thankscoach Privacy Policy

As of November 1, 2026

The protection of your personal data is important to us. In this Privacy Policy, we explain what personal data we process when you visit our website and use the features offered there, for what purposes this is done, and what rights you have.

Personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, name, email address, phone number, or IP address.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection regulations.

1. Data Controller

The entity responsible for the data processing described in this Privacy Policy is:

thx Coaching & Development GmbH
Tempelhofer Ufer 11
10963 Berlin
Germany

Phone: +49 30 2000927 60
Email: info@thankscoach.io
Website: https://www.thankscoach.io/

To the extent that personal data is processed on behalf of a corporate client, responsibility under data protection law is determined by the specific processing operation and the relevant contractual agreements.

2. Data Protection Officer

Our Data Protection Officer can be reached at the following contact information:

Christoph Heinrich
Stresemannstraße 29
22769 Hamburg

If you have any questions about data protection, you can also contact support@thankscoach.io at any time.

3. Access to and Technical Provision of Our Website

3.1 Processing of Technical Access Data

When you visit our website, information that is technically necessary for providing our online services is automatically processed.

These include, in particular:

• IP address

• Date and time of access

• Pages and Resources Accessed

• Referrer Information

• Browser Type and Browser Version

• Operating System Used

We process this data to provide our website, ensure its proper functioning, detect technical errors, and protect our systems from unauthorized access and misuse.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the secure, stable, and functional operation of our website.

Technical log data is generally deleted after seven days, unless longer retention is necessary to investigate specific security incidents.

3.2 Hosting by Squarespace

We use the Squarespace service to host our website.

As part of the operation of this website, technical access data may be transmitted to Squarespace and processed there. This is done, in particular, to deliver our website and ensure its technical functionality.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the reliable and secure provision of our online services.

For more information about Squarespace's privacy policy, visit: https://www.squarespace.com/privacy

4. Contacting Us and Contact Forms

If you contact us by email, phone, or through a contact form, we will process the personal data you provide in order to handle your inquiry.

These may include:

• Name and Business Contact Information

• Company and Job Title

• Details of Your Inquiry

• Additional information you have voluntarily provided

Your data is processed to handle your inquiry, to communicate with you, and, if applicable, to prepare for a business partnership.

The legal basis is Article 6(1)(b) of the GDPR, to the extent that processing is necessary to take steps prior to entering into a contract in response to your request. For general business inquiries, particularly those from company representatives, the legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in processing business inquiries and communicating with prospective clients and business partners.

We will retain your data only for as long as is necessary to process your request and, if applicable, to maintain a subsequent business relationship. Statutory retention requirements remain unaffected.

5. Online Appointment Scheduling via Calendly

To schedule meetings and product demos, we offer the option of booking appointments online via Calendly. The service provider is Calendly, LLC.

When booking an appointment, the following data in particular may be processed:

• Name

• E-mail address

• Selected Date and Time Zone

• Phone number, if applicable

• Any additional information you provide on the booking form

We use this information to schedule, conduct, and, if necessary, reschedule or cancel the requested appointment.

The legal basis is Article 6(1)(b) of the GDPR, insofar as scheduling the appointment serves the purpose of taking precontractual measures at your request. For other business appointments, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in efficient appointment scheduling and communication.

When using the appointment scheduling feature, personal data may be processed by Calendly. For more information, please see the provider's privacy policy: https://calendly.com/legal/privacy-notice

6. Newsletters and information about our offerings

You can sign up for our newsletter on our website.

We use the information you provide—specifically your email address and, if applicable, your first and last name—to send you information about thankscoach, our services, expert content, events, and other news.

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR.

You can withdraw your consent at any time, effective for the future. To do so, you can use the unsubscribe link in our newsletter emails or contact us directly.

Withdrawal of consent does not affect the lawfulness of the processing that took place based on your consent up until the time of withdrawal.

We generally store your data for the purpose of sending the newsletter until you unsubscribe. Records of consent granted may also be retained to the extent necessary to fulfill legal documentation requirements or to defend against legal claims.

