Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Next Level Education GmbH

Gottlob-Schneider-Straße 37

76275 Ettlingen, Germany

Email: daniel@act-beratung-berlin.de

We only process our users' personal data to the extent necessary to provide a functioning website along with our content and services. The legal bases are Art. 6(1)(a) (consent), (b) (performance of a contract), (c) (legal obligation) and (f) (legitimate interest) GDPR.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, connection data (IP address, user agent, timestamp, requested URL) is processed in order to deliver the page and protect against attacks. The legal basis is Art. 6(1)(f) GDPR. The transfer to the US relies on the EU-US Data Privacy Framework and standard contractual clauses. A data processing agreement is in place with Vercel.

When you access the site, the hosting provider automatically collects technical data (IP address, date, time, browser type, operating system, referrer). This data is used for the technical delivery and security of the site and is deleted after a short period. It is not combined with other data sources.

When you use the contact form, the information you provide (first name, email address, message, and your preferred way of having a session) is used solely to process your enquiry and is not shared with third parties.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiry) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

You book appointments directly on this website. For that I process only: first and last name, email address, phone number, type of appointment, date and time, place (practice or phone), payment method and payment status, and – for paid appointments – when you agreed to the service starting early. Nothing about your concerns or your health is asked for. To prevent abuse, your IP address is stored only as a one-way hash that cannot be traced back.

The purpose is arranging and holding the appointment (Art. 6(1)(b) GDPR). Booking data is stored with Supabase (Supabase Inc., data centre in Frankfurt am Main); confirmation emails are sent via Resend (Resend Inc., USA; basis: EU standard contractual clauses). I add the appointment to my own Apple iCloud calendar (Apple Distribution International Ltd., Ireland).

Retention: name, email address and phone number are deleted automatically about six months after the appointment. Information I must keep for tax and commercial-law reasons (e.g. payment amounts and records) is kept until the statutory retention period ends.

If you pay online, you are taken to Stripe (Stripe Payments Europe Ltd., Dublin, Ireland) or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). You enter your payment details (e.g. card number) directly there; I never receive them. I only receive confirmation of whether and how much was paid. The legal basis is Art. 6(1)(b) GDPR. More information: https://stripe.com/privacy and https://www.paypal.com/uk/legalhub/privacy-full.

On the page about the practice in Berlin-Kreuzberg you can display a map from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is loaded only once you click “Load map” — until then no connection to Google is made. When it loads, connection data (including IP address, browser information and time of access) is transmitted to Google; Google may set cookies and may also transfer data to the USA. The same applies if you use the “Open route in Google Maps” link.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, given by the click; it applies to that page view only. Transfers to the USA are based on the EU-US Data Privacy Framework and/or the EU Commission's standard contractual clauses. More information: https://policies.google.com/privacy.

To evaluate how this website is used, we use Plausible Analytics, a privacy-friendly web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia (EU). Plausible sets no cookies and stores no personal data: your IP address is not stored, but only used for one day in a hashed, non-reversible form to distinguish visits. What is recorded: page views, referrer, approximate country, device type and individual interactions (e.g. clicking "book an introduction", opening the booking calendar, submitting the contact form, switching language) – none of it linked to you as a person.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement). As no cookies are set and no personal data is processed, no consent is required. Data is processed on servers in the EU. More information: https://plausible.io/data-policy.

This website uses only one technically necessary storage entry (local storage or a cookie named “preferredLocale”) to remember your chosen language (German or English) for your next visit. No tracking or marketing cookies are set, and no data is shared with third parties.

You have the following rights: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), withdrawal of any consent given, and the right to lodge a complaint with a supervisory authority (Art. 77). The competent authority is the data protection supervisory authority of the German state (Bundesland) where the controller is based.

If you have questions about data protection, you can reach us at: daniel@act-beratung-berlin.de