Privacy Policy
1. Controller
The party responsible for data processing on this site is:
Rebecca Tranter / new leaf coaching
Grethenstr. 25
35398 Gießen, Germany
Email: newleafcoaching@icloud.com
2. Website Visitors & Hosting
This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including:
- Information about your browser, network and device
- Web pages you visited prior to coming to this website
- Web pages you view while on this website
- Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data in their Privacy Policy (squarespace.com/privacy). Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
Squarespace is US-based, so this is a third-country transfer under Chapter V GDPR. Squarespace processes the data under the EU Standard Contractual Clauses and is certified under the EU–US Data Privacy Framework, which provide the required transfer safeguards. The Data Processing Addendum is accepted automatically as part of the Squarespace subscription.
3. Contact Form
When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so that they can provide website services to us and help us manage our relationship with you.
We collect only what's needed to answer your enquiry, and the form carries a privacy notice and link at the point of submission. Legal basis: Art. 6(1)(b)/(f) GDPR. We keep enquiry data only as long as needed to handle your request.
4. Cookies & Consent
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website.
- Necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you. Legal basis: § 25(2) TDDDG.
- Analytics and performance cookies are used only when you acknowledge our cookie banner, to view site traffic and activity. Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR.
Non-essential cookies and scripts are blocked until you opt in via the consent banner, which offers an equal-weight reject-all option. You can withdraw consent at any time via the banner settings.
The specific cookies this site places are listed below (translation cookies are covered separately in §6).
Necessary cookies (§ 25(2) TDDDG — no consent required):
| Cookie | Purpose | Duration |
|---|---|---|
| Crumb | Prevents cross-site request forgery (CSRF) — protects the contact form | Session |
| Test, _dd_cookie_test, _dd_site_test | Check whether your browser supports cookies and prevent errors | Session |
| _dd_s | Records browser errors so the site runs reliably | 4 hours |
| _ssid | Remembers devices for anti-fraud purposes | 4 years |
| ss_performancecookiesAllowed, ss_marketingcookiesAllowed | Remember your cookie-banner choices so we don't ask again | 30 days |
Analytics & performance cookies (placed only after consent — § 25(1) TDDDG, Art. 6(1)(a) GDPR):
| Cookie | Purpose | Duration |
|---|---|---|
| ss_cid, ss_cpvisit, ss_cvr | Identify unique visitors and track their sessions on the site | 2 years |
| ss_cvisit, ss_cvt | Identify unique visitors and track their sessions on the site | 30 minutes |
5. Analytics
This website collects personal information to power our site analytics, including information about your browser, network and device, the web pages you visited prior to coming here, and your IP address — along with details of your use of the site (clicks, internal links, pages visited, scrolling, searches, timestamps). We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.
Analytics load only after you consent via the cookie banner (see §4). Legal basis: consent, Art. 6(1)(a) GDPR.
6. Translation (Weglot)
German translation is provided via Weglot (Weglot SAS, France). Weglot translates page content only — it does not receive anything you submit through the site (contact-form entries go to Squarespace, not Weglot). To display a translated page, your browser loads the translations from Weglot's servers, which — as with any web request — involves your IP address. Weglot's servers are located in the EU; where Weglot relies on sub-processors outside the EU (including the US), those transfers are safeguarded by EU–US Data Privacy Framework certification or EU Standard Contractual Clauses.
Weglot sets cookies needed to store and serve translations (wg-translations, and slugs if translated slugs are used), and a non-essential session cookie holding your language preference (wglang). Legal basis: legitimate interest in offering the site in your language, Art. 6(1)(f) GDPR; the strictly necessary translation cookies under § 25(2) TDDDG.
7. Your Rights
You have the right to access, rectification, erasure, restriction, data portability, and objection regarding your personal data (Art. 15–21 GDPR), to withdraw consent at any time, and to lodge a complaint with a supervisory authority — for Hessen, the Hessischer Beauftragte für Datenschutz und Informationsfreiheit (HBDI).
8. Processors
We use the following processors under Art. 28 GDPR:
- Squarespace (hosting, forms, analytics) — DPA accepted automatically with the subscription; EU SCCs + EU–US Data Privacy Framework for US transfers (see §2).
- Weglot SAS, France (translation) — EU-based servers; non-EU sub-processors covered by EU–US DPF / EU SCCs.
- Contact-form submissions stay within Squarespace, so they are covered by the Squarespace entry above — no separate processor.