Privacy Policy
Our website address is: https://aureliemaire.com.
We are delighted that you are interested in our company. Data protection is a very high priority for the management of Aurelie Hick Lifestyle Coaching Est. The use of the Internet pages of the Aurelie Hick Lifestyle Coaching Est. is possible without any indication of personal data. However, if a data subject wants to use special enterprise services via our Internet page, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally acquire the consent of the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to the Aurelie Hick Lifestyle Coaching Est. By means of this data protection statement, our company wants to inform the general public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, by means of this data protection declaration, data subjects are informed of their rights.
As the controller, Aurelie Hick Lifestyle Coaching Est. has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, data transmissions over the Internet may in principle contain security holes, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transfer personal data to us by alternative means, for example by telephone.
1. Definitions
The data protection declaration of the Aurelie Hick Lifestyle Coaching Est. is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration must be readable and understandable for the general public, as well as our customers and business partners. To ensure this, we would first like to explain the terminology used.
In this data protection declaration, we use the following terms:
a) Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an “identifiable natural person” is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, a location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
b) Data subject
The data subject means each identified natural person whose personal data are processed by the controller.
c) Processing
Processing means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Limitation of processing
Limitation of processing means the marking of retained personal data with a view to limiting their further processing.
e) Profiling
Profiling means any form of automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict factors concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a way that they can no longer be attributed to a specific data subject without recourse to additional information, provided that this additional information is kept separately and subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
g) Controller
The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing operation; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the controller may be designated or the specific criteria for such designation may be laid down by Union law or by the law of a Member State.
(h) Sub-processor
The processor is the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) Recipient
The recipient is the natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular enquiry in accordance with Union law or the law of a Member State shall not be regarded as recipients; the processing of such data by the public authorities in question shall be in accordance with the applicable data protection rules depending on the purposes of the processing.
(j) Τiers
The third party is a natural or legal person, public authority, department or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.
k) Consent
The consent of the data subject is any freely given, specific, informed and unambiguous indication of his or her wishes by which the data subject accepts, by means of a declaration or a clear positive act, that personal data relating to him or her may be processed.
2. Name and address of the controller
The controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable to the Member States of the European Union and other data protection provisions is
Aurelie Hick Lifestyle Coaching Est.
Telephone number: 971(0)50544703
Email: hello@aureliemaire.com
Website: www.aureliemaire.com
Website design: Celia Hub Studio – https://celiahubstudio.com
3. Cookies
The website of Aurelie Hick Lifestyle Coaching Est. uses cookies. Cookies are text files stored on a computer system by a web browser program.
Many websites use cookies. Many cookies contain a so-called cookie ID. The cookie ID is a unique cookie identifier. It consists of a string of characters through which websites and servers can be assigned to a specific web browser in which cookies are stored. This allows visiting websites and servers to differentiate the individual web browser of the person concerned from other web browsers containing other cookies. Each specific Internet browser can be recognised and identified by means of the unique cookie ID.
Through the use of cookies, Aurelie Hick Lifestyle Coaching Est. can provide users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of cookies, the information and offers on our website can be optimised with the user in mind. Cookies allow us, as mentioned above, to recognise users of our website. The purpose of this recognition is to make the use of our website easier for users. The user of the website that uses cookies does not, for example, have to enter access data every time he/she accesses the website, because this is taken care of by the website and the cookie is thus stored on the user’s computer system. Another example is the cookie from a shopping cart on an online shop. The online shop remembers the products that a customer has placed in the virtual shopping cart via a cookie.
The person concerned can prevent the setting of cookies via our website at any time by means of the corresponding configuration of the Internet browser used, and can therefore permanently reject the setting of cookies. In addition, cookies that have already been set can be deleted at any time via an Internet browser or other software. This is possible with all popular Internet browsers. If the person concerned deactivates the setting of cookies on the Internet browser fully usable.
4. Collection of general data and information
The website of the Aurelie Hick Lifestyle Coaching Est. collects a series of general data and information when a data subject or automated system calls up the website. This general data and information is stored in the server log files. Collected can be (1) the types of Internet browsers and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so called referrers), (4) the sub-websites, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of an attack on our computer systems.
By using this general data and information, the Aurelie Hick Lifestyle Coaching Est. does not reach any conclusions about the data subject. Rather, this information is used to (1) properly deliver the content of our website, (2) optimize the content of our website as well as its advertising, (3) ensure the long-term viability of our computer systems and website technology, and (4) provide law enforcement authorities with information necessary for criminal prosecution in the event of a cyber attack. Of which, Aurelie Hick Lifestyle Coaching Est. analyzes anonymously collected data and information in a statistical way, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from any personal data provided by the data subject.