We use Squarespace for technical email delivery and HubSpot for analytics.

7. Cookies and Similar Technologies

Our website uses cookies and, where applicable, similar technologies. These may include, for example, local storage technologies in the browser.

Cookies are small pieces of data that may be stored on your device when you visit a website. They can serve various purposes, such as saving technical settings or analyzing website usage.

7.1 Technically Necessary Technologies

Certain technologies are required for our website to function properly and to provide features that you have specifically requested.

Provided that the requirements of § 25(2) of the TDDDG are met, no consent is required for the storage or retrieval of information on your device.

To the extent that personal data is processed in this context, such processing is based on Article 6(1)(f) of the GDPR or another applicable legal basis. Our legitimate interest lies in the secure and functional operation of our website.

7.2 Analytics and Marketing Technologies

To the extent that we use technologies that require consent under Section 25(1) of the TDDDG, we will not use them until we have obtained your prior consent.

To the extent that personal data is processed in this manner, the legal basis is Article 6(1)(a) of the GDPR.

These technologies can be used to understand how our website is used, improve our offerings, or measure the success of our marketing efforts.

You are free to decide whether you want to allow such technologies. You can revoke your consent at any time, effective for the future.

7.3 Cookie Settings and Withdrawal

You can adjust your settings for technologies that require consent at any time through our cookie settings.

For more information about the technologies actually used, their providers, purposes, and retention periods, please see the Cookie Overview.

8. Reach Measurement, Tag Management, and Conversion Tracking

To the extent that we use services to analyze website usage or measure the success of our marketing efforts, we will inform you about the data processing that takes place in connection with these activities.

Depending on the service used, this may include technical usage data, such as information about page views, interactions, technical characteristics of the browser, and, where applicable, pseudonymous identifiers.

If consent is required for this, the relevant technologies will not be activated until you have given your consent.

9. Information Regarding Our Coaching Services

Our website provides information about our business coaching services and allows you to contact us to arrange for these services.

Additional personal data may be required in connection with the registration for or provision of a coaching service. This may include, for example, your name, business contact information, the company you work for, and details regarding your organizational affiliation.

9.1 Data Transmission by Corporate Customers

When a company provides its employees’ personal data for registration in a coaching program, the processing and responsibility are determined by the specific program and the contractual division of roles.

To the extent that we act as a data processor, we process personal data in accordance with the relevant agreements pursuant to Article 28 of the GDPR.

To the extent that we ourselves determine the purposes and essential means of processing, we act as the data controller and provide information about the applicable legal bases, purposes, and retention periods.

9.2 Information for Business Customers

If a coaching service is provided as part of a corporate program, administrative data may be processed for the purpose of organizing and managing the program and may be disclosed to authorized company representatives to the extent permitted by law.

We distinguish between administrative information and confidential coaching content.

No confidential coaching information is disclosed to the employer.

9.3 Other Coaching Applications

Additional privacy notices—such as separate privacy policies—may apply to the use of specific coaching applications, particularly for registration and the use of digital coaching features.

These are provided in the respective context of use, to the extent that additional processing of personal data—not covered by this statement—takes place there.

10. Service Communication

In connection with requested or existing services, we can provide the necessary service information upon request.

This includes, for example, information about scheduled appointments, the organization of a service, changes to our services, or security-related matters.

To the extent that communication is necessary for the performance of a contract or for the implementation of precontractual measures, it is based on Article 6(1)(b) of the GDPR.

For other necessary business communications, processing may be based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper organization of our business processes and communications.

We do not use email addresses—which we process exclusively on behalf of our corporate clients for the purpose of providing coaching services—for our own direct marketing purposes.

11. Recipients of Personal Data

We may use external service providers to host our website, facilitate communication, and deliver our services.

These include, in particular, technical providers for website hosting, form processing, appointment scheduling, email communication, and—where actually used—newsletter distribution, as well as analytics and marketing functions.

To the extent that service providers process personal data on our behalf, we enter into the necessary agreements in accordance with Article 28 of the GDPR.

