1. Controller
The controller responsible for processing personal data on this website is:
Natalie Aurora Speer
Braunstraße 22
30169 Hannover
Germany
Email: coaching@natalieauroraspeer.com
Telephone: 0511 2624874
2. Purposes and legal bases
Personal data is processed only where necessary to operate this website, respond to enquiries, provide coaching services, process payments, fulfil contracts, and comply with legal obligations.
Depending on the situation, processing is based on:
- consent under Article 6(1)(a) GDPR;
- pre-contractual measures or performance of a contract under Article 6(1)(b) GDPR;
- compliance with legal obligations under Article 6(1)(c) GDPR; or
- legitimate interests under Article 6(1)(f) GDPR, particularly the secure and efficient operation of this website.
Consent may be withdrawn at any time with effect for the future. Personal data is retained only for as long as necessary or required by law.
3. Hosting and server log files
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When this website is accessed, STRATO automatically processes technical information such as the requested page, date and time, browser, operating system, referrer URL and IP address. STRATO stores IP addresses for security purposes for a maximum of seven days. The log files made available to me contain anonymised IP addresses and are available for up to six weeks.
Processing is based on Article 6(1)(f) GDPR, particularly the legitimate interest in the secure and reliable operation of the website. STRATO processes this data on my behalf in accordance with Article 28 GDPR.
4. Contact by email
If you contact me by email, I process your name, email address, message and any attachments in order to respond to your enquiry and, where applicable, prepare or provide coaching services.
The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual communication. For general enquiries, processing is based on Article 6(1)(f) GDPR. The data is deleted when it is no longer required, unless legal retention obligations apply.
Email communication is processed using the email services provided by STRATO GmbH. STRATO may process the sender and recipient addresses, technical transmission data, message content and attachments insofar as necessary to deliver and store the email.
5. Payment processing through Stripe
Payments are processed through Stripe. Depending on the service and processing purpose, relevant Stripe entities may include Stripe Payments Europe, Limited, Stripe Technology Europe, Limited and Stripe Technology Company, Limited, based in Ireland.
Stripe processes data required to complete and secure the payment, including your name, email address, payment method, transaction details, IP address, device and browser information, and fraud-prevention data. Payment details are entered directly on Stripe’s hosted checkout page. I do not receive your complete card or bank-account details.
Processing is based on Article 6(1)(b) GDPR. Additional processing may be based on Article 6(1)(c) or Article 6(1)(f) GDPR, particularly for legal compliance, security and fraud prevention.
The information requested during checkout is necessary to process the payment and conclude or perform the contract. Without this information, the payment and booking cannot be completed.
Stripe may act as a processor on my behalf and, for certain purposes, as an independent controller. Further information is available in Stripe’s Privacy Policy.
Stripe confirms that its role and responsible entity vary according to the particular processing activity.
6. Recipients and international transfers
Personal data is shared only where necessary, particularly with STRATO for hosting, Stripe and the relevant financial institutions for payment processing, and public authorities where legally required.
Stripe may process personal data outside the European Economic Area. Where no adequacy decision applies, Stripe relies on appropriate safeguards, including the European Commission’s Standard Contractual Clauses. Where applicable, transfers to certified organisations in the United States may also be based on the EU–US Data Privacy Framework. Further information about these safeguards is available in Stripe’s Privacy Center.
7. Your data-protection rights
You have the right to request:
- access to your personal data;
- correction of inaccurate data;
- deletion or restriction of processing;
- data portability;
- objection to processing based on legitimate interests; and
- withdrawal of consent at any time for the future.
You also have the right to lodge a complaint with a data-protection supervisory authority.
The competent supervisory authority is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
Email: poststelle@lfd.niedersachsen.de
Telephone: +49 511 120-4500
8. Cookies and Stripe checkout
This website does not currently use analytics or marketing cookies. Technically necessary cookies may be used only where required for the secure operation of the website.
When you click a payment link, you leave this website and are redirected to Stripe. Stripe may use cookies and similar technologies on its checkout page in accordance with its own Cookie Policy.
9. Data security
This website uses SSL/TLS encryption. You can recognise an encrypted connection by https:// in your browser’s address bar.
Appropriate technical and organisational measures are used to protect personal data against loss, misuse and unauthorised access. However, complete security during internet transmission cannot be guaranteed.
10. Coaching services, videos and health information
For coaching services, I may process your name, contact details, booking information and any dance videos or other materials you voluntarily provide. For participants under 18, I may also process the contact details of a parent or legal guardian.
Please do not provide health or injury information unless it is relevant to the safe provision of the coaching service. Where such information is required, I will obtain separate, explicit consent before processing it. Only information necessary to adapt the coaching safely will be processed. It will not be used for medical diagnosis.
The legal basis is Article 6(1)(b) GDPR. Health information is processed under Article 9(2)(a) GDPR.
11. Retention and updates
Personal data is stored only for as long as necessary for its purpose or as required by law. Coaching videos and voluntarily supplied health information will be deleted when they are no longer needed, unless otherwise agreed.
This Privacy Policy may be updated if the website or services change.
Last updated: July 2026