{"id":251937,"date":"2025-06-26T19:19:19","date_gmt":"2025-06-26T17:19:19","guid":{"rendered":"https:\/\/chapterofgrowth.com\/privacy-policy\/"},"modified":"2026-06-04T11:02:51","modified_gmt":"2026-06-04T09:02:51","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/chapterofgrowth.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"et_pb_section_0 et_pb_section et_section_regular et_block_section preset--module--divi-section--default\">\n<div class=\"et_pb_row_0 et_pb_row et_block_row preset--module--divi-row--default\">\n<div class=\"et_pb_column_0 et_pb_column et_pb_column_4_4 et-last-child et_block_column et_pb_css_mix_blend_mode_passthrough\">\n<div class=\"et_pb_text_0 et_pb_text et_pb_bg_layout_light et_pb_module et_flex_module preset--module--divi-text--default\"><div class=\"et_pb_text_inner\"><h1>Privacy Policy<\/h1>\n<p>&nbsp;<\/p>\n<p>The protection of your personal data is of particular importance to us. We therefore process your data exclusively in accordance with applicable legal provisions (EU General Data Protection Regulation (GDPR), TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing in the course of our activities.  <\/p>\n<\/div><\/div>\n\n<div class=\"et_pb_text_1 et_pb_text et_pb_bg_layout_light et_pb_module et_flex_module preset--module--divi-text--default\"><div class=\"et_pb_text_inner\"><h2><a name=\"_Toc199080057\"><\/a>1. Affected Groups<\/h2>\n<p>To help you keep track of things and find the information relevant to you more quickly, depending on which of my services you use, you will find a list here of exactly those data processing activities that apply to you. Full details on the listed data processing activities, including their legal basis, purpose of processing, and retention period\/deletion deadline, can be found in Section 2: List of All Possible Data Processing Activities. <\/p>\n<h3>Website users<\/h3>\n<p>You can generally use our website without providing any personal information. If you do enter personal information\u2014for example, to contact us or subscribe to a newsletter\u2014we will share the necessary information with companies that process data on our behalf (e.g., to send out the newsletter). We only engage companies that comply with the General Data Protection Regulation.  <\/p>\n<p><strong>Encrypted transmission<\/strong><\/p>\n<p>For security and privacy reasons, this website uses SSL encryption, which prevents third parties from intercepting and reading the data you enter during transmission. You can tell that encryption is active by the padlock or similar symbols in your browser\u2019s address bar. <\/p>\n<p><strong>Data processing points<\/strong><\/p>\n<ul>\n<li>Server logs<\/li>\n<li>Brevo Services - Sales: Integrating Brevo into your website<\/li>\n<li>Google reCaptcha<\/li>\n<li>Google Fonts \u2013 only available for a limited time; the transition to direct embedding is underway.<\/li>\n<li>Cookies<\/li>\n<li>Web Analytics with Matomo<\/li>\n<\/ul>\n<p>Currently, no optional data processing features are implemented! No Google Analytics, no social media links, and no video embeds. <\/p>\n<p>&nbsp;<\/p>\n<h3><a name=\"_Toc199080059\"><\/a>Newsletter subscribers<\/h3>\n<p><strong>Data processing points:<\/strong><\/p>\n<ul>\n<li>Brevo Services - Sales Newsletter Service<\/li>\n<\/ul>\n<h3>Inquiries & Users of the Online Appointment Scheduling System<\/h3>\n<p><strong>Data processing points:<\/strong><\/p>\n<ul>\n<li>Brevo Services - Sales: Scheduling Appointments via Brevo<\/li>\n<li>Microsoft Services<\/li>\n<li>Using Zoom for video calls<\/li>\n<\/ul>\n<h3><a name=\"_Toc199080061\"><\/a>Private customers in general<\/h3>\n<p><strong>Data processing points:<\/strong><\/p>\n<ul>\n<li>Brevo Services<\/li>\n<li>Data processing in connection with order fulfillment and customer service<\/li>\n<li>Order processing, billing, and payment services<\/li>\n<li>Written communication<\/li>\n<li>Using Zoom for video calls<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>2. <span style=\"font-size: x-large;\">List of all possible data processing points<\/span><\/h2>\n<p>&nbsp;<\/p>\n<h3><a name=\"_Toc199080066\"><\/a>Server Logs<\/h3>\n<p>The server that hosts this website stores information that your browser automatically sends to us in what are known as log files. These include: <\/p>\n<ul>\n<li>Browser type and browser version<\/li>\n<li>Operating system used<\/li>\n<li>The page (URL) from which you came to us<\/li>\n<li>The IP address of the accessing computer<\/li>\n<li>Time of the request<\/li>\n<\/ul>\n<p>This data is used exclusively for the technical monitoring of the web server (load, optimization, error detection, security) and is absolutely necessary for these purposes. It is not linked to any other data sources, so it cannot be traced back to specific individuals. It is deleted after three months.  <\/p>\n<p>Data processing is carried out on the basis of Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the proper and secure functioning of the website. <\/p>\n<h3>Brevo Services<\/h3>\n<p>On our website, we use the services of Brevo GmbH, K\u00f6penicker Stra\u00dfe 126, 10179 Berlin, Germany (\u201cBrevo\u201d) to register and manage newsletter subscriptions and to schedule appointments online.<\/p>\n<h4>++Brevo Website Integration<\/h4>\n<p>Some pages on our website contain forms provided by Brevo (Brevo GmbH, K\u00f6penicker Stra\u00dfe 126, 10179 Berlin, Germany), such as those for subscribing to our newsletter or scheduling an appointment. Simply by visiting such a page, a connection is established with Brevo\u2019s servers in order to display the form. <\/p>\n<p>The following technical data is transmitted to Brevo:<\/p>\n<ul>\n<li>\n<p>IP address of the connecting device<\/p>\n<\/li>\n<li>\n<p>Date and time of access<\/p>\n<\/li>\n<li>\n<p>Page accessed (URL)<\/p>\n<\/li>\n<li>\n<p>Browser type and version<\/p>\n<\/li>\n<li>\n<p>Operating system of the device being used<\/p>\n<\/li>\n<li>\n<p>Referrer URL (the previously visited page), if applicable<\/p>\n<\/li>\n<\/ul>\n<p>This data transfer occurs regardless of whether you use or fill out the form. It is technically necessary to enable the form to be displayed and function properly. This data is processed on the basis of our legitimate interest in maintaining a user-friendly and functional website, in accordance with Article 6(1)(f) of the GDPR. Brevo\u2019s servers are located in the European Union.     <\/p>\n<p>For more information about Brevo\u2019s data processing practices, please see Brevo\u2019s Privacy Policy: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.brevo.com\/de\/legal\/privacypolicy\/\">https:\/\/www.brevo.com\/de\/legal\/privacypolicy\/<\/a><\/p>\n<h4>++Newsletter via Brevor Service<\/h4>\n<p>You have the option to subscribe to our newsletter via our website. To do so, we need your email address and your consent to receive the newsletter. Once you have subscribed to the newsletter, we will send you a confirmation email containing a link to confirm your subscription. Data processing is therefore based on the legal provisions of Section 96(3) of the Telecommunications Act (TKG) and Article 6(1)(a) (consent) of the GDPR.   <\/p>\n<p>We use the Brevo service provided by Brevo GmbH, K\u00f6penicker Stra\u00dfe 126, 10179 Berlin, Germany (\u201cBrevo\u201d), for newsletter sign-ups via our website and for sending our newsletter. When you sign up for our newsletter, the data you enter in the sign-up form (name, email address), as well as the date of your registration and the IP address used during registration, are transmitted to Brevo and stored there. The newsletters sent may also contain small images (tracking pixels) or redirected links for statistical analysis purposes, which help us determine whether you have read our newsletter and what type of device you used to do so. This data is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR for the following purposes: transmission of media content (current topics, information on new blog posts, files for personal use), for our own advertising purposes (e.g., to send you current offers), and for analytical purposes to further improve our service. Brevo processes this data exclusively on our behalf and in accordance with our instructions (data processing on our behalf pursuant to Article 28 of the GDPR). A corresponding contract for data processing on our behalf has been concluded with Brevo. Brevo\u2019s servers are located in the European Union.        <\/p>\n<p>Your data will be stored indefinitely until you unsubscribe from the newsletter. You may opt out of receiving the newsletter at any time. To do so, please use the unsubscribe link included in every newsletter. Your data related to the newsletter will then be deleted immediately. If you encounter any issues, please send me an email so I can manually remove your data from the mailing list and resolve the problem.    <\/p>\n<p>For more information about Brevo\u2019s data processing practices, please see Brevo\u2019s Privacy Policy: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.brevo.com\/de\/legal\/privacypolicy\/\">https:\/\/www.brevo.com\/de\/legal\/privacypolicy<\/a> <\/p>\n<h4> ++Online appointment scheduling via Brevo<\/h4>\n<p>We also use the Brevo service provided by Brevo GmbH, K\u00f6penicker Stra\u00dfe 126, 10179 Berlin, Germany (\u201cBrevo\u201d) for online appointment scheduling. When you use this service, you will be redirected directly to the Brevo website and will book your appointment via their platform. The processing of the data you enter there, as well as the time of your booking and your IP address, is based on your consent in accordance with Art. 6(1)(a) GDPR. Brevo processes this data exclusively on our behalf and in accordance with our instructions (data processing in accordance with Art. 28 GDPR). A corresponding data processing agreement has been concluded with Brevo. Brevo\u2019s servers are located in the European Union.       <\/p>\n<p>When you access the Brevo service and its website, your technical data (IP address, etc.) is also stored on their site. You can find all information regarding Brevo\u2019s data processing in Brevo\u2019s Privacy Policy: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.brevo.com\/de\/legal\/privacypolicy\/\">https:\/\/www.brevo.com\/de\/legal\/privacypolicy\/<\/a> <\/p>\n<h3><a name=\"_Toc199080068\"><\/a>Using Zoom for video calls<\/h3>\n<p>We use the online video conferencing platform Zoom for consultations. Zoom is a service provided by Zoom Video Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, CA 95113, USA. <\/p>\n<p>When we communicate via Zoom, the content of the conversation (i.e., audio and video) is encrypted so that only the participants can access it. No recordings are made. <\/p>\n<p>Zoom also processes information you provide, such as your name, phone number, or email address, as well as data collected automatically, such as your IP address, the MAC address of the device you are using, the operating system, the client software you are using, and the type of camera, microphone, and speakers. It also tracks whether you are transmitting audio via phone or VoIP and whether you are participating in the call with or without video. In addition, the duration of the call, your name during the call, and the contents of the chat are processed. <\/p>\n<p>Data processing is based on Article 6(1)(b) (performance of a contract) and Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the simple and effective conduct of online meetings via the Internet. <\/p>\n<p>Zoom retains the data only for as long as is necessary to provide the service or for the other purposes mentioned above.<\/p>\n<p>We have entered into a data processing agreement with Zoom, in which Zoom commits to complying with the Standard Contractual Clauses defined by the European Commission.<\/p>\n<p>For more details on Zoom's data processing practices, please visit: <a href=\"https:\/\/zoom.us\/de-de\/privacy.html\" target=\"_blank\" rel=\"noopener\">https:\/\/zoom.us\/de-de\/privacy.html<\/a><\/p>\n<h4><\/h4>\n<h3><a name=\"_Toc199080069\"><\/a>Google reCaptcha<\/h3>\n<p>We use the service provided by \u201cGoogle Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland,\u201d to protect our website from spam and abuse.<\/p>\n<p>To do this, data is sent to Google that enables it to distinguish between humans and robots. In most cases, this happens without a human having to answer questions or identify images. <\/p>\n<p>Data processing is carried out on the basis of Article 6(1)(f) (legitimate interest) of the GDPR.<\/p>\n<p>Unser Anliegen im Sinne der DSGVO (berechtigtes Interesse) ist der Schutz unserer Webseite vor Spam und Missbrauch.<\/p>\n<p>For more information about the data processed by Google, please visit the following links: <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy<\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><a name=\"_Toc199080071\"><\/a>Cookies<\/h3>\n<p>Our website uses cookies. These are small text files that are stored on your device via your browser. They do not cause any harm.  <\/p>\n<p>We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser the next time you visit.  <\/p>\n<p>Einiger dieser Cookies sind f\u00fcr den Betrieb der Webseite erforderlich und speichern Ihre Einwilligung in nicht erforderliche Cookies, die von Ihnen gew\u00e4hlte Sprache und dienen der Anmeldung. Wenn Sie nicht w\u00fcnschen, dass die notwendigen Cookies gespeichert werden, k\u00f6nnen Sie Ihren Browser so einrichten, dass er Sie \u00fcber das Setzen von Cookies informiert und Sie dies nur im Einzelfall erlauben. <\/p>\n<p>Rechtsgrundlage f\u00fcr die Nutzung erforderlicher Cookies ist Art 6 Abs 1 lit f (berechtigte Interessen) der DSGVO. Berechtigte Interessen im Sinne der DSGVO sind hierbei die ordnungsgem\u00e4\u00dfe und sichere Funktion der Webseite sowie die Optimierung unseres Angebotes. <\/p>\n<p>In addition, other cookies that are not strictly necessary for the operation of the website may be stored, but only with your consent. For more details, please see the following sections. <\/p>\n<h3><a name=\"_Toc199080072\"><\/a>Consent Management with CookieYes<\/h3>\n<p>To request and store your consent for cookies and other data processing activities that require your consent, we use CookieYes, a service provided by CookieYes, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.