top of page

Privacy Policy

Last updated: 26 August 2026

​

Protecting your personal data is important to me. This Privacy Policy explains what personal data is processed when you visit my website or use my services, why it is processed, and what rights you have.

​

1. Data Controller

The controller responsible for processing personal data on this website is:

​

Sandy Saffeels
Lust auf Ordnung
Gollierplatz 2
80339 Munich
Germany

Email: sandy@lust-auf-ordnung.com

​

2. General Information on Data Processing

Personal data is any information that can be used to identify you personally. This includes, for example, your name, email address, IP address, or information you enter into a form.

I process personal data only where necessary to provide this website, respond to your enquiry, deliver my services, or where you have given your consent.

Depending on the type of processing, the relevant legal bases include:

  • Art. 6(1)(a) GDPR, where you have given your consent,

  • Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or to take steps prior to entering into a contract,

  • Art. 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation,

  • Art. 6(1)(f) GDPR, where processing is necessary for legitimate interests and your interests do not override them.

Personal data is generally stored only for as long as it is needed for the relevant purpose. Statutory retention obligations, particularly those arising under tax and commercial law, remain unaffected.

This website uses an encrypted connection. You can recognise this by “https://” in your browser’s address bar. This helps prevent data you send to this website from being read by third parties.

​

3. Hosting and Website Operation with Wix

This website was created with Wix and is hosted by Wix. The providers are Wix.com Ltd., 5 Yunitsman Street, Tel Aviv, Israel, and, for users in Europe, Wix Online Platforms Limited, 1 Grant’s Row, Dublin 2, D02 HX96, Ireland.

When you visit this website, the following data may be processed:

  • IP address,

  • date and time of access,

  • the page or file requested,

  • referrer URL,

  • browser type and browser version,

  • operating system and device type,

  • technical log and security data.

This processing is necessary to provide the website securely, reliably, and without technical errors. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing a secure and reliable online presence.

Wix also processes information entered through forms and may store this information in my Wix account or Wix CRM.

Wix may process data in data centres within and outside the European Union, including in Ireland, Israel, the United States, South Korea, and Taiwan. The European Commission has adopted an adequacy decision for Israel. According to Wix, transfers to other third countries are protected by appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses.

For further information, please see the Wix Privacy Policy.

​

4. Contact and Forms

If you contact me by email or through a form, I process the information you provide in order to respond to your enquiry.

Depending on the form, this may include:

  • first and last name,

  • email address,

  • telephone number,

  • place of residence,

  • information about your enquiry or interests,

  • messages entered in free-text fields,

  • information relating to courses, workshops, or services you are interested in.

If your enquiry relates to working with me or making a booking, processing is based on Art. 6(1)(b) GDPR. General enquiries are processed on the basis of my legitimate interest in responding to your message in accordance with Art. 6(1)(f) GDPR.

Your data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations or legitimate reasons require it to be stored for longer.

Your data will only be shared where this is necessary to respond to your enquiry or provide the requested service.

​

5. Registration for Courses and Workshops

If you register through my website for a course, workshop, information session, or another service, I process the information you provide in order to organise, communicate, and deliver the relevant service.

The legal basis is Art. 6(1)(b) GDPR. If you voluntarily provide additional information, this information is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Registration data may be stored within the Wix system and used for further communication by email. Data relevant to contracts and billing is stored in accordance with statutory retention obligations.

​

6. Newsletter and MailerLite

I use MailerLite to send my newsletter and provide the free KonMari workbook.

The provider for customers based in the European Economic Area is:

MailerLite Limited
88 Harcourt Street
Dublin 2, D02 DK18
Ireland

The MailerLite signup form embedded on my website is only loaded once you have consented to the “Marketing” category in the cookie banner. At that point, your IP address, device and browser information, and technical usage data may already be transmitted to MailerLite.

When you subscribe to the newsletter, your email address and information about the time and technical circumstances of your registration are processed. Registration uses a double opt-in process. This means that you first receive an email asking you to confirm your subscription. This also serves as evidence of your consent.

The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR. Where cookies or comparable technologies are used, this is additionally based on your consent pursuant to Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

MailerLite may process sending, delivery, opening, and click data in order to deliver the newsletter and statistically evaluate how it is used.

You may withdraw your consent at any time with effect for the future. You can do this by using the unsubscribe link at the bottom of any newsletter or by contacting me directly.

Once you unsubscribe, your email address will no longer be used to send the newsletter. Information required to demonstrate that valid consent was obtained may be retained until the relevant statutory limitation periods have expired.

According to MailerLite, its data centres are located in Germany or the Netherlands. For further information, please see the MailerLite Privacy Policy.

​

7. Appointment Scheduling with Calendly

The Calendly appointment scheduling service is embedded on my website.

The provider is:

Calendly, LLC
115 E Main Street, Suite A1B
Buford, GA 30518
USA

Calendly is only loaded once you have consented to the “Functional” category in the cookie banner. Without your consent, the embedded calendar remains blocked.

When Calendly is loaded, the following data may be processed:

  • IP address,

  • device and browser information,

  • date and time of access,

  • approximate location or time zone,

  • usage and log data,

  • cookies and information stored locally in your browser.

As part of its technical operation, Calendly loads additional services, including Google reCAPTCHA, Stripe, Airbrake, and external font files.

