Heinz Schiebel DE

Privacy Policy

This translation is for convenience. The German version is binding.

Controller

Heinz Schiebel, Edelstraße 2a, 4700 Eupen, Belgium. Email: heinz.schiebel92@gmail.com

Purposes and legal bases

I process personal data only to the extent necessary.

  • Running and securing the website (server logs, CDN, firewall): legitimate interest, Art. 6(1)(f) GDPR.
  • Contact and inquiries (forms, email): contract and pre-contractual steps, Art. 6(1)(b) GDPR. For additional details you give voluntarily: consent, Art. 6(1)(a).
  • Orders, contracts, tax (WooCommerce): contract, Art. 6(1)(b). Legal obligation, Art. 6(1)(c).
  • Optional embeds and tracking: only with consent, Art. 6(1)(a). Can be withdrawn at any time.

Hosting

The website is run by a European hosting provider. IP address, time stamp, requested URLs and user agent are briefly processed in server logs. They are usually deleted within 14 days unless security incidents require longer storage. Legal basis: Art. 6(1)(f).

Contacting me

If you write to me through a contact form or by email, I process your name, email address and the content of your message to handle your inquiry. The data is deleted once your inquiry has been handled, unless statutory retention obligations apply. Legal basis: Art. 6(1)(b).

Appointment booking (Calendly)

To book introductory calls and sessions, I use Calendly (Calendly LLC, USA). When you book, your name, email address, the selected time and, where applicable, your answers to booking questions are processed. Calendly also processes data in the USA; the transfer is based on standard contractual clauses. Legal basis: Art. 6(1)(b).

Video calls (Zoom)

Sessions take place via Zoom (Zoom Video Communications, Inc., USA). Connection data, audio and, where applicable, video are processed. Standard contractual clauses are the basis for the transfer to a third country. Legal basis: Art. 6(1)(b).

Email (Google / Gmail)

I send and receive email via Google Gmail. Google processes metadata and content data. The data transfer may involve third countries (in particular the USA); Google uses standard contractual clauses as a safeguard. Legal basis: Art. 6(1)(b) and (f).

Shop and payments

For orders I use WooCommerce (where enabled) and Mollie B.V. (Netherlands) as payment provider. Order, billing and delivery data are processed, as well as the data needed for payment (amount, means of payment, transaction ID). Legal bases: Art. 6(1)(b) and (c).

Cookies

The shop only stores what is technically necessary: cookies and browser storage entries for the cart, checkout and login, on the basis of my legitimate interest (Art. 6(1)(f)). I do not use analytics or tracking tools.

Fonts

Web fonts are hosted locally. Loading the page sends no requests to third parties such as Google Fonts.

Storage period

Data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. For data relevant to tax and commercial law, retention periods of seven to ten years usually apply.

Transfers to third countries

Where service providers process data outside the European Economic Area (in particular in the USA), this is done on the basis of appropriate safeguards, usually standard contractual clauses. Complete freedom from risk cannot be guaranteed.

No automated decision-making

There is no automated decision-making within the meaning of Art. 22 GDPR.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future.

You can lodge a complaint with the Belgian data protection authority: Autorité de protection des données (APD/GBA), Rue de la Presse 35, 1000 Brussels, Belgium. www.dataprotectionauthority.be

Data protection contact

For questions about data protection or to exercise your rights, email: heinz.schiebel92@gmail.com

Last updated: 16 September 2026.