Privacy Policy

We take the protection of your personal data and compliance with current data protection laws very seriously. Your trust is important to us. This privacy policy applies to all business areas of Iris Hergesell Coaching, Consulting & Academy, c/o Frey Services, Eggstrasse 14f, 8134 Adliswil, Switzerland.

We appreciate your interest in our website. The trust of all visitors, the security of your data, and the protection of your privacy are central to our values. We process your personal data in accordance with the applicable legal data protection regulations and this privacy policy. Personal data refers to information that can be used to identify you personally, such as your name, address, phone number, IP address, cookies, and email address.

When you visit and use our website or voluntarily provide us with information, we process the data that your browser automatically transmits with each request (see section "Log Data"). If you voluntarily provide us with personal data, it will be processed solely for the purpose of your inquiry or request. Please note that data transmission over the internet is never completely secure against third-party access.

Below, we explain which data we collect, when and for what purpose, how our services work, and how we ensure the protection of your personal data.


Name and Address of the Data Controller

The responsible entity for data processing on this website is:

Iris Hergesell Coaching, Consulting & Academy

c/o Frey Services

Eggstrasse 14f

8134 Adliswil, Switzerland

Email: See imprint

The data controller is the natural or legal person who determines, alone or jointly with others, the purposes and means of processing personal data (e.g., names, email addresses, etc.).


Legal Basis for Processing Personal Data

As a service provider, we are only permitted to process personal data of website visitors if one of the following legal bases applies:

If we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required for carrying out pre-contractual measures.

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

If the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party, and this interest is not overridden by the interests, fundamental rights, or freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.


Data Deletion and Storage Duration
The personal data of the data subject will be deleted as soon as the purpose for which it was stored no longer applies.

Storage may continue beyond this point if it is required by European or national legislation or other regulations to which the controller is subject.

Data will also be blocked or deleted once a legally prescribed retention period expires, unless further storage is necessary for the conclusion or fulfillment of a contract.


Contacting Us
When you contact us (e.g., via contact form, email, telephone, or social media), your details will be processed in order to handle and respond to your inquiry in accordance with Article 6(1)(b) GDPR (pre-contractual measures).

We delete inquiries when they are no longer necessary. We review their necessity every two years. Statutory retention obligations also apply.


Legal Basis
The legal basis for the processing of this data is the performance of pre-contractual measures in accordance with Article 6(1)(b) GDPR.

Log Data
The internet service provider (hosting provider) automatically collects “log data” in server log files.

The log data includes the following information:

- Date and time of the request
- Internet address (URL) requested
- URL visited immediately before (referrer)
- Browser used and language
- Operating system used
- IP address and hostname of the visitor
- Access status / HTTP status code
- Amount of data transmitted in each case

This data is transmitted to us automatically and cannot be assigned to a specific person without disproportionate effort.


Legal Basis
The legal basis for the processing of this data is our legitimate interest pursuant to Article 6(1)(f) GDPR.

Logging serves the purpose of access control, monitoring, and optimization of technical processes. In addition, this data is used in accordance with § 76 BDSG to assess data processing activities from a data protection perspective.

Data will not be disclosed to third parties, except to law enforcement authorities upon a court order in individual cases.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected, or once the legally prescribed retention period has expired.

Therefore, users do not have the right to object to this processing.


What Rights Do You Have?
You have the right to request, free of charge, information about the personal data we store about you, and, where applicable, the right to rectification, restriction of processing, or deletion of such data. You also have the right to data portability. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.


Right to Object
Please also note that you may object to the future processing of your personal data at any time in accordance with Article 21 GDPR. This includes, in particular, objections to processing for direct marketing purposes.


Right to Access Information
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, rectification, blocking, or deletion of data, revoke previously given consent, or object to a specific use of your data, please contact us at the following email address:
[email protected]


SSL / TLS Encryption
For security reasons, our website uses SSL or TLS encryption. This ensures that transmitted data is protected and cannot be read by third parties. You can recognize an active encryption by the change in the browser’s address bar from “http://” to “https://” and by the appearance of a closed padlock symbol.