5. Registration on our website
The data subject has the opportunity to register on the website of the controller by entering personal data. The personal data to be transmitted to the controller is determined by the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller for its own purposes. The controller may request the transfer to one or more processors (e.g. a parcel service) which also use personal data for an internal purpose attributable to the controller.
When registering on the website of the controller, the IP address – assigned by the Internet Service Provider (ISP) and used by the data subject – the date and time of registration are also stored. The storage of this data takes place in the context that this is the only way to prevent the misuse of our services and, if necessary, to enable the investigation of offences committed. To this extent, the storage of these data is necessary to secure the controller. This data is not passed on to third parties, unless there is a legal obligation to pass on this data or if the passing on serves the purpose of criminal proceedings.
The registration of the person concerned by the voluntary indication of personal data is intended to enable the controller to offer the person concerned content or services that can only be offered to registered users due to the nature of the subject in question. Registered persons may, at any time, without constraint, change the personal data specified during registration or delete them completely from the data stock of the data controller.
The data controller must, at any time, provide each data subject with information on the personal data stored on the data subject upon request. In addition, the data controller must correct or delete personal data at the request or indication of the data subject, insofar as there is no legal obligation to retain them. All employees of the controller are available to the data subject as contact persons.
6. Subscription to our newsletters
On the website of the Aurelie Hick Lifestyle Coaching Est. users are given the opportunity to subscribe to our enterprise’s newsletters. The input mask used for this purpose determines which personal data are transmitted, as well as when the newsletter is ordered by the controller.
Aurelie Hick Lifestyle Coaching Est. regularly informs its customers and business partners by means of a newsletter. The newsletter of the enterprise can be received by the data subject only if (1) the data subject has a valid e-mail address, and (2) the data subject registers for the newsletter. A confirmation e-mail will be sent for the first time to the e-mail address registered by the data subject, for legal reasons, during the double opt-in procedure. This confirmation e-mail serves to prove whether the owner of the e-mail address is authorised as a data subject to receive the newsletter.
During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet Service Provider (ISP) and used by the data subject during registration, as well as the date and time of registration. The collection of this data is necessary in order to understand the (possible) misuse of the data subject’s e-mail address at a later date, thus serving the purpose of legal protection of the controller.
The personal data collected within the framework of the newsletter registration will only be used to send our newsletter. In addition, newsletter subscribers can be informed via e-mail as long as this is necessary for the operation of the newsletter service or for a registration in question, for example in the case of changes to the newsletter offer or in the case of changed technical circumstances. Personal data will not be passed on by the newsletter service to third parties. The registration for our newsletter can be terminated by the data subject at any time. The consent of the data subject to the storage of personal data for the purpose of sending the newsletter can be revoked at any time. For the purpose of revoking consent, a corresponding link is included in each newsletter. It is also possible to unsubscribe to the newsletter at any time directly on the website of the controller or to communicate it to the controller in a different way.
7. Newsletter-Tracking
The newsletter of Aurelie Hick Lifestyle Coaching Est. contains so-called tracking pixels. I448. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the integrated tracking pixel, Aurelie Hick Lifestyle Coaching Est. can see if and when an e-mail was opened by the data subject and which links in the e-mail were opened by the data subject.
These personal data collected by the tracking pixels in the newsletter are stored and analysed by the controller for the optimisation of the newsletter dispatch, as well as for the better adaptation of the content of future newsletters to the interests of the data subject. This personal data is not passed on to third parties. Data subjects have the right to revoke their separate declaration of consent at any time by means of the double opt-in procedure. After the revocation, these personal data will be deleted by the controller. Aurelie Hick Lifestyle Coaching Est. automatically regards the withdrawal from the receipt of the newsletter as a revocation.
8. Possibility of contact via the website
The website of the Aurelie Hick Lifestyle Coaching Est. contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, also including a general address of the so-called electronic mail (e-mail address). If the data subject contacts the controller via e-mail or a contact form, the personal data transmitted by the data subject are automatically stored. The personal data voluntarily transmitted by the data subject to the controller are stored for the purpose of processing or communicating with the data subject. There is no transmission of this personal data to third parties.
