Privacy
Policy

1. Who We Are

The data controller responsible for this website is:

Stephanie Maria Baab
The Breath Lab
Matheisweg 14, 83624 Otterfing, Germany
stephanie@thebreathlab.app

This website offers information about coaching, workshops, and educational services relating to breathing, stress regulation, performance, and personal development.

2. What This Policy Covers

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and what rights you have under the General Data Protection Regulation (GDPR) and applicable German law.

We only collect data that is necessary for the purposes described below. We do not sell your data or use it for advertising.

3. Data We Collect and Why

Website hosting — Netlify

This website is hosted by Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, USA). When you visit any page, Netlify's servers automatically record standard technical data including your IP address, browser type and version, the page requested, date and time of access, and referring URL. This data is used to deliver the website and maintain security.

Netlify's Privacy Policy: netlify.com/privacy

Domain registration — GoDaddy

The domain thebreathlab.app is registered with GoDaddy Inc. (100 S. Mill Ave., Suite 1600, Tempe, AZ 85281, USA). GoDaddy may process limited data as part of domain management operations. You do not interact with GoDaddy directly when visiting this website.

GoDaddy's Privacy Policy: godaddy.com/legal/agreements/privacy-policy

Workshop registration — Google Forms

When you register for a workshop, you submit a form provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The form collects:

• First name and last name
• Email address
• Your answer to: "What interests you most about this workshop?"

We use this data to process your registration, send you relevant information about the workshop, and follow up with you if needed.

Discovery call booking — Google Calendar

You can book a discovery call using Google Calendar Appointment Booking. This service collects your name and email address to confirm your booking and send reminders. You interact with this feature directly on Google's platform.

Calls — Google Meet

Calls may be held via Google Meet. During a call, Google may process technical connection data. We do not record calls without your explicit prior consent.

Email — Google Workspace

If you contact us by email, your email address and the content of your message are processed using Google Workspace. We use this data only to respond to your inquiry and keep relevant correspondence.

4. What We Do Not Do

This website does not use:

• Analytics or tracking tools (no Google Analytics, Hotjar, or similar)
• Advertising pixels (no Meta Pixel, LinkedIn Insight Tag, etc.)
• Google Tag Manager or any tag management system
• Embedded YouTube or Vimeo videos
• Payment processing, member areas, or user accounts
• Cookies beyond those technically set by Netlify for site delivery

Fonts used on this website are served directly from our hosting server and do not involve any third-party font provider.

5. A Note on Health Information

6. Data Transfers Outside the EU

Some of the service providers listed above — in particular Google LLC and Netlify, Inc. — are based in the United States and may process your data there. Both companies participate in the EU–US Data Privacy Framework or rely on Standard Contractual Clauses approved by the European Commission to ensure an appropriate level of data protection.

GoDaddy also operates from the US; similar transfer mechanisms apply.

7. How Long We Keep Your Data

We keep personal data for as long as it is necessary for the purposes described in this policy, or as required by law. Specifically:

• Workshop registration data is kept for the duration of the workshop and a reasonable period afterwards to handle any follow-up questions.
• Email correspondence is retained as long as it remains relevant to our business relationship.
• Technical server logs held by Netlify are subject to Netlify's own retention policy.

When data is no longer needed, we delete it or ensure it is deleted by the relevant service provider.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access — you can ask us what data we hold about you
• Rectification — you can ask us to correct inaccurate data
• Erasure — you can ask us to delete your data ("right to be forgotten")
• Restriction — you can ask us to limit how we process your data
• Objection — you can object to processing based on legitimate interests
• Portability — you can request your data in a machine-readable format
• Withdrawal of consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at stephanie@thebreathlab.app. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our location is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
lda.bayern.de

9. Medical Disclaimer

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our services or legal requirements. The date at the top of this page shows when it was last updated. Material changes will be indicated by a new date.

11. Contact

Questions about this Privacy Policy? Contact us at:
stephanie@thebreathlab.app