top of page

Data protection

Note: This is a courtesy translation. The German version ("Datenschutzerklärung") is the legally binding version. In case of any discrepancy, the German text prevails.

​

1. Controller and General Information

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Leah Klemm Seckenheimer Str. 89 68165 Mannheim Germany Email: leahklemm.studio@gmail.com Phone: +49 151 68144511

Personal data means any information relating to an identified or identifiable natural person. Below, I inform you about which data is collected when using this website, how it is used, and what rights you have.

​

2. Website Hosting (Wix)

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St, Tel Aviv, Israel. Wix processes technically necessary data on my behalf that is automatically generated when the website is accessed (e.g., IP address, date and time of access, browser used, operating system, pages accessed). This data is required to technically provide the website and to prevent misuse.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure website).

Since Israel has been recognized by the European Commission as a country with an adequate level of data protection (adequacy decision), data transfer there is permitted without additional safeguards. Further information can be found in Wix's privacy policy: https://www.wix.com/about/privacy

Wix also uses technically necessary cookies required for the operation of the website (e.g., security and session cookies). These generally cannot be disabled without limiting the functionality of the website.

​

3. No Tracking or Analytics Tools

This website does not use analytics or tracking tools such as Google Analytics, Meta Pixel, or similar services. No user profiling takes place beyond what is technically necessary to provide the website.

​

4. Contact

If you contact me by email or contact form, the data you provide (e.g., name, email address, message content) is stored and used exclusively to process your inquiry.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry) or Art. 6(1)(b) GDPR, if your inquiry is aimed at the initiation of a contract (e.g., booking a consultation appointment).

Your data will be deleted once your inquiry has been fully processed, provided no statutory retention obligations apply.

​

4a. Communication via WhatsApp and Instagram

In addition to email and the contact form, I also communicate with prospective and existing clients via WhatsApp and Instagram Direct Messages. Both services are operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA).

When using these channels, the following data in particular is processed: phone number or Instagram profile data, the content of exchanged messages, and metadata (e.g., time of message). This data is processed to respond to inquiries and organize appointments.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in straightforward contact) or Art. 6(1)(b) GDPR, if the communication serves the initiation or performance of a contract.

Since Meta also operates servers in the USA, your data may be transferred to a third country. Meta is certified under the EU-U.S. Data Privacy Framework (DPF) or relies on EU Standard Contractual Clauses for the transfer. Further information can be found in Meta's privacy notices: https://www.whatsapp.com/legal/privacy-policy and https://privacycenter.instagram.com/policy

Please note: WhatsApp and Instagram are not intended for the transmission of particularly sensitive, detailed counseling content. For substantive matters related to counseling, I recommend an in-person appointment or communication by email or phone.

​

5. Appointment Booking via Google Calendar

I use Google Calendar, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA), to book consultation appointments.

When booking an appointment, the following data is collected and stored in Google Calendar: name, email address, phone number (if applicable), and the requested appointment. This data is required to organize and confirm the appointment and, where applicable, to send you a reminder.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures taken at your request).

Since Google also operates servers in the USA, your data may be transferred to a third country. Google is certified under the EU-U.S. Data Privacy Framework (DPF) or relies on EU Standard Contractual Clauses intended to ensure an adequate level of data protection. Further information: https://policies.google.com/privacy

​

6. Special Categories of Personal Data (Health Data) in Connection with Counseling, Yoga, Workshops, and Retreats

In the context of systemic counseling as well as yoga classes, workshops, and retreats, you may share information with me — in person, by email, or on a registration form — that falls under the special categories of personal data pursuant to Art. 9 GDPR. This includes, in particular, information about your mental or physical health, pre-existing conditions, injuries, or comparably sensitive circumstances (e.g., as part of an intake conversation prior to a counseling session or health-related information provided before a yoga retreat).

This data is processed exclusively to:

  • tailor the counseling or offering safely and appropriately to your needs,

  • take health-related risks into account (e.g., in connection with physical exercises).

The legal basis for processing these special categories of data is your explicit consent pursuant to Art. 9(2)(a) GDPR, which you provide by disclosing this information (e.g., on a registration form or during a counseling conversation). You may withdraw this consent at any time with effect for the future.

All information shared with me in the context of counseling is treated with strict confidentiality and is not disclosed to third parties, unless statutory obligations require otherwise (e.g., in cases of acute risk to self or others).

Please note: Systemic counseling does not replace psychotherapy and does not constitute a diagnosis or medical treatment. Further information can be found in my Terms and Conditions.

​

7. Contract Performance and Invoicing

If you book a counseling session, workshop, yoga class, or retreat with me, I process the data necessary for contract performance (e.g., name, address, email address, payment information).

Invoices are sent by email. The legal basis is Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (compliance with commercial and tax law obligations).

Invoice- and accounting-related data is retained for a period of 10 years due to statutory retention obligations (Section 147 of the German Fiscal Code (AO), Section 257 of the German Commercial Code (HGB)), even if you request deletion in the meantime.

​

8. Disclosure of Data

Your data is only disclosed to third parties where necessary for contract performance, legally required, or where you have given explicit consent. Processors or recipients in this context include, in particular:

  • Wix.com Ltd. (website hosting)

  • Google Ireland Limited / Google LLC (appointment booking via Google Calendar)

  • Meta Platforms Ireland Limited / Meta Platforms, Inc. (communication via WhatsApp and Instagram)

Data processing agreements (Art. 28 GDPR) are in place with all service providers processing personal data on my behalf, where required.

9. Retention Period

Personal data is retained only for as long as necessary for the respective processing purpose or as required by statutory retention periods. It is routinely deleted thereafter.

​

10. Your Rights as a Data Subject

You have the right to:

  • request information about your personal data processed by me pursuant to Art. 15 GDPR,

  • request the correction of inaccurate data pursuant to Art. 16 GDPR,

  • request the deletion of your data pursuant to Art. 17 GDPR, unless statutory retention obligations apply,

  • request the restriction of processing pursuant to Art. 18 GDPR,

  • receive your data in a structured, commonly used format pursuant to Art. 20 GDPR,

  • withdraw any consent given at any time pursuant to Art. 7(3) GDPR,

  • object to the processing of your data pursuant to Art. 21 GDPR,

  • lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

The supervisory authority responsible for me is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-WürttembergLautenschlagerstraße 20, 70173 Stuttgart, Germany https://www.baden-wuerttemberg.datenschutz.de

​

11. Data Security

This website uses SSL/TLS encryption to protect the transmission of your data. You can recognize this by "https://" and the lock symbol in your browser's address bar.

​

12. Changes to This Privacy Policy

I reserve the right to amend this privacy policy should the legal situation, the services used, or the data processing change. The version published on the website at any given time shall apply.

 

Last updated: September 2026

bottom of page