If you book an appointment, the information you enter is also processed. This includes, in particular, your name, email address, selected appointment, time zone, and any additional information you choose to provide.

Calendly is embedded on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Your booking information is processed in order to prepare and conduct the requested appointment pursuant to Art. 6(1)(b) GDPR.

Calendly also processes data in the United States. According to Calendly, it is certified under the EU-US Data Privacy Framework and additionally uses the European Commission’s Standard Contractual Clauses.

For further information, please see the Calendly Privacy Notice.

​

8. Online Sessions Using Zoom

Courses, workshops, introductory consultations, and other online sessions may take place using Zoom.

The provider is:

Zoom Communications, Inc.
55 Almaden Boulevard, Suite 600
San Jose, CA 95113
USA

When you participate in a Zoom session, the following data may be processed:

  • your name and display name,

  • your email address, where provided or where you are signed in,

  • meeting information such as the date, time, and duration,

  • device, connection, and usage data,

  • audio, video, and chat content, where you use these functions.

Processing takes place in order to conduct the booked consultation, course, or workshop and is based on Art. 6(1)(b) GDPR.

A session will only be recorded if this has been expressly announced in advance and the required consent has been obtained. The legal basis for any recording is Art. 6(1)(a) GDPR.

Zoom also processes data in the United States and other third countries. According to Zoom, it is certified under the EU-US Data Privacy Framework and uses appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, for other data transfers.

For further information, please see the Zoom Privacy Statement.

​

9. Cookies and Similar Technologies

This website uses cookies and comparable technologies. Cookies are small files stored on your device or technologies that can read information from your browser.

Some cookies are strictly necessary for the website to function securely and reliably. Your consent is not required for these cookies. The legal bases are Section 25(2)(2) TDDDG and Art. 6(1)(f) GDPR.

Other services are only loaded once you have expressly given your consent. The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

On this website, this applies in particular to:

  • Google Tag Services and Google Analytics,

  • Calendly,

  • MailerLite and the embedded newsletter signup form.

You can reopen, change, or withdraw your selection at any time using the cookie icon displayed on the website. Any withdrawal applies with effect for the future.

​

10. Consent Management with Usercentrics

I use Usercentrics for Wix to manage your cookie preferences.

The provider is:

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany

Usercentrics stores and documents whether you have granted or refused consent and for which categories.

The following data may be processed:

  • consent or refusal decision,

  • consent ID,

  • time of the decision,

  • banner and template version used,

  • language setting,

  • referrer URL,

  • browser and device information,

  • IP address.

This processing is necessary to store your preferences and provide evidence of consent or refusal. The legal bases are Art. 6(1)(c) and Art. 6(1)(f) GDPR as well as Section 25(2)(2) TDDDG.

For further information, please see the Usercentrics Privacy Policy.

​

11. Google Analytics and Google Tag Services

This website uses Google Analytics 4 through Google Tag Services. The provider for users in the European Economic Area is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

On my website, Wix assigns Google Analytics to the “Marketing” category. It is therefore only loaded once you have consented to this category in the cookie banner.

Google Analytics processes information including:

  • pages visited,

  • source of the visit,

  • time and duration of the visit,

  • interactions with the website,

  • browser, operating system, and device,

  • approximate location,

  • technical usage and session data.

According to Google, the IP addresses of users in the EU are used only to determine an approximate location and are then discarded before the data is logged.

The following additional functions are not activated in my Google Analytics configuration:

  • Google Signals,

  • linking with Google Ads,

  • collection of user-provided data,

  • use of a custom User-ID.

The retention period is set to two months for event data and 14 months for user data. The retention period for user data is not reset when new activity occurs.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through the cookie settings.

Google may also process data in the United States and other third countries. Where required, Google relies on the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses for these transfers.

For further information, please see the Google Privacy Policy.

You can also use the Google Analytics Opt-out Browser Add-on.

​

12. Transfers of Data to Third Countries

Some of the service providers used on this website process data outside the European Union or the European Economic Area.

Where the European Commission has not adopted an adequacy decision for a particular country, such transfers are based in particular on the EU-US Data Privacy Framework, the European Commission’s Standard Contractual Clauses, or other appropriate safeguards pursuant to Art. 44 et seq. GDPR.

Despite these safeguards, where data is processed in a third country, it cannot be completely ruled out that public authorities may access the data in accordance with local laws.

​

13. Your Rights

Subject to the applicable legal requirements, you have the following rights:

  • the right to access your stored personal data pursuant to Art. 15 GDPR,

  • the right to rectify inaccurate personal data pursuant to Art. 16 GDPR,

  • the right to erasure pursuant to Art. 17 GDPR,

  • the right to restriction of processing pursuant to Art. 18 GDPR,

  • the right to data portability pursuant to Art. 20 GDPR,

  • the right to object to processing pursuant to Art. 21 GDPR,

  • the right to withdraw consent pursuant to Art. 7(3) GDPR.

Withdrawing your consent does not affect the lawfulness of any processing carried out before the withdrawal.

If you would like to exercise any of these rights, please contact:

sandy@lust-auf-ordnung.com

​

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority generally responsible for me is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

Telephone: +49 981 180093-0
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de

​

15. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

​

16. Changes to This Privacy Policy

I reserve the right to update this Privacy Policy if my website, the services used, or the legal requirements change.

The version currently published on this website applies.

bottom of page