Skip to content
Mess 2 Yes Coaching

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Andrea Kirste, Mess 2 Yes Coaching LLC, 1101 S ROGERS CIR STE 4, FL 33487 Boca Raton, Florida, USA, Tel.: +49 157 37604431, E-Mail: info@mess-2-yes.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you merely visit our website for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Used browser
  • Used operating system
  • Used IP address (possibly in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

3) Hosting

This website is operated by a processor located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place. A content delivery network is not used; the site does not load any content from third-party servers. Fonts, images, stylesheets and scripts are hosted entirely on our own server.

4) Cookies and Storage on Your Device

This website sets no cookies. Nothing else is stored on your device either – neither local storage nor session storage. There is therefore no consent banner: there would be nothing to consent to.

No analytics or tracking tools are in use. No Google Analytics, no Matomo, no tracking pixels, no advertising networks and no social networks.

4a) Newsletter

You can subscribe to our newsletter in the footer of every page. Only the email address you enter is processed.

What happens to it: It is forwarded by email to info@mess-2-yes.com. It is not stored on the server – there is no subscriber list on this website and no interface through which subscriptions could be viewed. Subscribers are added to the distribution list manually.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future – informally, to the address given above. Your address will then be removed from the distribution list.

4b) Spam Protection for the Forms

To keep the forms on this website from being flooded by machines, our own spam protection checks every submission. It runs on the same server; no data is transmitted to third parties.

What is stored:

  • time, result of the check and a score. Retention: 90 days.
  • an identifier derived from your IP address – the address itself is not stored. The identifier is regenerated daily; after that it can no longer be linked to any address. Retention: 90 days.
  • counters per time window, to throttle bulk submissions. A few hours.

Not stored: name, email address, subject or message text. The content of the forms does not appear in this database.

Where a submission looks suspicious, the protection gives your browser a small computational task (“proof of work”). It runs on your device and transmits nothing but the result; nothing is stored in the process.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in fending off automated bulk submissions and in the secure operation of the website.

5) Contact

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the relevant matter has been finally clarified and provided there are no statutory retention obligations.

6) Tools and Miscellaneous

No further third-party tools or services are integrated. In particular there is no consent management tool – it would serve no purpose, since this website sets no cookies (see section 4).

Nor are map services, video platforms, third-party fonts or social media buttons embedded. Opening a page creates no connection to third parties.

7) Rights of the Data Subject

7.1 The applicable data protection law grants you the following data subject rights with respect to the controller regarding the processing of your personal data (rights of access and intervention), whereby reference is made to the specified legal basis for the respective exercise requirements:

  • Right to access according to Art. 15 GDPR;
  • Right to rectification according to Art. 16 GDPR;
  • Right to erasure according to Art. 17 GDPR;
  • Right to restriction of processing according to Art. 18 GDPR;
  • Right to notification according to Art. 19 GDPR;
  • Right to data portability according to Art. 20 GDPR;
  • Right to withdraw consent according to Art. 7 para. 3 GDPR;
  • Right to lodge a complaint according to Art. 77 GDPR.

7.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

8) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and – if relevant – additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).

In the case of processing based on express consent according to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.

If there are statutory retention periods for data processed under Art. 6 para. 1 lit