To the extent that providers act in their capacity as data controllers under data protection law, we comply with the relevant legal requirements.

The following providers are particularly relevant to the website features described here:

• Squarespace: technical hosting of the website and related features.

• Calendly, LLC: Appointment scheduling and management, to the extent that the corresponding feature is used.

We will only disclose your personal data to other recipients if there is a legal basis for doing so, such as to perform an agreed-upon service or to comply with legal obligations. We do not sell your personal data.

12. International Data Transfers

When using certain external service providers, it may be necessary to transfer personal data to recipients outside the European Union or the European Economic Area.

Such transfers are made exclusively in accordance with the legal requirements set forth in Articles 44 et seq. of the GDPR.

If the European Commission has issued a relevant adequacy decision for a third country or a specific recipient, data may be transferred pursuant to Article 45 of the GDPR.

For appropriately certified U.S. companies, this may specifically be the adequacy decision regarding the EU-U.S. Data Privacy Framework.

In the absence of a relevant adequacy decision, appropriate safeguards under Article 46 of the GDPR may be used, such as the European Commission’s standard contractual clauses. Where necessary, these are supplemented by additional safeguards.

You can request information about the safeguards used for specific data transfers and how to obtain a copy of them by contacting us at our privacy contact address.

13. Retention Period and Deletion

As a general rule, we store personal data only for as long as is necessary to fulfill the respective purposes of processing.

The specific retention periods depend on the type of processing and are specified, to the extent possible, in the relevant sections of this Privacy Policy.

We will then delete the data, provided there are no legal retention requirements or other legitimate reasons for continuing to store it.

In particular, certain tax and commercial law documents are subject to statutory retention periods of six, eight, or ten years.

To the extent that data is necessary for the assertion, exercise, or defense of legal claims, it may be retained to the extent permitted by law until such purpose no longer applies.

14. Your Privacy Rights

In accordance with the applicable legal requirements, you have the following rights:

Right of Access (Art. 15 of the GDPR)

You may request information about whether we process personal data about you and what data is involved.

Right to Rectification (Art. 16 of the GDPR)

You may request the correction of inaccurate personal data or the completion of incomplete personal data.

Right to Erasure (Art. 17 of the GDPR)

You may request the deletion of your personal data in accordance with the applicable legal requirements.

Right to Restriction of Processing (Art. 18 of the GDPR)

Under certain conditions, you may request that the processing of your personal data be restricted.

Right to Data Portability (Art. 20 of the GDPR)

Subject to the legal requirements, you may request that we provide you with the relevant personal data in a structured, commonly used, and machine-readable format or that we transfer it to another data controller.

Right to Object (Art. 21 of the GDPR)

To the extent that we process personal data based on Article 6(1)(f) of the GDPR, you may object to the processing for reasons related to your particular situation.

If we process your personal data for direct marketing purposes, you may object to this processing at any time without providing a reason.

Right to Withdraw Consent (Art. 7(3) of the GDPR)

You may revoke your consent at any time, effective for the future.

The lawfulness of the processing up to the time of withdrawal remains unaffected by this.

Right to File a Complaint (Art. 77 of the GDPR)

You have the right to file a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws.

The following regulatory authority has jurisdiction over us in particular:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin

Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de/

15. Requirement to Provide Personal Data

The provision of personal data is generally not contractually required when simply visiting our website for informational purposes. However, technically necessary access data is processed when the website is accessed.

When you contact us, book an appointment, or request a service, we need certain information in order to process your request or provide the service you’ve requested.

Optional additional information is not required for the respective function.

The specific information required is indicated by the respective function or the corresponding labeled input fields.

16. Changes to This Privacy Policy

We review this Privacy Policy regularly and update it as necessary to comply with legal requirements or changes in our data processing practices.

You can find the current version at: https://www.thankscoach.io/privacy

17. Contact Information for Data Protection Inquiries

If you have any questions about the processing of your personal data or would like to exercise one of your data protection rights, you can contact us at any time:

thx Coaching & Development GmbH
Tempelhofer Ufer 11
10963 Berlin

Email: support@thankscoach.io