Privacy Policy

​This privacy policy explains how I, Yvonne Liew, collect and process personal data when you visit my website and use my coaching services.

 

I take the protection of your personal data very seriously and process it in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

 

1. Controller

​

The controller responsible for data processing on this website is:

 

Yvonne Liew

Mitterhoferstrasse 2

80687 Munich

Germany

E-mail: conversations@yvonneliew.com

 

If you have any questions about this privacy policy or the processing of your personal data, you can contact me using the details above.

 

No data protection officer has been appointed, as the legal requirements for mandatory appointment are not met.

 

2. Scope and Purpose of Processing

​

I process personal data when you:

 

• Visit my website

• Contact me (e.g. via contact form or e-mail)

• Book an appointment via Calendly

• Use my coaching services (typically via online video tools such as Google Meet or Zoom)

 

Unless otherwise stated, the legal basis for processing is:

 

• Article 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract)

• Article 6(1)(f) GDPR (legitimate interests, e.g. secure operation of the website, defence against misuse)

• Article 6(1)(a) GDPR (consent), particularly for cookies, tracking and certain marketing tools

 

3. Hosting and Website Provision

​

This website is hosted on the servers of:

 

Wix.com Ltd.

40 Namal Tel Aviv St.

Tel Aviv 6350671, Israel

Website: https://www.wix.com

 

When you visit my website, Wix processes various technical data (server log files), including:

​​

• IP address

• Date and time of the request

• Time zone difference to GMT

• Content of the request (specific page)

• Access status / HTTP status code

• Amount of data transferred

• Website from which the request comes (referrer)

• Browser type and version

• Operating system and device information​

 

​Purpose:

 

• Technical provision of the website

• Stability and security (e.g. defence against misuse, error analysis)

 

Legal basis:

 

• Article 6(1)(f) GDPR (legitimate interest in operating a secure and functional website)

​

Wix may use data centres outside the EU/EEA, including in Israel and the USA. For these transfers, Wix relies on appropriate safeguards (such as an adequacy decision for Israel and EU standard contractual clauses and/or participation in the EU–US Data Privacy Framework for US services). Further details can be found in Wix’s Privacy Policy: https://www.wix.com/about/privacy

 

4. Use of Cookies and Consent Management

​

This website uses cookies and similar technologies to:

​

• Ensure technical functionality of the website (necessary cookies)

• Provide certain convenience features

• Analyse website usage with your consent

 

Cookie consent on this website is managed by a consent management tool provided by Wix in cooperation with Usercentrics.

 

When you visit the website, the consent tool collects and stores information about the categories of cookies and tools you consent to or reject. This may involve:

​

• Your IP address 

• Date and time of consent

• Browser information

• Device information

• Consent status

 

Purpose:

 

• To obtain and manage legally valid consent for cookies and tracking tools

• To document your consent and preferences

 

Legal basis:

 

• Legal basis for the storage and documentation of your consent is Article 6(1)(c) GDPR in conjunction with § 25 TTDSG. Additionally, Article 6(1)(f) GDPR applies insofar as the processing serves to ensure legally compliant website operation.

• For non-essential cookies and tools (e.g. Google Analytics 4): Article 6(1)(a) GDPR (consent) in conjunction with § 25 TTDSG 

 

You can change or withdraw your consent at any time via the cookie settings displayed on the website.

​

5. Contact Form and E-mail Contact

 

You can contact me via a contact form on the website or directly via e-mail.

 

Data processed via contact form:

 

• Name

• E-mail address

• Your message (and any other fields you provide, e.g. subject, topic)

 

These details will be transmitted to me by e-mail and stored for the purpose of processing your enquiry.

 

Purpose:

 

• To process your enquiry and to communicate with you

• To initiate a potential coaching relationship

 

Legal basis:

 

• Article 6(1)(b) GDPR if your enquiry relates to coaching

• Otherwise Article 6(1)(f) GDPR 

 

Storage duration:

​

• Enquiries that do not lead to a client relationship are generally deleted after 12 months.

• If a coaching relationship results, your messages may be stored longer as part of the client file (see section “Client Data and Coaching Records”).

 

You are not obliged to provide your data, but I cannot respond to you without at least a valid e-mail address.

​

6. Appointment Booking via Calendly

 

For online appointment bookings I use:

 

Calendly LLC

1155 Peachtree St NE, Suite 1600

Atlanta, GA 30309, USA

Website: https://calendly.com

 

When you book an appointment, Calendly processes the data you enter, typically:

​

• Name

• E-mail address

• Selected date and time

• Any additional information you provide in the booking form

 

Calendly also processes technical data (e.g. IP address, browser details) for the provision of the service.

 

Your booking data may be transmitted to my calendar and e-mail system to confirm and manage appointments.

 

Purpose:

 

• Efficient scheduling and management of appointments

• Communication regarding the appointment

​

Legal basis:

​

• Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures)

• Article 6(1)(f) GDPR (efficient appointment management)

 

Calendly is a US-based provider. Data may be transferred to the USA. Calendly relies on appropriate safeguards (such as EU standard contractual clauses and/or participation in the EU–US Data Privacy Framework). Details can be found in Calendly’s privacy policy: https://calendly.com/privacy

 

7. Online Coaching Sessions

 

Online coaching sessions are typically conducted using:

 

Google Meet

Service provider: Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

(Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

 

Zoom

Service provider: Zoom Video Communications, Inc.

