Privacy Policy
Last updated: August 2026
We take the protection of your personal data very seriously. This Privacy Policy explains what data we collect, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR / DSGVO).
1. Data Controller / Verantwortliche Stelle
Brynhilda Invest UG (haftungsbeschränkt)
Brunnenstr. 147
10115 Berlin, Germany
Email: hi@brynhilda.com
Website: https://brynhilda.com
2. Data We Collect
2.1 Contact & Application Forms
When you fill out our contact form or application form, we collect:
- First and last name
- Email address
- Your message or application content
Legal basis: Art. 6 Abs. 1 lit. b GDPR (pre-contractual measures) and Art. 6 Abs. 1 lit. f GDPR (legitimate interest in responding to enquiries).
2.2 Newsletter & Free Resources
When you sign up for our newsletter or request the free Feminine Energy Reset Guide, we collect your name and email address. We use double opt-in to confirm your subscription.
Legal basis: Art. 6 Abs. 1 lit. a GDPR (consent). You may withdraw your consent at any time by clicking the unsubscribe link in any email.
2.3 Purchases & Payments
When you purchase a program or coaching package, payment is processed by our payment provider. We collect your name, email address, and billing information. We do not store full payment card details on our servers.
Legal basis: Art. 6 Abs. 1 lit. b GDPR (contract performance).
2.4 Coaching Sessions
During private coaching sessions conducted via video call (e.g. Zoom), personal information you share is treated as strictly confidential and is not recorded or stored without your explicit consent.
Legal basis: Art. 6 Abs. 1 lit. b GDPR (contract performance).
2.5 Website Usage Data
When you visit our website, your browser automatically transmits technical data including your IP address, browser type, operating system, referring URL, and pages visited. This data is processed for security and performance purposes.
Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest).
3. Cookies & Tracking
Our website uses cookies. Cookies are small text files stored on your device. We distinguish between the following categories:
| Category | Purpose | Legal Basis |
|---|---|---|
| Necessary | Essential for the website to function (e.g. session cookies, cookie consent) | Art. 6 Abs. 1 lit. f GDPR — no consent required |
| Statistics | Google Analytics — anonymous analysis of website usage | Art. 6 Abs. 1 lit. a GDPR — consent required |
| Marketing | Google Ads — conversion tracking and remarketing | Art. 6 Abs. 1 lit. a GDPR — consent required |
You can manage your cookie preferences at any time via our cookie banner or by clicking here to update your consent.
3.1 Cookiebot
We use Cookiebot by Usercentrics A/S (Havnegade 39, 1058 Copenhagen, Denmark) to manage cookie consent on our website. Cookiebot stores your consent preferences and ensures only cookies you have agreed to are activated.
Privacy Policy: https://www.cookiebot.com/en/privacy-policy/
Legal basis: Art. 6 Abs. 1 lit. c GDPR (legal obligation to document consent).
3.2 Google Analytics
With your consent, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to analyse how visitors use our website. The information generated (including your IP address) is transmitted to and stored by Google on servers in the United States. We have enabled IP anonymisation so that your IP address is truncated before transmission.
Google Analytics is only activated after you have given your consent via our cookie banner.
- Data transfer: USA (under EU Standard Contractual Clauses)
- Retention: 14 months (GA4 default)
- Opt-out: Google Analytics Opt-out Browser Add-on
Google's Privacy Policy: https://policies.google.com/privacy
Legal basis: Art. 6 Abs. 1 lit. a GDPR (consent).
3.3 Google Ads & Conversion Tracking
With your consent, we use Google Ads, a service by Google Ireland Limited, to display advertisements. We use Google Ads Conversion Tracking to measure the effectiveness of our advertisements — for example, whether a visit to our website resulted from clicking an ad.
When you click on a Google Ad and reach our website, a cookie is set on your device. This cookie expires after 30 days and does not contain personal data that could identify you personally.
We may also use Google Remarketing to show ads to previous visitors of our website. This is only activated after you have given your consent.
- Data transfer: USA (under EU Standard Contractual Clauses)
- Opt-out: Google Ad Settings
Legal basis: Art. 6 Abs. 1 lit. a GDPR (consent).
4. Current Cookie Declaration
The following list shows all cookies currently in use on this website, automatically updated by Cookiebot:
5. Third-Party Services
5.1 Squarespace
This website is hosted by Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland. Squarespace processes server logs and technical data as part of hosting our website.
Privacy Policy: https://www.squarespace.com/privacy
5.2 Zeeg
We use Zeeg (Zeeg GmbH, Musterstraße 1, Berlin, Germany) to enable booking of discovery calls. When you book a call, Zeeg processes your name, email address, and selected appointment time. All data is processed and stored on servers within the European Union.
Privacy Policy: https://zeeg.me/privacy
Legal basis: Art. 6 Abs. 1 lit. b GDPR (pre-contractual measures).
5.3 Email Marketing
We use an email marketing provider to send our newsletter and program communications. Your email address and name are stored with this provider and used solely for sending communications you have subscribed to. You may unsubscribe at any time via the link in any email.
Legal basis: Art. 6 Abs. 1 lit. a GDPR (consent).
6. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this policy, or as required by law:
- Contact form enquiries: 2 years
- Client coaching records: 6 years (statutory retention period)
- Newsletter subscribers: until unsubscription
- Purchase/invoice data: 10 years (German tax law)
- Cookie consent logs: 12 months
7. International Data Transfers
Some of our service providers (including Google) are based in the United States. Data transfers to the USA are carried out on the basis of EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR, ensuring an adequate level of data protection.
8. Your Rights / Ihre Rechte
Under the GDPR, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access (Art. 15) | You have the right to request information about the personal data we hold about you. |
| Rectification (Art. 16) | You have the right to request correction of inaccurate personal data. |
| Erasure (Art. 17) | You have the right to request deletion of your personal data ("right to be forgotten"). |
| Restriction (Art. 18) | You have the right to request restriction of processing of your personal data. |
| Portability (Art. 20) | You have the right to receive your data in a structured, machine-readable format. |
| Objection (Art. 21) | You have the right to object to processing based on legitimate interests. |
| Withdraw Consent (Art. 7) | Where processing is based on consent, you may withdraw it at any time without affecting prior processing. |
To exercise any of these rights, please contact us at: hi@brynhilda.com
You also have the right to lodge a complaint with a supervisory authority. The competent authority for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin
www.datenschutz-berlin.de
9. Changes to This Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our services or legal requirements. The current version is always available at brynhilda.com/privacy-policy. We recommend checking this page periodically.
10. Contact
For any questions or requests regarding this Privacy Policy or your personal data, please contact:
hi@brynhilda.com