Datenschutzerklärung / Privacy Policy

1. Data Controller

Julien Szymanek Uhlandstraße 3 10623 Berlin, Germany

Email: julien@unlockyourmind.co Phone: +49 176 8302 6852

This practice is not required to appoint a Data Protection Officer under Art. 37 GDPR given the scale of data processing.

2. Overview

This privacy policy explains how personal data is collected, used, and protected when you visit this website, contact me, or use my coaching services. It fulfils the information obligations under Art. 13 and 14 of the General Data Protection Regulation (GDPR/DSGVO) and the German Federal Data Protection Act (BDSG).

3. Website Visits

When you visit this website, certain data is automatically collected by the hosting provider (Squarespace, Inc.) for technical and security purposes:

  • IP address (anonymised where possible)

  • Browser type and version

  • Operating system

  • Date and time of access

  • Referring URL

This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in providing a secure, functional website). It is not combined with other data sources and is not used to identify individual visitors.

Hosting: This website is hosted by Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA. Squarespace processes data under the EU–US Data Privacy Framework. For details, see Squarespace's privacy policy: https://www.squarespace.com/privacy

4. Contact & Communication

When you contact me via email, phone, WhatsApp, or the website contact form, the information you provide (name, email address, phone number, message content) is processed to respond to your enquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

This data is retained for as long as necessary to handle your enquiry. If the enquiry leads to a coaching engagement, the data becomes part of the client relationship (see Section 6).

5. Booking & Scheduling

If you book a session or free consultation through the website, your name, email, and appointment details are processed for scheduling purposes.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

6. Coaching Services & Client Data

If you become a client, the following data may be collected and processed:

  • Personal details (name, date of birth, contact information)

  • Information you share during sessions relevant to coaching goals

  • Health-related information voluntarily disclosed for safety screening purposes

  • Session notes

  • Invoices and payment records

Legal basis for general data: Art. 6(1)(b) GDPR (contract performance). Legal basis for health-related data: Art. 9(2)(a) GDPR (explicit consent, obtained via intake form).

Important: Hypnotherapy coaching is not a medical or psychotherapeutic treatment under German law (Heilpraktikergesetz). Health-related information collected during intake is solely for your safety and suitability for coaching — it does not constitute a medical assessment or diagnosis.

Retention periods:

  • Session records and coaching notes: 3 years after the end of the coaching relationship, then deleted

  • Invoices and financial records: 10 years (§147 AO — German fiscal code)

  • Correspondence: 6 years (§257 HGB — German commercial code)

7. Cookies & Tracking

This website uses cookies that are essential for its technical functionality (e.g., session cookies set by Squarespace). These do not require consent under § 25 TDDDG as they are strictly necessary.

If analytics or marketing cookies are used (e.g., Squarespace Analytics), your consent will be obtained before they are activated, in accordance with § 25 TDDDG and Art. 6(1)(a) GDPR.

You can manage or disable cookies through your browser settings at any time.

8. Third-Party Services

The following third-party services may process your data in connection with the services offered:

ServicePurposeProvider LocationLegal BasisSquarespaceWebsite hosting & formsUSA (EU–US DPF)Art. 6(1)(f)ZoomOnline coaching sessionsUSA (EU–US DPF)Art. 6(1)(b)Google WorkspaceEmail & calendarUSA (EU–US DPF)Art. 6(1)(b)/(f)WhatsApp (Meta)Client communicationUSA (EU–US DPF)Art. 6(1)(b)/(f)

Where data is transferred to the USA, this occurs under the EU–US Data Privacy Framework or Standard Contractual Clauses (Art. 46 GDPR).

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — request a copy of your data

  • Right to rectification (Art. 16) — correct inaccurate data

  • Right to erasure (Art. 17) — request deletion of your data

  • Right to restrict processing (Art. 18)

  • Right to data portability (Art. 20)

  • Right to object (Art. 21) — object to processing based on legitimate interest

  • Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact: julien@unlockyourmind.co

10. Right to Complain

You have the right to lodge a complaint with a supervisory authority. The responsible authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstraße 219 10969 Berlin Website: https://www.datenschutz-berlin.de

11. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in legal requirements or services offered. The current version is always available on this page.

Last updated: February 2026