Links to Other Websites
This website may contain links to websites operated by other companies, including social media platforms.

If you follow such links, you may encounter cookies that are beyond our control. We cannot accept any responsibility for these and refer you to the respective privacy or cookie policies of the linked websites.


Web Hosting via IONOS SE
We use the services of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, for hosting our website and have entered into a data processing agreement in accordance with Article 28 GDPR with 1&1 Internet SE.

Further information can be found in the privacy policy of 1&1 Internet SE:
https://www.ionos.de/terms-gtc/terms-privacy


Legal Basis
The legal basis for the processing of this data is our legitimate interest in the operation and maintenance of the security of this website in accordance with Article 6(1)(f) GDPR.


Google Web Fonts
We use Google Web Fonts. All fonts are loaded locally.
When using Google Web Fonts in this manner, no personal data is transmitted to third parties.


ActiveCampaign Form
To provide our informational materials in an appealing format, we use the services of ActiveCampaign, LLC, 1 N Dearborn St., 5th Floor, Chicago, Illinois 60602, USA.

If you request our informational material, registration with a valid email address is required, along with your consent to the processing of your personal data by us. Please refer to the consent declaration provided in the download form.

Before sending the material, you must explicitly confirm—via a so-called double opt-in process—that we may activate the download for you. This helps us prevent the misuse of third-party email addresses. You will receive a confirmation and authorization email from us, asking you to click the link in the email to confirm your request.

If no confirmation is received, your personal data will be deleted within 7 days.

In connection with your request, we store not only your email address and any voluntary information, but also the time of registration, time of confirmation, IP address, and the consent text. We use your email address exclusively to deliver the requested materials.

These data are stored on the servers of ActiveCampaign LLC.

Please note that data may be transferred to and processed by U.S. authorities. Under current legislation, the USA is considered an insecure third country with an insufficient level of data protection.

There is currently no adequacy decision pursuant to Article 45 GDPR.

However, ActiveCampaign has committed to complying with the Standard Contractual Clauses (SCCs) for the transfer of personal data to third countries under Directive 2016/679.

More information on the SCCs is available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

We have entered into a data processing agreement with ActiveCampaign in accordance with Article 28 GDPR and have additionally agreed on the use of Standard Contractual Clauses.

Further information is available at:
https://www.activecampaign.com/legal/scc
and
https://www.activecampaign.com/legal/privacy-policy


Legal Basis
The sending of our informational materials is based on the recipient’s consent in accordance with Article 6(1)(a) GDPR.


CopeCart
We also offer digital products for purchase via our website.

For this purpose, we use the services of CopeCart GmbH, Ufnaustraße 10, 10553 Berlin (hereinafter referred to as "CopeCart").

As soon as you click on one of our product buttons, you will leave our website and be redirected to CopeCart. CopeCart becomes the contractual partner for purchasers of the services or products and is responsible for processing buyers’ data.

By following the link, you may encounter cookies that are beyond our control. We cannot accept any liability for this. We also have no influence over the scope of data collected by CopeCart.

The purchase process and the associated data processing are subject to CopeCart’s terms and conditions, which can be accessed at:
https://www.copecart.com/agb
Further information can be found at:
https://www.copecart.com/de/datenschutz

Legal Basis
The legal basis for processing personal data in connection with redirection from our website to the CopeCart sales page is Article 6(1)(b) GDPR.


Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device and save specific information to enable communication with our system.


Types of Cookies

First-Party Cookies – Necessary Cookies
These cookies are generated by our website and are essential for the proper functioning of the application. They are also referred to as session cookies or transient cookies and are automatically deleted after the browser session ends, i.e., when you close your browser.

Without these cookies, the website cannot function correctly.

