Privacy policy

As of: November 2026

1. Controller

Philipp Peukert · fam Hypnose
Käthe-Kollwitz-Straße 11, 53842 Troisdorf, Germany
Email: hypnose@freeaboutme.de

I have not appointed a data protection officer, as I am not obliged to do so.

2. Overview

I only process personal data insofar as this is necessary for operating this website, for your request and for the coaching, or if you have given your consent. Fonts and images are stored on my own server; simply visiting the website does not transmit any data to Google Fonts or similar services.

3. Hosting and server log files

This website is provided via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you access it, Cloudflare processes technically necessary data, in particular IP address, date and time, the page accessed, browser and operating system. This serves the secure and stable delivery of the website and the defense against attacks. The legal basis is my legitimate interest pursuant to Art. 6(1)(f) GDPR. A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

4. Contact by email

If you write to me, I process your information in order to answer your request (Art. 6(1)(b) GDPR; for general inquiries, (f)). Emails to hypnose@freeaboutme.de are handled by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) and forwarded to my mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A transfer to the USA is possible in the process; Google is certified under the EU-U.S. Data Privacy Framework. Please do not send me information about your health by email; use the Suitability Check for that instead.

5. Suitability Check (inquiry form)

The information from the Suitability Check is stored directly in a database of my hosting provider Cloudflare (Cloudflare D1, storage location EU, see the section on hosting). It is not sent by email. Only I have access. For uploading the preparation questionnaire, I use the form service Tally (Tally BV, Belgium). This data is stored encrypted on servers in the EU. A data processing agreement is in place with Tally.

The following is processed: your answers about your issue, the safety questions, your first name, your email address, country/time zone, voluntarily your WhatsApp number and, for persons under 18, the name and email of a parent. The purpose is to assess whether and how I can support you, and to prepare a possible coaching.

Your information about your issue may constitute health data (Art. 9 GDPR). I only process this with your explicit consent (Art. 9(2)(a), Art. 6(1)(a) GDPR), which you give in the form. I process the remaining information to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by email; this does not affect the lawfulness of the processing carried out before the withdrawal.

If no coaching takes place, I will delete your information no later than six months after my reply. If a coaching takes place, the retention periods in Section 7 apply.

No advertising or analytics services run on the Suitability Check page.

6. Contact via WhatsApp

If you voluntarily give me your WhatsApp number or write to me there, I use WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland) to arrange appointments. WhatsApp processes, among other things, your phone number and metadata; a transfer to the USA is possible. The legal basis is your consent (Art. 6(1)(a) GDPR). I prefer to discuss content relating to your issue in conversation rather than by chat.

7. Coaching

For the coaching, I process the data required for preparation, implementation, follow-up and invoicing (Art. 6(1)(b) and (c) GDPR; health information only with your explicit consent). You upload the preparation questionnaire via a Tally form (see Section 5, storage in the EU). I retain invoice data in accordance with the periods required by tax law (usually eight to ten years). I delete personal content from the coaching no later than three years after our last contact, unless you request deletion earlier.

8. Cookies, consent and advertising services

On your first visit, a banner asks whether you consent to analytics and marketing services. Without your consent, these services are not loaded. I store your choice in your browser (local storage); this is technically necessary (Section 25 (2) TDDDG, German Telecommunications Digital Services Data Protection Act). You can change or withdraw your choice at any time via “Cookie settings” in the footer.

The legal basis for the following services is your consent (Section 25 (1) TDDDG, Art. 6(1)(a) GDPR).

Google Analytics and Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): With your consent to analytics, I measure how the website is used. With your consent to marketing, I measure whether ads lead to inquiries. For this, cookies or identifiers are set and usage data (e.g. shortened IP address, pages accessed, device data) is transmitted to Google. I use Google Consent Mode; without consent, no Google services are loaded. A transfer to the USA is possible; Google is certified under the EU-U.S. Data Privacy Framework.

Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland): With your consent to marketing, I use the Meta Pixel to measure whether ads on Facebook and Instagram lead to visits and inquiries, and to show ads to people who have visited my website. For this, identifiers are set and usage data is transmitted to Meta. Only the fact that a page was accessed or an inquiry was sent is transmitted – not your answers from the Suitability Check. Meta and I are joint controllers for the collection and transmission (Art. 26 GDPR); the agreement can be found at facebook.com/legal/controller_addendum. A transfer to the USA is possible; Meta is certified under the EU-U.S. Data Privacy Framework.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent given (Art. 7(3)). An email to hypnose@freeaboutme.de is sufficient.

Right to object: Insofar as I process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de).

10. Obligation to provide data

You are not obliged to give me any data. However, without the mandatory information in the Suitability Check, I cannot review your request.