55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA

 

When you participate in an online session, the following data may be processed, depending on your settings:

 

• Display name

• E-mail address (depending on invitation method)

• IP address and technical connection data

• Audio and video data (if you enable camera and microphone)

• Chat messages within the session

• Time and duration of participation

 

I generally do not record sessions. If a recording is ever desired, this will only be done with your explicit prior consent (Article 6(1)(a) GDPR), and you will be transparently informed.

 

Purpose:

 

• Conducting coaching sessions remotely

• Ensuring effective and secure communication

 

Legal basis:

 

• Article 6(1)(b) GDPR (performance of the coaching contract)

• Article 6(1)(f) GDPR (legitimate interest in professional online communication tools)

 

Data may be processed on servers outside the EU, including in the USA. The providers rely on appropriate safeguards. Further information:

 

• Google Meet: https://policies.google.com/privacy

• Zoom: https://explore.zoom.us/en/privacy

 

8. Web Analytics with Google Analytics 4

 

This website uses Google Analytics 4 (GA4), a web analytics service provided by:

 

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

We have concluded a data processing agreement with Google in accordance with Article 28 GDPR.

 

Data processed:

​

• IP address 

• Device information 

• Approximate location 

• Click paths, pages visited, session duration

• Referrer URL 

• Technical events

 

IP addresses in GA4

Google Analytics 4 does not log or store full IP addresses. For users from the EU/EEA, IP addresses are processed only in a shortened form on EU-based servers and are not stored permanently.

 

Purpose:

​

• To analyse how visitors use this website

• To improve content and user experience

 

Legal basis:

 

• Article 6(1)(a) GDPR in conjunction with § 25 TTDSG 

 

You can withdraw your consent at any time with effect for the future by changing your cookie settings on this website.

 

Data transfers to third countries:

Data may be transferred to Google LLC in the USA. Google relies on appropriate safeguards. You can find details in Google’s privacy policy: https://policies.google.com/privacy

 

You can also prevent data collection by installing the browser add-on:

https://tools.google.com/dlpage/gaoptout

 

9. Client Data and Coaching Records

 

If you become my client, I process additional personal data, for example:

 

• Name, contact details

• Information about your concerns, goals and topics shared in coaching

• Session notes 

• Administrative data 

 

Data is currently stored locally on my own devices (e.g. computer) and not in a public cloud, with appropriate technical and organisational measures to protect confidentiality. These measures are regularly reviewed and updated where necessary.

 

Purpose:

 

• Preparation, implementation and documentation of coaching sessions

• Administration, billing and legal documentation

 

Legal basis:

 

• Article 6(1)(b) GDPR (performance of a contract)

• Article 6(1)(c) GDPR (legal obligations, e.g. tax and commercial law retention)

• Article 6(1)(f) GDPR (legitimate interest in documentation and defence of legal claims)

 

Storage duration:

 

• Basic client data and coaching notes: generally stored for the duration of the coaching relationship and then for three years after the end of the year in which the coaching ended, in accordance with the regular statutory limitation period under § 195 BGB.

• Invoices and tax-relevant documents: retained for 10 years in accordance with German tax law requirements.

 

After expiry of these periods, data will be deleted or anonymised unless longer storage is required in individual cases.

 

10. International Data Transfers

 

As outlined above, some service providers (e.g. Wix, Google, Calendly, Zoom) may process personal data outside the EU/EEA, particularly in the USA and Israel.

 

In these cases, data transfer is based on:

 

• An adequacy decision by the European Commission, and/or

• EU standard contractual clauses (SCCs) concluded with the provider, and/or

• Other appropriate safeguards under Article 46 GDPR.

 

More details can be found in the privacy policies of the respective providers.

 

11. Your Rights as a Data Subject

 

Under the GDPR, you have the following rights with regard to your personal data:

​

• Right of access (Article 15 GDPR): You can request information about whether I process your personal data and, if so, which data.

• Right to rectification (Article 16 GDPR): You can request the correction of inaccurate or incomplete data.

• Right to erasure (Article 17 GDPR): You can request deletion of your data under certain conditions.

• Right to restriction of processing (Article 18 GDPR): You can request restriction of processing in certain cases.

• Right to data portability (Article 20 GDPR): You can receive data you provided to me in a structured, commonly used and machine-readable format and transmit it to another controller, where technically feasible.

• Right to object (Article 21 GDPR): You can object to processing based on Article 6(1)(f) GDPR (legitimate interests) at any time on grounds relating to your particular situation.

• Right to withdraw consent (Article 7(3) GDPR): You can withdraw any consent you have given at any time with effect for the future.

 

To exercise your rights, please contact me using the contact details provided in section 1.

 

12. Right to Lodge a Complaint with a Supervisory Authority

 

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Article 77 GDPR).

 

The supervisory authority responsible for my place of business in Bavaria is:

 

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27

91522 Ansbach

Germany

Website: https://www.lda.bayern.de

 

13. Obligation to Provide Data

 

When using the website, you are not generally obliged to provide personal data. However, some functions require the processing of certain data. Without this data, you may not be able to use these functions.

 

For coaching clients, the provision of certain data is necessary for the conclusion and performance of the coaching agreement. Without this data, I cannot offer my services.

 

14. Automated Decision-Making / Profiling

 

I do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

 

15. Changes to this Privacy Policy

 

I may update this privacy policy from time to time, for example to reflect changes in the law or my services. The current version is always available on this website.

Please visit this page regularly to stay informed.

​

Last updated: 01.03.2026​