Privacy Policy
We are pleased that you are interested in our organization. The protection of your Personal Data is particularly important to us. As a rule, you can use our website without disclosing any Personal Data to us. However, if you wish to use more specific services, such as booking a discovery call or sending a message via our contact form, we may have to process your Personal Data. If we wish to process data about you and we cannot rely on any other legal basis, we will always ask you for your Consent first (e.g., via a cookie banner).
We always comply with applicable data protection laws when handling your Personal Data (such as name, address, or email). With this Privacy Policy, we inform you about which data we process and what rights you have as a Data Subject.
We have taken various technical and organizational measures to protect your data on our website in the best possible way. Nevertheless, there are always risks on the internet and complete protection is not possible.
For reasons of better readability, the simultaneous use of the language forms male, female, diverse and other gender identities (m/f/d/other) is avoided in this Privacy Policy. All formulations used apply equally to all genders.
1. Definitions
In this Privacy Policy, we use terms from the General Data Protection Regulation (GDPR). We explain the most important ones here so our statement is easy to understand.
Personal Data means any information relating to an identified or identifiable natural person — someone who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
Data Subject is any identified or identifiable natural person whose Personal Data is processed.
Processing is any operation performed on Personal Data, whether or not by automated means, such as collection, storage, use, disclosure, or erasure.
Controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.
Consent is any freely given, specific, informed and unambiguous indication of the Data Subject's wishes by which they, by a statement or a clear affirmative action, agree to the Processing of Personal Data relating to them.
2. Name and address of the Controller
The Controller within the meaning of the General Data Protection Regulation and other applicable data protection laws is:
Imen Bouzouita
Mahlower Strasse 14
12049 Berlin
Germany
E-Mail: hello@primamateriacoaching.com
Website: www.primamateriacoaching.com
3. Collection of general data and information
Our website collects a range of general data and information each time it is accessed. This data is stored in the log files of our hosting provider. Among other things, the browser type and version, the operating system used, the website from which an accessing system reaches our website (referrer), the sub-pages accessed, the date and time of access, an anonymized or shortened IP address, and the internet service provider are recorded.
We do not draw any conclusions about you from this general data. It is used to correctly deliver our website's content, ensure the long-term functionality and security of our systems, and, in the event of an attack, provide law enforcement authorities with the information necessary for prosecution.
The purpose of processing is to avert danger and ensure IT security. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the protection of our information technology systems. Log files are deleted once the stated purposes have been achieved.
4. Contact via the website and your Consent
Our website's contact form allows quick electronic contact with us. If you contact us by email or via the contact form, the Personal Data you transmit (such as your name, email address and message) is stored automatically. This data is processed solely for the purpose of handling your inquiry and contacting you, based on your Consent in accordance with Art. 6 (1) (a) GDPR. Messages sent through our contact form are transmitted via FormSubmit; see the dedicated section below for details.
5. Routine deletion and restriction of Personal Data
We process and store Personal Data only for the period required to achieve the purpose of processing, or as required by applicable law. Once the purpose no longer applies or a statutory retention period expires, the Personal Data is routinely restricted or deleted.
6. Your rights as a Data Subject under the GDPR
You have the following rights, which you can exercise at any time by contacting us:
Right to confirmation and information — you can ask whether we process Personal Data concerning you, and request a copy of that data along with information about the purposes, categories, recipients, and envisaged storage period of the Processing.
Right to rectification — you can request the correction of inaccurate Personal Data or the completion of incomplete data.
Right to erasure ("right to be forgotten") — you can request the deletion of your Personal Data where, among other things, it is no longer necessary for the purposes for which it was collected, or you withdraw your Consent and there is no other legal basis for Processing.
Right to restriction of Processing — you can request that we limit the Processing of your data under certain conditions, for example while we verify its accuracy.
Right to data portability — where Processing is based on Consent or a contract and carried out by automated means, you can request your data in a structured, machine-readable format.
Right to object — you can object at any time to Processing based on our legitimate interests, on grounds relating to your particular situation.
Right to withdraw Consent — where Processing is based on your Consent, you can withdraw it at any time with effect for the future, without affecting the lawfulness of Processing carried out before the withdrawal.