Legal Basis
The legal basis for the processing of this data is Article 6(1)(f) GDPR.


Third-Party Cookies
These cookies are set by various services (e.g., analytics services or Facebook) and store a unique identifier that allows your device to be recognized upon your next visit (persistent cookies).

These cookies remain on your device for a predetermined period. This duration may vary.


Legal Basis
The legal basis for the processing of this data is Article 6(1)(a) GDPR.

Please note that for certain providers—especially those based in the United States—there is a possibility that data may be transferred to the USA and processed by U.S. authorities. According to current legal standards, the USA is considered an insecure third country with an insufficient level of data protection.

At present, there is no adequacy decision pursuant to Article 45 GDPR, nor can suitable safeguards pursuant to Article 46 GDPR be provided.

Some U.S. companies have declared their commitment to comply with the Standard Contractual Clauses (SCC) for the transfer of personal data to third countries in accordance with Directive 2016/679.

We would like to point out that if the aforementioned Standard Contractual Clauses are not adhered to, the legal basis for data transfer is your explicit consent pursuant to Article 49(1)(a) GDPR.



Disabling Cookies

Please note that certain cookies are set as soon as you visit our website.

You can configure your browser to inform you about the use of cookies, to allow cookies only in individual cases, to accept cookies for specific cases (especially third-party cookies), or to generally block them.

If you do not accept cookies, the functionality of our website may be limited.


Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie ("borlabsCookie") to store your cookie consent.

Borlabs Cookie does not process any personal data.

The cookie borlabs-cookie stores the consents you gave when entering the website. If you wish to revoke these consents, simply delete the cookie in your browser. Upon re-entering or refreshing the website, you will be asked to provide your cookie consent again.


Cookie Settings (Borlabs)
Button Text
Consent History (Borlabs)

Your consent history:

Date & Time: 2022-10-24 15:25:57

Version 1

Consents:
Essential: Borlabs Cookie

Marketing: Facebook Pixel, Calendly

External Media: Facebook, Vimeo, YouTube

If you have any questions, please contact us and provide your UID.

Essential

Essential cookies enable basic functions and are necessary for the proper functioning of the website.

Borlabs Cookie

Name: Borlabs Cookie

Provider: Owner of this website, see imprint

Purpose: Stores the visitor’s cookie preferences selected in the Borlabs Cookie box
Cookie Name: borlabs-cookie
Cookie Duration: 1 year

Statistics

Statistic cookies collect information anonymously. This information helps us understand how visitors use our website.


Marketing

Marketing cookies are used by third-party providers or publishers to display personalized advertisements. They do this by tracking visitors across different websites.


Facebook Pixel

Name: Facebook Pixel
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Purpose: Facebook cookie used for website analytics, ad targeting, and ad performance measurement
Privacy Policy:
https://www.facebook.com/policies/cookies
Cookie Names: fbp, act, cuser, datr, fr, m_pixel_ration, pl, presence, sb, spin, wd, xs
Cookie Duration: Session / 1 year

Calendly

Name: Calendly
Provider: Calendly LLC, Atlanta, GA 30363, USA
Purpose: Used to unlock content from Calendly
Privacy Policy:
https://calendly.com/de/privacy

External Media

Content from video platforms and social media platforms is blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent.


Facebook

Name: Facebook
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Purpose: Used to unlock Facebook content
Privacy Policy:
https://www.facebook.com/privacy/explanation
Host(s): .facebook.com

Vimeo

Name: Vimeo
Provider: Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA
Purpose: Used to unlock Vimeo content
Privacy Policy:
https://vimeo.com/privacy
Host(s): player.vimeo.com
Cookie Name: vuid
Cookie Duration: 2 years

YouTube

Name: YouTube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Used to unlock YouTube content
Privacy Policy:
https://policies.google.com/privacy
Host(s): google.com
Cookie Name: NID
Cookie Duration: 6 months


Appointment Booking via Calendly
To offer you a modern and simplified way to schedule appointments online, we use the services of Calendly LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA (hereinafter “Calendly”).

