1. Controller
The controller responsible for data processing on this website is: Salt + Light Co., [ADD FULL NAME], [ADD ADDRESS], Cologne, Germany. Email: [ADD EMAIL].
2. What data we process and why
Server logs. When you visit this website, the hosting provider automatically stores technical information (IP address, browser type, date and time, pages requested). This is necessary to deliver the site securely (Art. 6(1)(f) GDPR). Hosting provider: [ADD HOSTING PROVIDER AND LOCATION].
Contact and application forms. When you submit a form on this site, we process the details you provide (name, email address and the content of your message) to respond to your enquiry and, where relevant, to prepare a coaching or service engagement (Art. 6(1)(b) and (f) GDPR). Data is stored for as long as necessary to handle your request and any resulting contract, then deleted subject to legal retention duties.
Newsletter. If you subscribe to the newsletter, your email address is processed on the basis of your consent (Art. 6(1)(a) GDPR) via [ADD NEWSLETTER PROVIDER]. You can unsubscribe at any time.
3. Cookies and analytics
This website does not use tracking cookies or analytics tools unless stated here: [ADD ANALYTICS / COOKIE TOOLS IF ANY, OTHERWISE DELETE THIS PLACEHOLDER].
4. Third-party services
This website loads web fonts from Google Fonts (Google Ireland Limited). When a page loads, your browser connects to Google's servers and transmits your IP address. Legal basis: Art. 6(1)(f) GDPR (consistent presentation of the site). Embedded or linked services such as Spotify, Apple Podcasts, YouTube, Instagram, TikTok and LinkedIn are subject to the privacy policies of those providers. [ADD ANY OTHER THIRD-PARTY SERVICES, E.G. BOOKING TOOL]
5. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with future effect. You also have the right to lodge a complaint with a supervisory authority; the authority responsible for North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit NRW.
6. Data security and transfers
This site is served over TLS (HTTPS). Where service providers process data outside the EU/EEA, this is done on the basis of EU standard contractual clauses or an adequacy decision.
7. Changes to this policy
We may update this privacy policy to reflect legal or technical changes. Last updated: [ADD DATE].