeauftragte für Datenschutz Baden-Württemberg
Website: https://www.baden-wuerttemberg.datenschutz.de/

7. International Data Transfers

Some of our service providers (Google, etc.) may process your data in the United States. This is permitted under the EU-US Data Privacy Framework, which provides adequate data protection safeguards. We have signed Standard Contractual Clauses (SCCs) with all service providers to ensure your data is protected.

8. Data Breach

If your personal data is compromised, we will:

• Notify you within 72 hours (by email)
• Explain what happened
• Tell you what steps we are taking
• Explain your rights

9. Changes to This Policy

We may update this privacy policy. We will notify you of significant changes by email or by posting notice on our website.

Last updated: 23 September 2026