Data Privacy Policy

1. Controller

The controller responsible for processing personal data on this website and in connection with my coaching services is:

Tilman Masur
Lutherstr. 16
04315 Leipzig
Email: tilman [at] masur [dot] de

2. General Information on Data Processing

I process personal data only insofar as this is necessary to provide my website, respond to inquiries, provide coaching services, and issue invoices.

Personal data is processed pursuant to Art. 6(1)(a), (b), (c), and (f) GDPR, depending on the type and purpose of the respective processing.

3. Accessing the Website / Server Log Files

When you visit my website, the hosting provider automatically processes technically necessary information, in particular:

• IP address

• Date and time of access

• Page/file accessed

• Browser type and browser version

• Operating system

• Referrer URL

• Hostname of the accessing computer

Processing is carried out for the technical provision, stability, and security of the website.
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: secure and trouble-free operation of the website.

The log files are stored for a limited period and then deleted, unless longer retention is required for security or evidentiary purposes.

Hosting provider:
HOSTINGER operations, UAB
Švitrigailos str. 34, Vilnius 03230, Lithuania

4. Contact

If you contact me by email, contact form, or any other means, I process the data you provide, in particular:

• Name

• Email address

• Telephone number, if provided

• Content of the message

• Other information voluntarily provided

Processing is carried out to handle your inquiry and communicate with you.

Legal basis:

• Art. 6(1)(b) GDPR, insofar as the inquiry concerns a specific request about my coaching services or pre-contractual measures

• Art. 6(1)(f) GDPR for other general inquiries

The data will be deleted once the inquiry has been fully processed and no statutory retention obligations prevent deletion.

5. Coaching inquiries and provision of coaching

When you contact me regarding coaching or use my coaching services, I process the data that is necessary to respond to your inquiry, prepare and provide the coaching, communicate with you, organize appointments, document the collaboration, and issue invoices where applicable.

This may include, in particular, your name, contact details, billing information, appointment information, information about your coaching goals or concerns, notes from our collaboration, and any other information you choose to share with me.

To organize my coaching workflows, manage inquiries, leads, clients, appointments, form status, notes, and follow-ups, I may use Airtable as an internal organization and CRM system. In this context, the above-mentioned data may be stored and processed in Airtable where this is necessary for preparing, providing, and following up on coaching services.

The legal basis for this processing is Art. 6(1)(b) GDPR, where the processing is necessary for taking steps prior to entering into a contract or for performing a contract with you. Where the processing serves internal organization, documentation, and follow-up, the legal basis is Art. 6(1)(f) GDPR, based on my legitimate interest in efficiently managing my coaching practice.

6. Invoicing and Accounting

For invoicing and to fulfill tax and commercial law obligations, I process in particular:

• Name

• Address

• Invoice and service data

• Payment information

Legal basis:

• Art. 6(1)(b) GDPR

• Art. 6(1)(c) GDPR

Invoice and accounting documents are stored within the framework of statutory retention obligations. In Germany, invoices and accounting records are generally subject to retention obligations of usually eight years.

7. Appointment Booking

If you schedule an appointment with me via a booking tool, the data entered there will be processed for appointment organization and provision of coaching.

The following data may be processed in particular:

• Name

• Email address

• Telephone number, if provided

• Desired appointment

• Voluntary information regarding the inquiry

Legal basis: Art. 6(1)(b) GDPR

Provider of the booking tool: Cal.com

8. Forms

If you submit data to me through an online form, I process this data to handle your inquiry, prepare and provide coaching services, communicate with you, evaluate feedback, track progress, and improve my coaching offer.

This may include, in particular, your name, email address, phone number, appointment preferences, information about your coaching goals or concerns, feedback, form answers, and any other information you provide in the form.

For the provision of forms, I may use Fillout and, where applicable, Google Forms. When you access or submit such a form, personal data may be processed by the respective provider. Depending on the provider, personal data may also be processed outside the EU/EEA, in particular in the United States. Where this is the case, the transfer is based on appropriate safeguards, such as an adequacy decision, the EU Standard Contractual Clauses, or other legally recognized transfer mechanisms.

