Privacy policy

This is a convenience translation. The German version is legally binding: /de/datenschutz

1. Controller

Liliia Alekseenko
c/o IP-Management #11058
Ludwig-Erhard-Straße 18
20459 Hamburg
Germany
Phone: +49 1520 3069273
Email: liliya.alekseenko@gmail.com

This privacy policy explains which personal data is processed when you visit this website, contact me, book an appointment online, or interact with my social media profiles.

2. No cookies, no tracking

This website sets no cookies and uses no analytics or tracking services. Fonts are loaded from my own server; no connection to Google or other third-party servers is made when you open a page.

3. Hosting and server log files

This website is hosted by Netlify, Inc. (San Francisco, USA). When you open the website, Netlify automatically processes data transmitted by your browser: IP address, date and time of access, page requested, referrer URL, and browser and operating system details. This data is technically necessary to deliver the website and keep it secure.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website).
• A data processing agreement with Netlify is in place (Art. 28 GDPR). Transfers to the USA are based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), alternatively on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
• More information: netlify.com/privacy

4. Contact form

If you write to me via the contact form, your name, email address and message are processed to answer your request. Form data is transmitted and stored via Netlify Forms (see section 3).

• Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
• Retention: I delete the data once your request has been fully handled, unless statutory retention obligations apply.

5. Contact by email, phone, WhatsApp or Telegram

If you contact me by email, phone or messenger, I process your details (e.g. name, contact details, message content) to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR. The data is deleted once the request has been dealt with, unless statutory retention obligations apply.

• Email: my mailbox is operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework.
• WhatsApp: provided by WhatsApp Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland), a Meta company. Data may be transferred to the USA (EU-U.S. Data Privacy Framework).
• Telegram: provided by Telegram FZ-LLC (Dubai, United Arab Emirates). There is no EU adequacy decision for the UAE, so a level of data protection equivalent to the GDPR cannot be guaranteed. If you prefer to avoid this, please use email, phone or the contact form.

The contact buttons on this website are plain links. Data is only transmitted to WhatsApp, Telegram, Calendly or Instagram when you click the respective link; the provider's own privacy policy then also applies.

Important note for coaching clients: please do not send me health data or in-depth details about mental or physical strain (special categories of personal data under Art. 9 GDPR) via messengers or social media. A personal conversation is the right place for that.

6. Online booking via Calendly

For online appointment booking I use Calendly, provided by Calendly LLC (271 17th St NW, Ste 1000, Atlanta, GA 30363, USA). When you book an appointment, the data you enter (usually name, email address, possibly phone number and the topic of the session) as well as your IP address and the date and time of booking are transmitted to and stored by Calendly.

• Purpose: convenient scheduling and the preparation and delivery of the booked coaching.
• Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient scheduling).
• Third-country transfer: Calendly LLC is certified under the EU-U.S. Data Privacy Framework. In addition, a data processing agreement including the EU Standard Contractual Clauses is in place with Calendly.
• Retention: until the purpose no longer applies (e.g. after the appointment) or you request deletion; statutory retention periods remain unaffected.
• More information: calendly.com/privacy

7. Social media profiles (Instagram, Facebook, Threads)

I maintain profiles on Meta's platforms. For their operation I am a joint controller under Art. 26 GDPR with Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta"). No social media plugins are embedded on this website, only links to my profiles.

Purpose and legal basis: I use my social media channels for professional communication, to inform about my coaching services, to interact with prospects and clients and to acquire new clients (Art. 6(1)(f) GDPR). If you contact me by direct message to enquire about coaching, processing takes place for pre-contractual measures (Art. 6(1)(b) GDPR).

Interactions: if you like, comment on or share my posts or send me direct messages, I process the data you provide (e.g. username, message text, profile picture) to interact with you or answer your request.

Page Insights: Meta provides me with anonymised statistics ("Insights") which Meta collects using cookies. I only see aggregated data (e.g. age structure, clicks, regions) and have no access to personal data of individual users. Legal basis: Art. 6(1)(f) GDPR. The joint controller agreement with Meta: facebook.com/legal/terms/page_controller_addendum.

Third-country transfer: Meta Platforms Ireland Ltd. transfers data to Meta Platforms, Inc. in the USA on the basis of the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

As Meta has primary access to platform user data, it is advisable to exercise access requests and other rights directly with Meta. You can of course also contact me; I will forward your request where necessary.

8. Your rights

Under the GDPR you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Art. 21 GDPR): you may object at any time to processing of your data based on Art. 6(1)(f) GDPR (legitimate interest).

To exercise your rights, an informal message to the contact details above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

Last updated: October 2026