1. Controller

The data controller responsible for data processing on this website is:

Katharina Thor
Carrer des Celler 1
07650 Santanyí
Spain
Email: katharina.thor@gmx.de

2. General Information

I take the protection of your personal data very seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

This website is hosted by Squarespace, which processes personal data on my behalf as a data processor.

3. Data Collection on This Website

a) Website Hosting & Analytics (Squarespace)

This website uses Squarespace Analytics to monitor website performance and usage.
Squarespace may collect technical data such as:

• IP address (anonymized where possible)

• Device and browser information

• Pages visited and access times

No additional third-party cookies or external tracking tools (such as Google Analytics or Meta Pixel) are used.

Legal basis:
Art. 6(1)(f) GDPR – legitimate interest in website functionality and optimization.

b) Newsletter (Squarespace Email Campaigns)

If you subscribe to the newsletter, your email address and name (if provided) will be stored and processed via Squarespace Email Campaigns.

Your data is used exclusively to send newsletters and updates.
You may unsubscribe at any time via the link provided in each newsletter.

Legal basis:
Art. 6(1)(a) GDPR – consent.

c) Contact via Email

When you contact me via email, the data you provide will be stored solely for the purpose of responding to your inquiry.

Legal basis:
Art. 6(1)(b) GDPR – pre-contractual measures or contract fulfillment.

4. Coaching, Courses & Payments (Squarespace)

When purchasing coaching sessions or online courses through this website, personal data such as:

• Name

• Email address

• Billing details

• Payment information

is processed via Squarespace Payments.

Payment details are processed securely by Squarespace and its integrated payment providers. I do not store full payment data.

Legal basis:
Art. 6(1)(b) GDPR – contract fulfillment
Art. 6(1)(c) GDPR – legal obligations (accounting)

5. Booking Tool (Calendly)

For scheduling coaching sessions, I use Calendly.

When booking an appointment, Calendly processes your:

• Name

• Email address

• Appointment details

Calendly acts as an independent data controller.
Calendly’s privacy policy applies in addition.

Legal basis:
Art. 6(1)(b) GDPR – contract fulfillment.

6. Data Retention

Personal data is stored only as long as necessary for the stated purposes or as required by statutory retention obligations.

7. Your Rights

You have the right to:

• Access your data

• Rectify inaccurate data

• Request deletion

• Restrict processing

• Data portability

• Withdraw consent at any time

Requests can be sent to:
📧 katharina.thor@gmx.de

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence or in Spain.

9. SSL Encryption

This website uses SSL encryption to protect the transmission of confidential information.

10. Changes

This privacy policy may be updated to reflect legal changes or service modifications.