<\/p>\n<p>Cookie Script does not process any personal data, but only the following information in anonymized form: a random key, the selection you made (consent), your IP address in anonymized (truncated) form, the date and time of your consent or refusal, the URL where you gave or refused consent, the browser used, and the operating system (User Agent String). The data is processed exclusively within the EU and stored permanently to document your consent. <\/p>\n<p>In addition, a cookie is stored in the visitor\u2019s browser that records the random key and the selection you made (consent). This information can be used later to verify your consent. <\/p>\n<p>Data processing is carried out on the basis of Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the effective and legally sound collection and storage of your consent. Information on data processing by Cookie Script can be found here: <a href=\"https:\/\/www.cookieyes.com\/privacy-policy\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cookieyes.com\/privacy-policy\/<\/a>  <\/p>\n<h2 class=\"mb-2 mt-4 font-display font-semimedium text-base first:mt-0 md:text-lg [hr+&amp;]:mt-4\" id=\"webanalyse-mit-matomo\">Web Analytics with Matomo<\/h2>\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">Our website uses the open-source web analytics software Matomo, which allows us to analyze and optimize user behavior on our site. This involves collecting data such as pages visited, time spent on the site, and the browsers and devices used. Matomo is installed on our own server, so the data remains entirely under our control.  <\/p>\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">To protect your privacy, we enable IP anonymization, which technically truncates your IP address so that it cannot be directly traced. In addition, we only set tracking cookies via Matomo if you have actively consented to them. If consent is refused or not granted, tracking is performed anonymously and without cookies, and no personally identifiable cookies are stored on your device.  <\/p>\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">We are the sole party responsible for analyzing the data; it is not shared with third parties. The legal basis for processing is your consent pursuant to Article 6(1)(a) of the GDPR, as well as our legitimate interest pursuant to Article 6(1)(f) of the GDPR, in improving our online services.     <\/p>\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">You can withdraw or modify your consent at any time via our cookie banner. For more information about data protection at Matomo, please visit <span> <\/span><a rel=\"nofollow noopener\" class=\"reset interactable cursor-pointer decoration-1 underline-offset-1 text-super hover:underline font-semibold\" target=\"_blank\" href=\"https:\/\/matomo.org\/privacy\/\"><span class=\"text-box-trim-both\">https:\/\/matomo.org\/privacy\/<\/span><\/a>.<\/p>\n<h3>Written communication<\/h3>\n<p>If you contact us via the form on the website, by email, or by other means, the data you provide (name, email address, and, optionally, phone number) will be stored by us for one year for the purpose of processing your inquiry and in case of follow-up questions. If the inquiry results in a contract, the statutory retention periods apply. We will not disclose this data without your consent. Data processing is based on Article 6(1)(b) (performance of a contract) and Article 6(1)(a) (consent) of the GDPR.   <\/p>\n<h3>Google Fonts<\/h3>\n<p>We use fonts provided by Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland, on our website. When you visit our website, your browser downloads these fonts from Google. <\/p>\n<p>Google Fonts are used without requiring you to sign in, and no cookies are sent to Google. If you are signed in to Google when you visit our website, your Google account information will not be transmitted to Google. Google merely tracks the use of the relevant fonts and stores this data securely. For more details, please visit <a href=\"https:\/\/developers.google.com\/fonts\/faq\" target=\"_blank\" rel=\"noopener\">https:\/\/developers.google.com\/fonts\/faq<\/a>   <\/p>\n<p>Please also review Google\u2019s Privacy Policy at <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy<\/a>, where you can find further information about the data processed. Data processing is based on Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the appealing design of the website.  <\/p>\n<h3>Order processing, billing, and payment services<\/h3>\n<p>For accounting purposes, we store the following customer data: name, address, phone number, email address, and VAT ID. If you have agreed to a direct debit authorization (SEPA Direct Debit mandate), we also store your bank account information. This data is not shared with third parties, with the exception of transmission to the processing banks\/payment service providers for the purpose of debiting funds, as well as to our tax advisor for accounting purposes and to fulfill our tax obligations. The data is stored exclusively within the EU.    <\/p>\n<p>The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures. Without this data, we cannot enter into or fulfill the contract with you. All data arising from a contractual relationship will be stored until the expiration of the tax retention period (7 years). The data is stored   <\/p>\n<ul>\n<li>On encrypted local computer systems or portable computers that are secured with passwords and physical access controls.<\/li>\n<li>In the encrypted and password-protected cloud solution Microsoft 365, specifically OneDrive and SharePoint, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (\u201cMicrosoft\u201d).<\/li>\n<\/ul>\n<p>In this process, personal data such as emails, contact information, calendar data, and documents are processed and stored on Microsoft servers. Microsoft processes this data exclusively on our behalf and in accordance with our instructions (data processing on behalf of a controller pursuant to Article 28 of the GDPR). A corresponding data processing agreement has been concluded with Microsoft, in which the company commits to complying with the GDPR. The data is stored exclusively on servers within the EU. However, it cannot be ruled out that, in exceptional cases, data may also be transferred to third countries (in particular the U.S.). Microsoft ensures compliance with an adequate level of data protection through standard contractual clauses as defined by the European Commission. For more information on data processing by Microsoft, please refer to Microsoft\u2019s Privacy Statement: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/privacy.microsoft.com\/de-de\/privacystatement\">https:\/\/privacy.microsoft.com\/de-de\/privacystatement<\/a>      <\/p>\n<p>Data processing is carried out on the basis of Article 6(1)(c) (legal requirements) of the GDPR and Article 6(1)(b) (necessary for the performance of a contract) of the GDPR.<\/p>\n<h3>Data processing in connection with order fulfillment and customer service<\/h3>\n<p>For the purpose of fulfilling the contract, the following additional data will also be processed and stored, provided it is relevant to the order you have placed, necessary, or required by law: contact information, calendar data (appointments), medical history questionnaires (addressed individually in the following section on data processing), records of energy work, and records of program and training content, progress, and goals. In addition, any other documents you have submitted. The data is stored  <\/p>\n<ul>\n<li>On encrypted local computer systems or portable computers that are secured with passwords and physical access controls.<\/li>\n<li>In the encrypted and password-protected cloud solution Microsoft 365, specifically OneDrive and SharePoint, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (\u201cMicrosoft\u201d).<\/li>\n<\/ul>\n<p>In this process, personal data such as emails, contact information, calendar data, and documents are processed and stored on Microsoft servers. Microsoft processes this data exclusively on our behalf and in accordance with our instructions (data processing on behalf of a controller pursuant to Article 28 of the GDPR). A corresponding data processing agreement has been concluded with Microsoft, in which the company commits to complying with the GDPR. The data is stored exclusively on servers within the EU. However, it cannot be ruled out that, in exceptional cases, data may also be transferred to third countries (in particular the U.S.). Microsoft ensures compliance with an adequate level of data protection through standard contractual clauses as defined by the European Commission. For more information on data processing by Microsoft, please refer to Microsoft\u2019s Privacy Statement: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/privacy.microsoft.com\/de-de\/privacystatement\">https:\/\/privacy.microsoft.com\/de-de\/privacystatement<\/a>      <\/p>\n<p>The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures. Without this data, we cannot enter into or fulfill the contract with you. A limitation of the records related to program and training activities is possible and can be discussed. This data will only be disclosed to third parties if you have expressly consented or if such disclosure is required by law and is also permitted. All data arising from a contractual relationship will be stored until the expiration of the tax-related retention period (7 years). Data processing is based on the legal provisions of Section 96(3) of the Telecommunications Act (TKG) as well as Article 6(1)(a) (consent) and\/or (b) (necessary for the performance of a contract) of the GDPR.     <\/p>\n<h4>++Medical History Questionnaire & Waivers<\/h4>\n<p>The medical history questionnaire serves the following purposes: to determine whether the client generally meets the necessary health requirements for our joint work or training, and whether there are any relevant limitations or contraindications for specific aspects of our work or training that should be discussed or taken into account.