Ein Bild von Julia Goessler GmbH

Privacy Policy

Affected Individuals

This privacy policy applies to all individuals who visit this website. All personal designations refer to all genders and related linguistic forms, particularly diverse, female, and male. Every personal designation is to be understood as "(m/f/d)."


Controller

The controller for the processing described here is:

Julia Goessler GmbH
Eberhard-Roters-Platz 10
10965 Berlin, Germany

Phone: +49 176 3637 9990
Email: support@juliagoessler.com

Managing Director: Julia Goessler


Rights

  1. Individuals have the following rights concerning their personal data: the right to access, the right to rectification of inaccurate data, the right to erasure of data no longer necessary for retention, the right to restriction of processing, and the right to data portability. Additionally, they have the right to lodge a complaint with the supervisory authority responsible for the controller.

  2. If processing is based on the individual's consent, they can withdraw their consent at any time with future effect, for example, by sending an informal message to one of the contact channels mentioned above (Controller).

  3. If processing is based on a legitimate interest under Article 6(1)(f) GDPR, individuals can object to processing at any time by sending an informal message to one of the contact channels mentioned above (Controller). If the objection is justified, processing will be discontinued. If the legitimate interest is direct marketing, the objection is always justified.


Transfers to Non-EU Countries

  1. If personal data is transferred to entities outside the European Union, the controller must ensure supplementary safeguards under Articles 44 et seq. GDPR.

  2. If the controller refers to an adequacy decision in this privacy policy, it means that the recipient is in a country, territory, or sector for which the EU Commission has determined an adequate level of data protection. This guarantee follows Article 45 GDPR.

  3. If the controller refers to EU standard contractual clauses, it means that the recipient has contractually committed to respecting EU data protection principles based on the EU standard contractual clauses. This guarantee follows Article 46 GDPR.

  4. If the controller refers to binding corporate rules, it means that the competent supervisory authority has approved the transfer. This guarantee follows Article 47 GDPR.

  5. If the controller relies on the individual's explicit consent for data transfer to a non-EU country, it means that the individual accepts all associated risks. This guarantee follows Article 49(1)(a) GDPR.
    Risk notice: The United States does not have a data protection law comparable to the GDPR. U.S. authorities have broad data access rights without applying the proportionality principle as in the EU. Furthermore, EU citizens have no effective legal remedies in such cases.

The above provisions only apply if explicitly referenced in the following sections of this privacy policy.

Additional Information

  1. Automated decision-making, including profiling, does not occur.

  2. Processing is only legally required if Article 6(1)(c) GDPR is referenced.

Principles of Data Processing

  1. When individuals visit this website for informational purposes only, i.e., without actively interacting with it, the controller collects only the data necessary to display the website:

    • IP address

    • Date and time of request

    • Time zone difference to Greenwich Mean Time (GMT)

    • Requested page/content

    • Access status/HTTP status code

    • Transferred data volume

    • Referring website

    • Browser, operating system, and its interface

    • Language and version of the browser software

  2. Purpose: Displaying the website. Legal basis: Article 6(1)(f) GDPR (legitimate interest in website operation).

  3. Data deletion occurs after the informational use ends. Purpose: Compliance with legal obligations under Articles 5(1)(a, e) GDPR. Legal basis: Article 6(1)(c) GDPR.


Data Processing Based on Legitimate Interest

  1. In addition to basic data processing, the controller processes website visitors' data based on a legitimate interest under Article 6(1)(f) GDPR.

  2. Processing scenarios include:


Marketing Communication to Contract Partners

  • The controller stores email addresses and names of individuals to send them useful information via email.

  • The controller also stores information about the contractual relationship to justify legitimate interest in marketing communications.

  • This is justified under Recital 47 Sentence 7 GDPR.

  • Data processed:

    1. Email address

    2. Name

    3. Contract status information

Special right to object: Individuals can object at any time, for example, by sending an informal message to the controller (contact details in the imprint and at the start of this policy).


Data Processing in Contractual Relationships

  1. The controller processes visitor data to establish, execute, or terminate contracts under Article 6(1)(b) GDPR.

  2. If individuals are employees or applicants, processing is based on Article 88 GDPR in conjunction with Section 26(1) BDSG (Federal Data Protection Act 2018).

Consent-Based Data Processing

  1. In addition to basic data processing, the controller processes website visitor data based on consent under Article 6(1)(a) GDPR.

  2. If individuals are employees (including applicants), processing follows Article 88 GDPR in conjunction with Section 26(2) BDSG (Federal Data Protection Act 2018).

Cookies

We use cookies to personalize content and ads, provide social media features, and analyze website traffic. We share information about your website usage with social media, advertising, and analytics partners. These partners may combine this information with other data you have provided or that they have collected through your use of their services.


Third-Party Processing and U.S. Data Transfers

Some cookies involve data processing by third parties in the U.S.. The EU Commission and the European Court of Justice (ECJ) have not certified the U.S. as an "adequate" data protection country. U.S. authorities may access personal data for monitoring purposes, and EU citizens have no effective legal remedies against such access.

Third-Party Providers & Tools Used

This website integrates various third-party services, including:

  • Cloudflare (Website security and performance)

  • HubSpot (Form submission tool)

  • ZohoOne (CRM & marketing tools)

  • Digistore24 (Reseller platform)

  • Calendly (Appointment booking)

  • Google Analytics (User behavior analysis)

  • Facebook Pixel (Marketing & tracking)

  • Stripe (Payment processing)

  • YouTube & Vimeo (Video embedding)

  • WhatsApp Business (Customer communication)

  • Active Campaign (Email Marketing); You can anytime unsubscribe from receiving emails from us by simply clicking on the unsubcribe link at the bottom of the emails.




Legal Basis for Third-Party Data Processing

Processing is based on:

  • Article 6(1)(a) GDPR (Consent)

  • Article 6(1)(b) GDPR (Contract execution)

  • Article 6(1)(f) GDPR (Legitimate interest)

  • Article 49(1)(a) GDPR (Explicit consent for non-EU data transfers)


Final Notes

If you have any questions regarding this privacy policy or wish to exercise your rights, please contact:

support@juliagoessler.com

Julia Goessler GmbH, Eberhard-Roters-Platz 10, 10965 Berlin, Germany