Privacy Policy

1. Data Controller

The controller responsible for data processing in connection with this questionnaire is:

A data protection officer is not required by law (§ 38 BDSG).

2. Purpose of Data Collection

This questionnaire serves the preparation and safe delivery of your breathwork individual coaching or workshop. Specifically:

• Communication and scheduling
• Screening for health-related contraindications to protect your safety
• Tailoring the session to your individual situation and goals

3. Categories of Data Processed

Contact and personal data

• Name (required)
• Age (required)
• Email address (required)
• Phone number (optional)

Motivation and goals

• Reasons for your interest in breathwork (optional)
• Prior experience with breathwork (optional)
• Current life themes and goals (optional)

Health-related data (special categories, Art. 9 GDPR)

• Current emotional well-being (e.g. stress, anxiety, grief)
• Physical complaints (e.g. respiratory, circulatory, digestive)
• Psychological history (e.g. psychotic episodes, bipolar disorder, trauma)
• Physiological conditions (e.g. epilepsy, cardiovascular diseases)
• Special circumstances (e.g. asthma, pregnancy, addiction)
• Other health information (free text, optional)

Consent data

• Confirmation that the service does not constitute medical treatment (required)

4. Legal Basis

Contact and personal data

Processing of your contact data is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). This data is necessary for the preparation and delivery of the coaching agreement.

Health-related data

Health data constitutes a special category of personal data (Art. 9(1) GDPR). Processing is only lawful with your explicit consent.

Legal basis: Art. 6(1)(a) in conjunction with Art. 9(2)(a) GDPR (explicit consent).

Motivation and goals

Processing of these optional details is based on Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (pre-contractual measures at your request).

5. Consent to Processing of Health Data

Before entering health-related data, you will be asked to give your explicit consent within the questionnaire. This consent is:

• Voluntary — you decide which information to provide
• Informed — this privacy policy provides comprehensive information prior to consent
• Specific — consent applies exclusively to the stated purpose (preparation and safe delivery of breathwork coaching)
• Revocable — you can withdraw your consent at any time (see Section 11)

Consent is given via a mandatory checkbox in the questionnaire and documented together with the response timestamp.

6. Recipients and Disclosure

Your data is processed exclusively by Armin Goffin (controller).

• No disclosure to third parties takes place.
• No data processors are used — the survey software (LimeSurvey) is self-hosted.
• No transfer to third countries — all data remains on a server in Germany.

7. Retention Period

• Health data: Stored for the duration of the coaching relationship and deleted no later than 6 months after the last session.
• Contact data: Stored for the duration of the coaching relationship and up to 3 years thereafter (civil limitation period, § 195 BGB).
• Consent records: Retained for up to 3 years after the end of data processing (accountability principle, Art. 5(2) GDPR).

Statutory retention obligations (e.g. tax law under § 147 AO) remain unaffected but do not apply to health data.

8. Hosting and Technical Security

The questionnaire is provided via a self-hosted instance of the open-source software LimeSurvey, hosted on a dedicated server in Germany.

The following technical and organisational measures are in place to protect your data:

• Encrypted transmission — all communication uses HTTPS (SSL/TLS)
• Access restrictions — server and survey software are secured (SSH key authentication, firewall)
• Sole access — only the controller has access to the survey data
• Regular updates — server OS, web server and survey software are kept up to date
• Regular backups — encrypted database backups

When accessing the survey page, server log files are automatically created (anonymised IP address, timestamp, page accessed, browser type). These serve technical security purposes only and are automatically deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

9. Cookies and Tracking

This page and the questionnaire use no cookies for tracking or analytics purposes.

LimeSurvey sets a technically necessary session cookie solely to ensure the questionnaire functions correctly (associating your answers during completion). This cookie is automatically deleted when you close your browser. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

No user behaviour analysis takes place.

10. Your Rights

You have the right to:

• Access — information about the data stored about you (Art. 15 GDPR)
• Rectification — correction of inaccurate data (Art. 16 GDPR)
• Erasure — deletion of your data, provided no retention obligations apply (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability — receive your data in a structured, machine-readable format (Art. 20 GDPR)
• Objection — to processing based on legitimate interest (Art. 21 GDPR)

11. Right to Withdraw Consent

You have the right to withdraw your consent to the processing of health data at any time with future effect.

Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal (Art. 7(3) GDPR).

Upon withdrawal, your health data will be deleted without undue delay, unless statutory retention obligations apply.

12. Right to Lodge a Complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Competent supervisory authority:

13. Obligation to Provide Data

Providing your name, age and email address is required for the performance of the coaching agreement. Without this information, the coaching cannot take place.

Providing health-related data is voluntary. It serves your safety, as certain pre-existing conditions may constitute contraindications for intensive breathwork. Without this information, safe delivery may not be guaranteed in all cases.

All other information (motivation, goals, phone number) is voluntary and serves solely to better prepare your session.

14. Automated Decision-Making

No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place.

15. Currency

This privacy policy will be updated in the event of legal or technical changes.

Last updated: April 2026