9. Function of the comments on the blog of the website
Aurelie Hick Lifestyle Coaching Est. offers users the opportunity to leave individual comments on individual blog entries on the website of the controller. A blog is a publicly accessible web portal, through which one or more persons called bloggers or web-bloggers can post articles or record their thoughts in so-called blog posts. Blogposts can be commented on by third parties.
If a data subject comments on the blog published on this website, the data subject’s comment is also stored and published, together with information on the date of the comment and the user’s pseudonym chosen by the data subject. In addition, the IP address assigned to the data subject by the Internet service provider is also recorded. This storage of the IP address takes place for security reasons and in case the data subject violates the rights of third parties or posts illegal content via a comment. The storage of this personal data is therefore in the interest of the data controller, so that he can exonerate himself in case of an offence. These collected personal data will not be passed on to third parties, unless such transmission is required by law or serves the defence of the data controller.
10. Registration for comments on the blog of the website
Comments on the blog of Aurelie Hick Lifestyle Coaching Est. may be entered by third parties. In particular, it is possible that a commenter is registered for comments that follow his/her comments on a particular blog post.
If the data subject decides to register for this option, the controller will send an automatic confirmation e-mail to check via the double opt-in procedure whether the e-mail owner has decided for this option. The option to register for comments can be terminated at any time.
11. Routine erasure and blocking of personal data
The controller shall process and retain the personal data of the data subject only for the period necessary to achieve the purpose of retention or as long as this is granted by the European or other legislators in the laws or regulations to which the controller is subject.
If the purpose of retention is not applicable, or if the retention period prescribed by the European legislator or other competent legislator expires, the personal data is routinely blocked or deleted in accordance with legal requirements.
12. Rights of the data subject
a) Right of confirmation
Every data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If the data subject wishes to avail himself of this right of confirmation, he may at any time contact an employee of the controller.
b) Right of access
The data subject has the right given by the European legislator to obtain, at any time, access by the controller to the information about his/her personal data stored and a copy of this information. In addition, the European directives and regulations grant the data subject access to the following information
the purposes of the processing;
the categories of personal data concerned
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients who are established in third countries or international organisations;
where possible, the envisaged period of storage of personal data or, where this is not possible, the criteria used to determine this period
the existence of the right to request from the controller the rectification or erasure of personal data, or a restriction of the processing of personal data relating to the data subject, or the right to object to such processing
the right to lodge a complaint with a supervisory authority;
where personal data are not obtained from the data subject, any available information as to their source
the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4), and, at least in such cases, relevant information concerning the underlying logic and the significance and expected consequences for the data subject of such processing.
In addition, the data subject has the right to be informed if personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject has the right to be informed of the appropriate safeguards with regard to this transfer.
If the data subject wishes to avail himself or herself of this right of access, he or she may, at any time, contact an employee of the controller.
c) Right of rectification
The data subject has the right granted by the European legislator to obtain from the controller, as soon as possible, the rectification of personal data relating to him or her which are inaccurate. In view of the purposes of the processing operation, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.
If the data subject wishes to exercise this right of rectification, he or she may, at any time, contact an employee of the controller.
d) Right to erasure (“right to be forgotten”)
The data subject has the right granted by the European legislator to obtain from the controller the erasure, as soon as possible, of personal data relating to him or her and the controller is obliged to erase such personal data as soon as possible, where one of the following grounds applies:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
The data subject withdraws the consent on which the processing is based, in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no compelling legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
The personal data have been processed unlawfully.
The personal data must be erased in order to comply with a legal obligation laid down by Union law or by the law of the Member State to which the controller is subject.
The personal data have been collected in the context of the provision of information society services as referred to in Article 8(1) of the GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Aurelie Hick Lifestyle Coaching Est., the data subject may at any time contact any employee of the controller. An employee of the Aurelie Hick Lifestyle Coaching Est. shall promptly ensure that the erasure requested is completed immediately.
Where the controller has made the personal data public and is required to erase them pursuant to Article 17(1), the controller shall, taking into account the available technologies and the costs of implementation, take reasonable steps, including technical steps, to inform the controllers processing those personal data that the data subject has requested the erasure by those controllers of any links to, or copies or reproductions of, those personal data to the extent that the processing is not required. An employee of Aurelie Hick Lifestyle Coaching Est. will arrange the necessary measures in individual cases.
e) Right to the restriction of processing
The data subject has the right granted by the European legislator to obtain from the controller the restriction of the processing when one of the following applies
The accuracy of the personal data is contested by the data subject, for a period allowing the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject objects to the erasure of the data and demands instead the restriction of their use.