The legal basis is Art. 6(1)(b) GDPR where the processing is necessary for preparing or providing coaching services, Art. 6(1)(f) GDPR where the processing serves structured handling of inquiries, feedback, progress tracking, and internal workflows, and Art. 6(1)(a) GDPR where consent is required.

Please avoid submitting sensitive health data or other particularly confidential information through forms unless this is necessary for the coaching process.

9. Cookies and Similar Technologies

This website uses only technically necessary cookies or comparable technologies that are required for the secure and functional provision of the website.

Legal bases:

• Art. 6(1)(f) GDPR for technically necessary functions

• Additionally, Section 25(2) TDDDG for storing information on end devices or accessing such information

10. External Content and Embedded Services

If external services are embedded on my website, such as fonts, booking tools, or form solutions, personal data, in particular the IP address, may be transmitted to the respective provider.

Unless otherwise stated, the legal basis for the use of these services is Art. 6(1)(b) GDPR where the service is necessary for preparing or providing coaching services, and Art. 6(1)(f) GDPR based on my legitimate interest in efficient organization, communication, and technical operation. Where required, processing is based on consent pursuant to Art. 6(1)(a) GDPR. Personal data may be processed outside the EU/EEA on the basis of legally recognized transfer mechanisms.

a) Fonts

This website uses fonts that are provided through the infrastructure of the website provider. For technical reasons, personal data, in particular the IP address, may be transmitted to corresponding service providers.

b) Google Forms

I may use Google Forms to provide online forms and surveys. When you open or submit a Google Form, the information you enter, as well as technical data such as your IP address and usage information, may be processed by Google. I use this data to handle inquiries, prepare and provide coaching services, collect feedback, track progress, and improve my coaching offer.

c) Cal.com

I may use Cal.com for appointment booking. When you book an appointment, the information you enter, such as your name, email address, appointment details, and any voluntary information, may be processed by Cal.com. I use this data to organize appointments and provide coaching services.

d) Fillout

I may use Fillout to provide online forms and surveys. When you open or submit a Fillout form, the information you enter, as well as technical data such as your IP address and usage information, may be processed by Fillout. I use this data to handle inquiries, prepare and provide coaching services, collect feedback, track progress, and improve my coaching offer.

e) Airtable

To organize my coaching practice, I may use Airtable as an internal database and CRM system. Airtable may be used to manage contacts, inquiries, leads, clients, appointments, form status, notes, follow-ups, and related workflows. Personal data that you provide to me directly or through forms may therefore be stored and processed in Airtable where this is necessary for preparing, providing, and following up on coaching services.

11. Recipients of the Data

Recipients of personal data may include in particular:

• hosting providers

• email providers

• accounting or invoicing software providers

• appointment booking providers, in particular Cal.com

• form and survey providers, in particular Fillout and, where applicable, Google Forms

• CRM, database, and organization tools, in particular Airtable

• IT service providers, where necessary

Data is disclosed only insofar as this is necessary to provide the website, perform the contract, fulfill legal obligations, protect legitimate interests, or on the basis of consent.

12. Retention Period

I store personal data only for as long as this is necessary for the respective purposes or statutory retention obligations exist.

This means in particular:

• Inquiry data: until the inquiry has been fully processed, provided no further business relationship is established

• Contract and coaching data: for the duration of the business relationship and thereafter only insofar as retention obligations or legitimate interests exist

• Invoice and accounting data: in accordance with statutory retention obligations

13. Your Rights

Under the GDPR, you have in particular the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to object

• Right to withdraw consent at any time with effect for the future

• Right to lodge a complaint with a data protection supervisory authority

If processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

The competent supervisory authority is generally the data protection authority of the federal state in which I am based.

For Saxony, this would usually be:

Saxon Data Protection and Transparency Commissioner
https://www.datenschutz.sachsen.de/

15. Obligation to Provide Data

The provision of personal data is not required by law or contract in every case. However, certain information may be necessary so that I can process inquiries, provide coaching services, or issue invoices.

16. No Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

17. Version

Version date: 2026-06-02