When using Calendly, browser-specific data as well as your IP address are transmitted to Calendly.

By clicking the “Book Appointment” button, your personal data—such as your name, email address, and any other information you provide—will also be transmitted to Calendly.

We have no knowledge of the further processing or the duration of data storage by Calendly.

Please note that this data may be transferred to the USA and processed by U.S. authorities. According to current legal standards, the USA is considered an insecure third country with an insufficient level of data protection.

Currently, there is no adequacy decision pursuant to Article 45 GDPR.

However, Calendly has committed to complying with the Standard Contractual Clauses (SCC) for the transfer of personal data to third countries under Directive 2016/679.

To protect your personal data, we have concluded a data processing agreement with Calendly in accordance with Article 28 GDPR.

Furthermore, we would like to point out that you are not required to use this service to book an appointment. If you prefer not to use it, please use one of the other available contact options to arrange a meeting.

For more information, please refer to Calendly’s privacy policy at:
https://calendly.com/de/pages/privacy and
https://help.calendly.com/hc/de/articles/360007032633-DSGVO-FAQs



Legal Basis
The legal basis for using Calendly’s online appointment booking service is your consent pursuant to Article 6(1)(a) GDPR.

Zoom
As part of our services, we use Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA, represented by Lionheart Squared, 2 Pembroke House, Upper Pembroke Street 28–32, Dublin, DO2 EK84, Republic of Ireland, for online meetings, webinars, and video conferences.

Please note that there is a possibility that data may be transferred to the United States and processed by U.S. authorities. According to current legislation, the USA is considered an insecure third country with an inadequate level of data protection.

There is currently no adequacy decision pursuant to Article 45 GDPR.

However, Zoom has committed to complying with the Standard Contractual Clauses (SCC) for the transfer of personal data to third countries pursuant to Directive 2016/679.

You can find more information about the Standard Contractual Clauses at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de
and at:
https://blog.zoom.us/de/sicherheit-und-datenschutz-bei-zoom-unsere-antworten-auf-ihre-fragen/

To protect your data, we have entered into a data processing agreement with Zoom Video Communications, Inc. pursuant to Article 28 GDPR.

Further information can be found in Zoom’s privacy policy:
https://zoom.us/de-de/privacy.html
and at:
https://zoom.us/de-de/gdpr



Legal Basis
The legal basis for this data processing is your consent pursuant to Article 6(1)(a) GDPR as well as your explicit consent pursuant to Article 49(1)(a) GDPR.


Facebook Pixel and Facebook Custom Audiences
We use Facebook Conversion Tracking – known as the "Facebook Pixel" (or Meta Pixel) – on our website for the purpose of analyzing and optimizing our web presence. The provider of this service is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you reside in the EU, the responsible entity is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”).

The use of the Facebook Pixel enables Facebook to identify and define visitors to our website as a potential target group for displaying advertisements (so-called "Facebook Ads"). We use the Facebook Pixel to show the Facebook Ads we run only to those Facebook users who have shown an interest in our website or who exhibit certain characteristics (such as interests inferred from visited websites). This information is transmitted to Facebook, allowing us to create so-called "Custom Audiences."

By using the Facebook Pixel, we aim to ensure that our Facebook Ads match the potential interests of website visitors and are not perceived as intrusive. Furthermore, we can use the Facebook Pixel to evaluate the effectiveness of our Facebook Ads for statistical and market research purposes. This allows us to analyze whether users were redirected to our website after clicking on a Facebook Ad — a process referred to as a “conversion.”

Please note that data may be transferred to the USA and processed by U.S. authorities. Under current legal standards, the USA is considered an insecure third country with an insufficient level of data protection.

