1. Data Controller
The controller responsible for processing personal data on this website is:
Anja Lenk Coaching
Anja Lenk
Stafflenbergstrasse 28
70184 Stuttgart
Germany
Telephone: +49 172 7611794
Email: al@anja-lenk-coaching.de
2. Purposes and Legal Bases of Processing
We process personal data where necessary to provide and secure this website, respond to enquiries, or initiate and carry out a coaching relationship.
Processing to respond to enquiries relating to a contract or to take steps prior to entering into a contract is based on Article 6(1)(b) GDPR. Other enquiries, as well as the secure and reliable operation of the website, are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interests include ensuring reliable accessibility, protecting against technical attacks and responding to enquiries addressed to us.
If we obtain consent for specific additional processing activities, the legal basis is Article 6(1)(a) GDPR. Merely acknowledging this Privacy Policy when submitting an enquiry does not constitute such consent.
3. Hosting and Server Logs
The website is hosted by a hosting provider (WPWebHive). When you access the website, the web server processes technically necessary connection and access information. This may include your IP address, the date and time of access, pages or files requested, browser and operating system information, the referrer URL, and technical status and error information.
This processing is necessary to provide the website securely and reliably, analyse errors, and detect and prevent attacks. The legal basis is Article 6(1)(f) GDPR. The hosting provider may receive the data required to operate the website and act as a processor on our behalf.
Data is deleted or retained in accordance with the criteria set out in section 9.
4. Contact by Email or Contact Form
When you contact us by email or through a contact form, we process your information only as necessary to respond to your enquiry and, where relevant, for subsequent communication or steps towards entering into a contract. Depending on what you provide, this may include your name, email address, telephone number, preferred language, type of enquiry and message.
To handle an enquiry, we generally need your name, a valid email address and sufficient information about your enquiry. Further details, particularly a telephone number, are optional. Without the necessary contact information, we may be unable to respond. You are under no legal obligation to contact us.
Where an enquiry relates to initiating or carrying out a coaching relationship, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is responding to communications addressed to us. Acknowledging the Privacy Policy in the contact form does not constitute separate consent to the processing necessary to handle your enquiry.
Please do not submit detailed health information or other particularly sensitive personal data through the contact form.
5. Contact Forms Using SureForms
We use the SureForms WordPress plugin for our contact forms. Your entries are processed on the web server and stored as form submissions within the WordPress installation. We receive an email notification to handle your enquiry, and your email address is also used to send an automatic acknowledgement of receipt.
Your information is processed and forwarded solely to handle your enquiry, on the legal bases described in section 4. Submitting an enquiry does not, in itself, result in your form data being used for advertising or newsletters.
6. Email Services: SureMail, Brevo and Microsoft 365
We use SureMail together with the Brevo email service to send notifications from the website and automatic acknowledgements of receipt. We use Microsoft 365 (Exchange Online) to receive, manage and respond to enquiries.
Where necessary for the relevant process, the data processed includes sender and recipient addresses, message content, and technical sending and delivery information. Recipients of the relevant data include Brevo and Microsoft, as the service providers responsible for email delivery and mailbox hosting, and their subprocessors engaged to provide those services.
The legal basis is Article 6(1)(b) GDPR for pre-contractual and contractual enquiries, and otherwise Article 6(1)(f) GDPR for the reliable handling and delivery of communications.
Access to personal data from countries outside the European Union or the European Economic Area cannot be entirely ruled out in connection with the operation and support of these services. Where such a transfer takes place, the transfer mechanisms and safeguards provided for under the GDPR may apply, in particular adequacy decisions of the European Commission or appropriate standard contractual clauses pursuant to Article 46 GDPR. You can request information about the applicable safeguards using the email address provided above.
7. Fonts and External Font Services
We use Inter and Cormorant Garamond, among other fonts, for the design of this website. The corresponding font files are served from our web server.
In addition, certain WordPress plugins used on the website may request fonts from Google Fonts. If a font is loaded externally, your browser establishes a connection to Google’s servers. In that process, connection data, particularly your IP address, is transmitted to Google for technical reasons. Such an external request was observed in a WordPress administration feature.
Further information about how Google processes personal data can be found in Google’s Privacy Policy.
8. Cookies and Similar Technologies
Technically necessary cookies or similar storage technologies may be used to provide the website, for example for security, session management or language preferences selected by visitors. Where storing or accessing information on your device is strictly necessary to provide a service you have expressly requested, this may take place without separate consent under section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is also processed, the legal basis, where applicable, is Article 6(1)(f) GDPR.
Access to information on devices that is not strictly necessary generally requires prior consent under section 25(1) TDDDG.
8a. Website Analytics with Google Analytics 4 (consent only)
We use Google Analytics 4 (Google Ireland Limited) to analyse how our website is used, subject to your prior consent. This may involve processing page views, interactions, approximate visit duration and online identifiers. Data may be transferred to countries outside the EEA, including the United States. The legal bases are your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time for the future through the cookie settings.
We store your choice through our consent banner. You can change or withdraw it at any time using the “Cookie Settings” link in the website footer. Without your consent, Google Analytics 4 is not loaded.
9. Retention Periods
We retain personal data only for as long as necessary for the relevant purpose. Enquiries and related correspondence are generally deleted once an enquiry has been fully dealt with, unless further support, steps towards entering into a contract, statutory retention obligations, or a legitimate need to establish, exercise or defend legal claims requires longer retention.
Technical server and security logs are retained only for as long as necessary for operational security, error analysis and detecting misuse. Where statutory retention periods apply to particular data, those requirements take precedence.
10. Your Rights
Subject to the applicable legal requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), and objection to certain processing activities (Article 21 GDPR). You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.
You can exercise your rights by contacting al@anja-lenk-coaching.de. You also have the right to lodge a complaint with a data protection supervisory authority. In Baden-Württemberg, the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
11. SSL/TLS Encryption
This website uses SSL/TLS encryption to protect data in transit. You can generally recognise an encrypted connection by a website address beginning with “https://”. Encryption during transmission does not replace the rules described above regarding the processing and storage of your data.
12. Last Updated
Last updated: 25 October 2026