Privacy Policy
Bornholdt Coaching | Status: April 2026
This privacy policy informs you about the type, scope, and purpose of the processing of personal data on the website of Bornholdt Coaching (hereinafter referred to as "website"). It applies to all persons who visit this website or use our digital services.
Content Overview
1. Data Controllers
2. Principles of Data Processing
3. Note on Google Services
4. Hosting (Framer)
5. Cookies and Consent Management
6. Web Analytics (Google Analytics)
7. Appointment Booking (Google Calendar)
8. Contact Form
9. Questionnaires (Google Forms)
10. Use of AI Tools
11. Online Sessions (Google Meet)
12. Use of Miro
13. Social Media (LinkedIn)
14. Your Rights as a Data Subject
15. Data Security
16. Updates and Changes to this Privacy Policy
1. Data Controllers
Name: Carolin Bornholdt
Company Name: Bornholdt Coaching
Address: Börnicker Str. 27b, 16356 Ahrensfelde
Email: hi [at] bornholdt - coaching . com
2. Principles of Data Processing
We only process personal data if permitted by law or if you have consented. The legal bases are:
• Art. 6 (1) (a) GDPR – Consent
• Art. 6 (1) (b) GDPR – Contract performance or pre-contractual measures
• Art. 6 (1) (c) GDPR – Legal obligation
• Art. 6 (1) (f) GDPR – Legitimate interests
National Data Protection Regulations: In addition to the GDPR regulations, national data protection laws in Germany apply, especially the Federal Data Protection Act (BDSG). The BDSG contains specific regulations regarding the right to information, deletion, objection, and the processing of special categories of personal data. State data protection laws of individual federal states may also apply.
3. Note on Google Services
We use several services from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Ltd. may transfer data to servers of Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Google Ireland Ltd. in accordance with Art. 28 GDPR. This note applies to all Google services listed below; we will not repeat this in the individual sections.
Google Services used specifically:
● Google Analytics – Web Analytics (Section 6)
● Google Tag Manager – Tag Management and Cookie Banner (Section 6)
● Google Calendar – Appointment Booking (Section 7)
● Google Workspace – Email Communication (Section 8)
● Google Meet – Online Sessions (Section 11)
● Google Forms – Questionnaires (Section 9)
Further information on data privacy at Google: https://policies.google.com/privacy
4. Hosting (Framer)
This website is hosted by Framer B.V., Rozengracht 207A, 1016 LZ Amsterdam, Netherlands. When you visit the website, technical access data (IP address, browser type, visited pages, date and time) is automatically collected and stored on Framer's servers. The storage duration of the log files depends on Framer's settings. Framer may transfer data to the US; this transfer is based on the standard contractual clauses of the EU Commission.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).
Further information: https://www.framer.com/privacy
5. Cookies and Consent Management
Our website uses cookies. Technically necessary cookies are set without consent (Art. 6 (1) (f) GDPR). For non-essential cookies (e.g., analytics and marketing cookies), we obtain your consent via a cookie banner (Art. 6 (1) (a) GDPR).
You can withdraw your consent at any time, effective for the future, by adjusting your cookie settings via the dedicated link in the website footer.
6. Google Tag Manager and Web Analytics (Google Analytics)
Google Tag Manager
We use the Google Tag Manager, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool that allows us to manage website tags via an interface. The Tag Manager itself does not process personal data, but triggers other tags that might collect data. On our website, the Google Tag Manager is specifically used to integrate the cookie banner and to control the activation of Google Analytics 4 – Google Analytics is only activated after consent has been given.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in efficient website tag management). Further information: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/
Google Analytics 4
This website uses Google Analytics 4 (GA4), a web analysis service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. GA4 is integrated via the Google Tag Manager and only activated upon your consent. Google Analytics uses cookies that enable an analysis of how the website is used.
IP Anonymization
Google Analytics 4 (GA4) anonymizes IP addresses by default. A complete IP address is not stored by Google. Additionally, we have limited data retention to 14 months.
Legal Basis and Withdrawal
The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings. Furthermore, you can prevent data collection by Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout.
7. Appointment Booking (Google Calendar)
To schedule appointments, we use Google Calendar, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. When you schedule an appointment via our website, data (specifically name, email address, and the selected slot) is processed.
Data processing is carried out within the Scope of the Google Data Processing Agreement described in Section 3.
Legal basis: Art. 6 (1) (b) GDPR (performance of pre-contractual measures).
8. Contact Form
When you use our contact form, the data you provide (name, email address, message) is processed to handle your inquiry. This data is processed only to respond to your request and is not used for other purposes or shared with third parties without authorization.
Incoming messages are received and stored via Google Workspace (see Section 3 on Google Services).
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in answering requests).
Inquiries without a subsequent contract are deleted after 6 months at the latest. Within this period, we may contact you once regarding the inquiry. If a contract is established from an inquiry, statutory retention periods apply (6 years for business correspondence, 10 years for tax-relevant documents under the German Commercial Code/Fiscal Code HGB/AO).
9. Questionnaire (Google Forms)
We use Google Forms for questionnaires (e.g., to prepare for an initial consultation). The data you enter is processed on Google's servers (see Section 3 on Google Services).
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual welfare).
10. Use of AI Tools
We may use AI-powered tools (e.g., Gemini, Seraia) to prepare and follow up on coaching sessions, as well as to create materials. No personal client data (such as real names) is entered into these systems. Use is restricted to anonymized or general content.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in efficient workflow organization).
11. Online Sessions (Google Meet)
We use Google Meet to conduct online coaching sessions. This involves processing connection data as well as audio and video data (see Section 3 on Google Services).
Legal basis: Art. 6 (1) (b) GDPR (contract performance).
12. Use of Miro
For interactive coaching sessions, we use Miro, a service provided by Miro Amsterdam B.V., Singel 542, 1017 AZ Amsterdam, Netherlands. A data processing agreement has been concluded with Miro Amsterdam B.V. pursuant to Art. 28 GDPR. Miro uses sub-processors in the USA (including Amazon Web Services); data transfer is based on EU Commission standard contractual clauses.
Legal basis: Art. 6 (1) (b) GDPR (contract performance).
Further information: https://miro.com/legal/privacy-policy/
13. Social Media (LinkedIn)
We maintain a presence on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). When you visit our LinkedIn page, data is collected and processed by LinkedIn. As the page operator, we are jointly responsible with LinkedIn for processing visitor data on our page in accordance with ECJ case law (joint responsibility under Art. 26 GDPR). Our control over data processing by LinkedIn is limited. We recommend reading LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.
14. Your Rights as a Data Subject
Under the GDPR, you have the following rights:
• Access (Art. 15 GDPR): You can request information about the personal data stored about you.
• Rectification (Art. 16 GDPR): You can request the correction of incorrect data.
• Erasure (Art. 17 GDPR): You can request the erasure of your data, provided no statutory retention obligations conflict with this.
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR): You have the right to object to the processing of your data based on Art. 6 (1) (f) GDPR.
• Withdrawal of consent (Art. 7 (3) GDPR): You can withdraw consent at any time with future effect.
To exercise your rights, please contact: hi@bornholdt-coaching.com
You also have the right to lodge a complaint with a data protection supervisory authority. The responsible authority for Brandenburg is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, https://www.lda.brandenburg.de
15. Data Security
We use technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, or unauthorized access. Our website uses SSL/TLS encryption (indicated by https:// in the address bar).
16. Updates and Changes to this Privacy Policy
This privacy policy is currently valid and updated as of April 2026. Due to further development of our website or changed legal or regulatory requirements, it may become necessary to adjust this privacy policy. We recommend reading this privacy policy regularly.