<\/p>\n<p>The following data is collected: name, address, date of birth, gender, questions regarding pregnancy and any current medical conditions or illnesses, allergies, medications taken, current therapeutic treatment, daily stressors, and the date of signature. This data is required to issue the clearance certificate, which cannot be issued without this information. The collected data is reviewed personally (no automated processing) and discussed with the client. If concerns regarding restrictions or grounds for exclusion are identified, additional written medical clearance provided by a healthcare professional may allow for participation in the program or training. This data will only be disclosed to third parties if you have expressly consented or if the disclosure is required by law and is also permitted. All data arising from a contractual relationship is stored until the expiration of the tax-related retention period (7 years). Data processing is carried out in accordance with the legal provisions of \u00a7 96(3) TKG as well as Article 6(1)(a) (consent) and\/or (b) (necessary for the performance of a contract) of the GDPR.      <\/p>\n<p>To ensure the highest possible level of data protection when collecting and storing this sensitive client data, these documents are stored as individual, password-protected PDF files, kept separate from other client data and identified by a reference number (without any direct reference to the client). The data is stored <\/p>\n<ul>\n<li>On encrypted local computer systems or portable computers that are secured with passwords and physical access controls.<\/li>\n<li>In the encrypted and password-protected cloud solution Microsoft 365, specifically OneDrive and SharePoint, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (\u201cMicrosoft\u201d).<\/li>\n<\/ul>\n<p>In this process, personal data such as emails, contact information, calendar data, and documents are processed and stored on Microsoft servers. Microsoft processes this data exclusively on our behalf and in accordance with our instructions (data processing on behalf of a controller pursuant to Article 28 of the GDPR). A corresponding data processing agreement has been concluded with Microsoft, in which the company commits to complying with the GDPR. The data is stored exclusively on servers within the EU. However, it cannot be ruled out that, in exceptional cases, data may also be transferred to third countries (in particular the U.S.). Microsoft ensures compliance with an adequate level of data protection through standard contractual clauses as defined by the European Commission. For more information on data processing by Microsoft, please refer to Microsoft\u2019s Privacy Statement: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/privacy.microsoft.com\/de-de\/privacystatement\">https:\/\/privacy.microsoft.com\/de-de\/privacystatement<\/a>      <\/p>\n<h3>Information about our Facebook page<\/h3>\n<p>We maintain a Facebook page that can be accessed via the &lt;Link to Facebook Fan Page&gt;. This is a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. <\/p>\n<p>Please note that anonymized statistical data regarding the users of these pages is transmitted to us via the Facebook Insights feature, which Meta provides to us free of charge as an integral part of the user agreement. This data is collected using cookies, each of which contains a unique user code that remains active for two years and is stored by Meta on the hard drive of your computer or another data storage device belonging to visitors to the fan page. The user code, which can be linked to your Facebook login credentials, is collected and processed when you visit the fan pages. The operator of a Facebook fan page has no option to disable this feature or prevent the aforementioned processing of data. Meta provides further information about Facebook Insights here: <a href=\"https:\/\/de-de.facebook.com\/help\/pages\/insights\" target=\"_blank\" rel=\"noopener\">https:\/\/de-de.facebook.com\/help\/pages\/insights.<\/a>    <\/p>\n<p>Meta agrees to assume primary responsibility under the GDPR for the processing of Insights data in this context and to fulfill all obligations under the GDPR with respect to such data. In particular, Meta undertakes to assume sole responsibility for personal data processed in this context and to fulfill all related obligations to provide information. <\/p>\n<p>The data provided to us by Meta in connection with the use of the fan page is anonymized, so we cannot identify individual users. However, it is possible to derive demographic data about users (including trends regarding age, gender, relationship status, and employment status) through statistical analysis, information about users\u2019 lifestyles and interests (including information about visitors\u2019 purchases and online shopping behavior, as well as the categories of goods or services that interest them most), and geographic data. <\/p>\n<p>We process this data solely for our own analysis of the reach of our Facebook page and do not share it with third parties. The legal basis for this processing is Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the identification of target groups interested in the content on our page.  <\/p>\n<h3>Information about our Instagram page<\/h3>\n<p>We operate an Instagram page, which can be accessed via the &lt;Link to Instagram Fanpage&gt;. This is a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. <\/p>\n<p>Please note that, through the Instagram Insights feature\u2014which Meta provides to us free of charge as an integral part of our user agreement\u2014anonymized statistical data regarding the users of these pages is transmitted to us. This data is collected using cookies, each of which contains a unique user code that remains active for two years and is stored by Meta on the hard drive of your computer or another data storage device belonging to visitors to the fan page. The user code, which can be linked to your Instagram login credentials, is collected and processed when you visit the fan pages. The operator of an Instagram fan page has no way to disable this feature or prevent the aforementioned processing of data. Facebook provides further information about Facebook Insights here: <a href=\"https:\/\/help.instagram.com\/1533933820244654\/?helpref=uf_share\" target=\"_blank\" rel=\"noopener\">https:\/\/help.instagram.com\/1533933820244654\/?helpref=uf_share<\/a>    <\/p>\n<p>Meta agrees to assume primary responsibility under the GDPR for the processing of Insights data in this context and to fulfill all obligations under the GDPR with respect to such data. In particular, Meta undertakes to assume sole responsibility for personal data processed in this context and to fulfill all related obligations to provide information. <\/p>\n<p>The data provided to us by Meta in connection with the use of the fan page is anonymized, so we cannot identify individual users. However, it is possible to derive demographic data about users (including trends regarding age, gender, relationship status, and employment status) through statistical analysis, information about users\u2019 lifestyles and interests (including information about visitors\u2019 purchases and online shopping behavior, as well as the categories of goods or services that interest them most), and geographic data. <\/p>\n<p>We process this data solely for our own analysis of the reach of our Instagram page and do not share it with third parties. The legal basis for this processing is Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the identification of target groups interested in the content on our page.  <\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>3. Your Rights<\/h2>\n<p>You generally have the rights to access, rectification, erasure, restriction, data portability, withdrawal, and objection in accordance with the <a href=\"https:\/\/www.jusline.at\/gesetz\/dsgvo#\" target=\"_blank\" rel=\"noopener\">GDPR, Chapter 3, \u201cRights of the Data Subject.\u201d<\/a> You can find <a href=\"https:\/\/dsb.gv.at\/rechte-pflichten\/ihre-rechte-als-betroffene-person\" target=\"_blank\" rel=\"noopener\">further information on all of these rights<\/a> directly on the website of the Data Protection Authority. Requests regarding these matters may be sent to the email address hallo@chapterofgrowth.com.  <\/p>\n<p>If you believe that the processing of your data violates data protection laws or that your data protection rights have otherwise been infringed, you may file a complaint with the supervisory authority. In Austria, this is the Data Protection Authority. <\/p>\n<h4>Contact information:<\/h4>\n<p><span id=\"eeb-82904-619680\"><\/span><script type=\"text\/javascript\">(function() {var ml=\"43B062%197\",mi=\"652016534936537856539365393\",o=\"\";for(var j=0,l=mi.length;j<l;j++) {o+=ml.charAt(mi.charCodeAt(j)-48);}document.getElementById(\"eeb-82904-619680\").innerHTML = decodeURIComponent(o);}());<\/script><noscript>I am a noscript text<\/noscript><br \/>hello@chapterofgrowth.com<\/p>\n<p>&nbsp;<\/p>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-251937","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/pages\/251937","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/comments?post=251937"}],"version-history":[{"count":2,"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/pages\/251937\/revisions"}],"predecessor-version":[{"id":251939,"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/pages\/251937\/revisions\/251939"}],"wp:attachment":[{"href":"https:\/\/chapterofgrowth.com\/en\/wp-json\/wp\/v2\/media?parent=251937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}