Privacy Policy

Who is responsible

The controller for the processing described here is Katia Triggiani, Katia Triggiani Coaching & Consulting, Kurwenalstraße 7, 80804 Munich, Germany. You can reach me at [email protected] or +49 172 469 5268. Full details are in the Impressum.

I have not appointed a data protection officer, as this is not required for a business of this size.

Visiting the website

This site is a set of static files hosted on Cloudflare Pages (Cloudflare, Inc.). When you open a page, your browser sends technical data that the server records in order to deliver the page and to keep the service secure and available: your IP address, the page requested, the date and time, the referring page, and your browser and operating system.

The legal basis is my legitimate interest in operating a secure and functioning website (Art. 6 (1) (f) GDPR). These logs are not used to identify you, are not combined with other data, and are kept only for a short period by the hosting provider.

Cookies and analytics

This website sets no cookies. It needs none in order to work, and it does not use any for advertising or profiling. That is also why you are not being asked to accept anything.

For statistics I use Cloudflare Web Analytics. It counts page views and where visitors arrive from without storing anything on your device, without cookies, and without building a profile or following you across websites. No data is shared with advertising networks. The legal basis is my legitimate interest in knowing which pages are read (Art. 6 (1) (f) GDPR).

Fonts are served from this domain. The typefaces are downloaded and delivered from the same server as the site. No request is made to Google Fonts or any other font service, and therefore no data reaches them.

Contacting me

If you use the contact form, I receive the name, email address, the service you selected, and the message you wrote. If you write by email or call, I receive whatever you choose to share.

I use this only to answer you and, if it leads to working together, to organise that work. The legal basis is your consent (Art. 6 (1) (a) GDPR) together with the steps taken at your request prior to entering into a contract (Art. 6 (1) (b) GDPR). Enquiries that do not lead to an engagement are deleted once it is clear that they will not, unless a statutory retention period applies.

Form submissions are processed by Brevo (Sendinblue GmbH, Germany), which delivers the message to my inbox.

Newsletter and the free excerpt

If you ask for the free book excerpt or subscribe to the newsletter, I store your name and email address with Brevo (Sendinblue GmbH, Germany), which sends the emails on my behalf.

Subscription uses the double opt-in procedure: after you sign up, you receive an email asking you to confirm. Until you confirm, nothing is sent. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time using the unsubscribe link at the bottom of every email, or by writing to me — your address is then removed. To be able to prove that consent was given, the confirmation is logged.

Booking a call

Appointments are booked through Calendly (Calendly LLC, United States). If you follow a booking link you leave this website and the data you enter there — name, email address, and anything you add to the booking — is processed by Calendly under its own privacy policy, and passed to me so that the appointment can take place. The legal basis is the steps taken at your request prior to a contract (Art. 6 (1) (b) GDPR).

Transfers outside the EU

Cloudflare and Calendly are US companies. Where data reaches them, transfers are based on the European Commission’s adequacy decision for the EU–US Data Privacy Framework and, in addition, on Standard Contractual Clauses. Brevo processes data within the European Union.

Your rights

You have the right to:

• ask what data I hold about you and receive a copy of it (Art. 15 GDPR);
• have inaccurate data corrected (Art. 16 GDPR);
• have your data deleted, where no legal obligation requires me to keep it (Art. 17 GDPR);
• have processing restricted (Art. 18 GDPR);
• receive the data you gave me in a portable format (Art. 20 GDPR);
• object to processing based on legitimate interest (Art. 21 GDPR);
• withdraw any consent you have given, at any time and with effect for the future.

A request costs you nothing: write to [email protected].

You also have the right to complain to a supervisory authority. For this website that is the Bavarian Data Protection Authority for the Private Sector (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany).

Changes to this policy

I update this page when the website changes or when the law requires it. The date at the top tells you which version you are reading.