7. Legal basis for Processing
Art. 6 (1) (a) GDPR is our legal basis for Processing for which we have obtained your Consent (e.g., analytics cookies, contact form submissions). Art. 6 (1) (b) GDPR applies where Processing is necessary for the performance of a contract or pre-contractual measures (e.g., arranging your discovery call). Art. 6 (1) (f) GDPR applies to Processing necessary for our legitimate interests, such as the security of our website, provided these interests do not override your rights and freedoms.
8. Duration for which Personal Data is stored
The criterion for the duration of storage is the respective statutory retention period, or, in its absence, the time necessary to fulfil the purpose of Processing. After this period expires, the data is routinely deleted.
9. Recipients in third countries and appropriate safeguards
Some of the third-party services we use (listed below) are operated by companies based in the United States. Where Personal Data is transferred to such third countries, this is based on Standard Contractual Clauses, an applicable EU adequacy decision, or the respective provider's certification under the EU-U.S. Data Privacy Framework. You can request a copy of the relevant safeguards from us at any time.
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the Processing of your Personal Data infringes the GDPR.
11. Calendly
We use Calendly to let you book a discovery call directly through our website. Calendly is only loaded once you click a "Book a Discovery Call" link. When you use it, Personal Data such as your name, email address and the appointment details you provide are processed.
Recipient: Calendly, Inc., 115 E Main St., Ste A1B, Buford, GA 30518, USA.
Purpose and legal basis: scheduling your appointment, based on Art. 6 (1) (b) GDPR (performance of pre-contractual measures at your request).
Calendly is based in the USA; transfers are based on Standard Contractual Clauses or an equivalent safeguard. Further information: calendly.com.
12. GitHub Pages
Our website is hosted using GitHub Pages. Technical access data (such as IP address, browser type, requested files and timestamps) is processed automatically to deliver the website and ensure its security.
Recipient: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.
Purpose and legal basis: publication and reliable delivery of our website, based on Art. 6 (1) (f) GDPR (legitimate interest in operating our website efficiently and securely).
GitHub is based in the USA; transfers are based on Standard Contractual Clauses or an equivalent safeguard. Further information: pages.github.com.
13. GoDaddy
Our domain, primamateriacoaching.com, is registered and managed through GoDaddy.
Recipient: GoDaddy Operating Company, LLC, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, USA.
Purpose and legal basis: domain registration and DNS management necessary to operate our website, based on Art. 6 (1) (f) GDPR.
GoDaddy is based in the USA; transfers are based on Standard Contractual Clauses or an equivalent safeguard. Further information: godaddy.com.
14. Google Fonts
We use Google Fonts to display text consistently across devices and browsers. When our website is loaded, a request is sent to Google's servers, which may process your IP address and browser information.
Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Ireland Limited acts as EU representative).
Purpose and legal basis: consistent, fast display of our website's typography, based on Art. 6 (1) (f) GDPR.
Google is based in the USA; transfers are based on Standard Contractual Clauses or an equivalent safeguard. Further information: policies.google.com/privacy.
15. Google Analytics
We use Google Analytics to understand how visitors use our website. Google Analytics is only loaded and set after you actively accept cookies via our cookie banner; if you decline or do not respond, it is not loaded. When active, it processes data such as your IP address, browser information and interaction with our pages.
Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Ireland Limited acts as EU representative).
Purpose and legal basis: analyzing and improving our website, based on your Consent, Art. 6 (1) (a) GDPR. You can withdraw your Consent at any time via the "Privacy Choices" link in the footer of our website.
Google is based in the USA; transfers are based on Standard Contractual Clauses or an equivalent safeguard. Further information: policies.google.com/privacy.
16. FormSubmit
Our contact form uses FormSubmit, a form-processing service, to deliver your message to our inbox. When you submit the contact form, the Personal Data you enter (name, email address and message) is transmitted to FormSubmit, which forwards it directly to our email address. According to FormSubmit's own privacy policy, submitted data is not stored permanently and is not used for any purpose other than delivering it to us.
Recipient: FormSubmit (operated by Devro LABS).
Purpose and legal basis: transmission of your contact form submission to us, based on your Consent, Art. 6 (1) (a) GDPR, given by voluntarily submitting the form.
FormSubmit's registered business address is not published on its website. Where Personal Data is transferred outside the EU/EEA, this is based on Standard Contractual Clauses or an equivalent safeguard; you can request further details from us. Further information: formsubmit.co/privacy.pdf.
Last updated: July 2026