The controller no longer needs the personal data for the purposes of the processing operation but they are still necessary for the data subject to establish, exercise or defend legal claims
The data subject has objected to the processing under Article 21(1) of the GDPR during the verification as to whether the legitimate grounds pursued by the controller override those of the data subject.
If one of the following applies, and a data subject wishes to request the restriction of the processing of personal data stored by the Aurelie Hick Lifestyle Coaching Est., the data subject may at any time contact any employee of the controller. An employee of the Aurelie Hick Lifestyle Coaching Est will arrange the restriction of the processing.
f) Right to data portability
Data subjects have the right granted by the European legislator to receive personal data relating to them which they have supplied to a controller in a structured, commonly used and machine-readable format. Data subjects should have the right to transmit such data to another controller without the controller to whom the personal data have been communicated hindering this, where the processing is based on consent pursuant to Article 6(1)(a) or Article 9, (2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, if the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, by exercising the right to portability pursuant to Article 20(1) of the GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically possible and where this does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may, at any time, contact any employee of the Aurelie Hick Lifestyle Coaching Est.
g) Right of objection
The data subject has the right granted by the European legislator to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
The Aurelie Hick Lifestyle Coaching Est. shall no longer process the personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests and rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the Aurelie Hick Lifestyle Coaching Est. processes personal data for marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing purposes. This also applies to profiling insofar as it is related to such marketing. If the data subject objects to the processing for canvassing purposes, the personal data shall no longer be processed for such purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by Aurelie Hick Lifestyle Coaching Est for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
In order to assert the right to object, the data subject may, at any time, contact any employee of the Aurelie Hick Lifestyle Coaching Est. Furthermore, when using information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise the right to object by means of automated procedures using technical specifications.
h) Automated individual decision and profiling
The data subject has the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way, where the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and a controller or (2) is not authorised by Union law or the law of the Member State to which the controller is subject and which also provides for appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or (3) is not based on the data subject’s explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a controller, or (2) it is based on the data subject’s explicit consent, the Aurelie Hick Lifestyle Coaching Est. shall implement suitable measures to safeguard the data subject’s rights and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may at any time contact any employee of the Aurelie Hick Lifestyle Coaching Est.
i) Right to withdraw consent to processing
The data subject has the right granted by the European legislator to withdraw the consent to the processing of his or her personal data at any time.
If the data subject wishes to exercise the right to withdraw the consent, he or she may at any time contact any employee of the Aurelie Hick Lifestyle Coaching Est.
13. Legal basis for processing
Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for the specific purpose of processing. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, for example where processing operations are necessary for the supply of goods or for any other service, the processing is based on Article (1) (b) GDPR. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in the case of requests for our products or services. If our company is subject to a legal obligation to process personal data, e.g. for compliance with tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In some cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if the visitor was injured in our company and his or her name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or third party. This processing is then based on Article 6(1)(d) GDPR. Finally, processing operations can be based on Article 6(1)(f). This legal basis is used for processing operations that are not covered by any of the above-mentioned articles, if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except in the case where the interests or fundamental rights and freedoms of the data subject override such interests which require the protection of personal data. Such processing operations are particularly permitted as they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject was a customer of the controller (Recital 47 sentence 2 GDPR).
14. Legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1) (f) GDPR, our legitimate interest is to perform our activities for the benefit of all our employees and shareholders.
15. Period for which personal data is retained
The criteria used to determine the retention period is the respective legal retention period. After the expiry of this period, the data is systematically deleted, as long as it is no longer required for the execution of the contract or the opening of a contract.
16. Provision of personal data as a legal or contractual requirement; Necessary for the conclusion of a contract; Obligation of the data subject to provide personal data; Possible consequences of not providing such data
We clarify that the provision of personal data is required in part by law (e.g. tax provisions) or contractual provisions (e.g. information about the contractual partner). Sometimes it may be necessary to conclude a contract with data that the data subject has provided to us and that can then be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him. Failure to provide personal data would mean that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact an employee. The employee clarifies to the data subject whether the provision of personal data is required by law or by contract or is necessary for the conclusion of a contract, whether there is an obligation to provide personal data and the consequences of the failure to provide personal data.
17. Existence of an automated decision-making mechanism
As a responsible company, we do not use any automated decision making or profiling processes.
This Privacy Policy has been generated by the Privacy Policy Generator of the External Data Protection Officers that was developed in cooperation with the Media Lawyers from WBS-LAW.