Currently, there is no adequacy decision pursuant to Article 45 GDPR, nor can suitable safeguards pursuant to Article 46 GDPR be guaranteed.

General information about Facebook’s data processing practices can be found at:
https://www.facebook.com/policy.php

More details about the Facebook Pixel are available here:
www.facebook.com/business/help/742478679120153

You can object to the collection of your data by the Facebook Pixel and its use for displaying Facebook Ads. To configure the types of ads you see on Facebook, visit Facebook’s settings page and follow the instructions on usage-based advertising:
https://www.facebook.com/settings?tab=ads


These settings apply across platforms and are effective for all devices, such as desktop computers and mobile devices.



Legal Basis
The legal basis for this data processing is your consent pursuant to Article 6(1)(a) GDPR as well as your explicit consent pursuant to Article 49(1)(a) GDPR.

Instagram
This website incorporates features of the Instagram service. These features are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram is thereby informed that you have visited this website.

If you are logged into your Instagram account, clicking the Instagram button will link the contents of this website to your Instagram profile. This allows Instagram to associate your visit to our website with your user account. Please note that as the provider of this site, we have no knowledge of the content of the transmitted data or its use by Instagram.

Use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and § 25(1) of the German Telecommunications-Telemedia Data Protection Act (TDDDG). You can revoke your consent at any time.

Where personal data is collected on our website using this tool and transmitted to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). This joint responsibility is limited solely to the collection of data and its transmission to Facebook or Instagram. Any processing that occurs after the data has been transferred is not part of the joint responsibility.

Our respective obligations have been set out in a joint controller agreement. You can find the wording of this agreement at:
https://www.facebook.com/legal/controller_addendum


According to this agreement, we are responsible for providing privacy information when using the Facebook or Instagram tools and for the secure integration of these tools on our website. Facebook is responsible for the security of Facebook and Instagram products.

You can exercise your data subject rights (e.g., access requests) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert your rights with us, we are obliged to forward them to Facebook.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses.
More details are available here:

https://www.facebook.com/legal/EU_data_transfer_addendum

https://privacycenter.instagram.com/policy/

https://de-de.facebook.com/help/566994660333381

Further information can be found in Instagram’s privacy policy:
https://privacycenter.instagram.com/policy/

The company is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when processing data in the USA. Each company certified under the DPF commits to upholding these data protection standards.

You can find more information from the provider at the following link:
https://www.dataprivacyframework.gov/participant/4452



How Do We Protect Your Personal Data?
We implement technical and organizational measures to prevent unauthorized or unlawful access to your personal data. However, you should always be aware that transmitting information over the internet and other electronic channels carries certain security risks, and we cannot guarantee the security of information transmitted in this way.


How Do We Use Web Analytics Tools?
To continuously improve and optimize our online offerings, we use web analytics tools that provide us with statistics and graphics to help us understand how visitors use our website.

Google Analytics
Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy:
https://support.google.com/analytics/answer/6004245?hl=de

Google AdWords and Google Conversion Tracking
Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy:
https://www.google.de/policies/privacy/

Google reCAPTCHA
Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policies:
https://www.google.com/intl/de/policies/privacy/
https://www.google.com/recaptcha/intro/android.html

Facebook Visitor Action Pixel
Our website uses the visitor action pixel from Facebook.
Provider: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
The collected data is stored and processed by Facebook, allowing a connection to the respective user profile and enabling Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy.

How Do We Use Social Plugins?
Our website uses social plugins, e.g., from Facebook. These plugins are identified by the provider's logo (e.g., Like buttons). For information about the purpose and scope of data collection, further processing of your data by the provider, and your rights and settings to protect your privacy, please refer to the privacy policies of the respective providers:

Facebook Ireland Ltd. / Facebook Inc.: http://de-de.facebook.com/policy.php

Google Inc.: http://www.google.com/intl/de/privacy/plusone/

Last updated: March 17, 2025

© Copyright 2025 Iris Hergesell