Data Protection Policy

1. Name and Contact Information of the Data Controller

Dog school Hundeleicht Hamburg

Owner: Julia Paluszko

Eilbeker Weg 191, 22089


Phone: 0160 98673998

Email: julia@hundeleichthamburg.com

2. Collection and Storage of Personal Data, Purposes and Legal Bases for Data Processing

We process your personal data (e.g., name, contact information, details about your dog) exclusively to handle your inquiries, to fulfill contracts (e.g., course registration and one-on-one training), and to comply with legal obligations. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract), or, where applicable, Article 6(1)(a) of the GDPR (consent) and Article 6(1)(c) of the GDPR (legal obligation).

Personal data may include, for example:

  • name

  • address

  • email

  • phone number

  • Bank account information (if applicable, for payments)

  • Information about your dog (name, age, breed, behavior, health-related information)

  • Communication content (e.g., messages, emails, booking requests)

Personal data is collected

  • to identify you as a customer,
  • to provide you with appropriate advice,
  • to fulfill my contractual obligations toward you,
  • to comply with my legal obligations,
  • to correspond with you,
  • for invoicing or, if necessary, as part of the collection process,
  • for the purposes of permitted direct marketing;
  • to assert any claims against you.

Personal data is processed in connection with your inquiry to Hundeleicht Hamburg and is necessary for the stated purposes of processing your order and fulfilling obligations under the underlying contract. The personal data collected will be stored until the statutory retention period expires and will be deleted thereafter. This does not apply in exceptional cases where I am required to store the data for a longer period due to tax or commercial law retention obligations (in accordance with the German Commercial Code (HGB), the German Criminal Code (StGB), or the German Fiscal Code (AO)), or if you have consented to storage beyond this period.

3. Recipients of the Data / Use of External Services

Your data will only be disclosed to third parties to the extent necessary for the fulfillment of the contract (e.g., to payment service providers) or if you have given your consent. 

I use

  • the following providers to contact you: SureForms, WhatsApp, Telegram, the website, and email (Hostinger, Gmail);
  • for booking and payment: Latepoint and PayPal,
  • for online meetings: Zoom and Google Meet, 
  • for creating documents, training materials, and maintaining customer data: Google Docs and Notion Labs, Inc., 
  • for accounting: Lexware, 
  • for organization, administration, and record-keeping: Google Workspace (Google Calendar, Gmail, Google Forms).

Providers of these services include companies based in the United States. When you use these services, personal data such as your name, email address, and communication content is transferred to the respective providers and processed there. The transfer is based on the European Commission’s Standard Contractual Clauses, as there is no adequacy decision in place for the United States. Google services, WhatsApp LLC, and Notion Labs, Inc. are certified under the Data Privacy Framework. With U.S. services, there is a risk that U.S. authorities may access the data without you having effective legal remedies available to you. The data is stored only for as long as is necessary to perform the respective service. 

4. Data Processing When Visiting This Website

When you visit my website, technical data is automatically processed, transmitted to my server, and temporarily stored in a log file, including, among other things:

  • IP address

  • date and time of access

  • browser type and operating system

  • visited sites.

This data is processed to ensure functionality, for error analysis, and to defend against attacks. The legal basis for the processing is Article 6(1)(f) of the GDPR (legitimate interest). The data is deleted as soon as it is no longer necessary for the stated purposes. Depending on the tools used, additional data may be processed (e.g., by booking or payment services).

5. Retention Period

I will retain your data only for as long as necessary for the purposes stated or as required by statutory retention obligations. Once the purpose no longer applies or the retention periods have expired, the data will be deleted.

6. Your Rights

As a data subject, you have the right to rectification, erasure, restriction of processing, objection to processing, and data portability with regard to the stored personal data (Art. 15–21 GDPR). You may withdraw your consent at any time without affecting the lawfulness of the processing carried out prior to the withdrawal.

You may lodge a complaint with the supervisory authority responsible for me regarding the processing of your personal data. The authority responsible for me is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Ludwig-Erhard-Str. 22, 20459 Hamburg

E-Mail: mailbox@datenschutz.hamburg.de

7. Obligation to Provide Data

Providing your personal data is necessary for the conclusion of the contract. Without this data, no contract can be concluded.

8. Automated Decision-Making/Profiling

No automated decision-making or profiling takes place.