Privacy Policy — Datenschutzerklärung

1. Who I Am

This website is operated by:

Afra Nobahar , Wilhelm-Hauff Str 12. berlin 12159 afraalala817@gmail.com

I operate as a small business under the German Kleinunternehmer regulation (§19 UStG) and am not required to charge or state VAT.

For any questions about this policy or your data, contact me at afraalala817@gmail.com.

2. What Data I Collect, and Why

I collect only the data needed to run sessions, take bookings, process payments, and — if you choose to sign up — send occasional emails. Here is exactly what is collected, by which tool, and why:

Cal.com (booking) When you book a session, Cal.com collects your name, email address, the time of your booking, and any notes you provide in the booking form (including intake questions). This data is used to schedule and prepare for your session. Cal.com's own data processing terms apply; you can review them at cal.com/legal.

Stripe (payment) Payment for sessions is processed through Stripe, which is integrated via Cal.com. Stripe collects and processes your payment details directly — I do not see or store your card information. Stripe acts as an independent data controller for payment data; their privacy policy is available at stripe.com/privacy.

Mailchimp (email list / Tuesday Circle sign-up) If you sign up for the Tuesday Circle or newsletter, your email address and the date/time of your consent are stored in Mailchimp. Mailchimp is based in the United States and is certified under the EU-U.S. Data Privacy Framework, which provides a recognized legal basis for this data transfer. I use double opt-in: after signing up, you will receive a confirmation email and must actively confirm before being added to the list.

Jitsi Meet (collective readings) Tuesday Circle sessions are hosted on Jitsi Meet. No account is required to join. During the call, your IP address is processed by the video call infrastructure, as is standard for any video call service. [If self-hosted, add: "This instance is self-hosted and no data is shared with third parties." If using the public server, add: "This uses Jitsi's public meet.jit.si server; see jitsi.org/meet-jit-si-privacy for their terms."]

3. Legal Basis for Processing

• Booking and payment data is processed to fulfil a contract with you (Art. 6(1)(b) GDPR) — i.e., to deliver the session you booked and paid for.
• Email list data is processed based on your explicit consent (Art. 6(1)(a) GDPR), given via double opt-in.

4. How Long I Keep Your Data

• Booking and payment records are kept for the period required by German tax law (currently up to 10 years for financial records), even if you unsubscribe from the email list or request account deletion.
• Email list entries are kept until you unsubscribe or request deletion.
• Session notes, if any, are kept only as long as needed to serve you and are deleted or anonymized after [YOUR CHOSEN PERIOD — e.g. 12 months].

5. Your Rights

Under GDPR, you have the right to:

• Request access to the data I hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements, e.g. tax records)
• Withdraw consent at any time (e.g. unsubscribe from the email list — a link is included in every email)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email afraalala817@gmail.com. Requests will be handled within 30 days.

6. Cookies and Analytics

This website does not currently use cookies.

7. Changes to This Policy

This policy may be updated as the business develops — for example, when new tools or product lines (such as the planned mobile app) are introduced. The "last updated" date at the top will reflect the most recent version.