Privacy Policy

Last updated: November 3, 2026

1. Data Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Isabel Kunde, Attorney-at-Law (Rechtsanwältin)
Lemkerheide 16
48341 Altenberge
Germany

Email: info@kanzlei-kunde.com

Website: https://www.kanzlei-kunde.com

2. General Information on Data Protection

Protecting your personal data is important to me. I process personal data in accordance with applicable data protection legislation, particularly the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This Privacy Policy explains how personal data is collected, processed, stored, and protected when you visit my website, book appointments, or use my legal consultation, EDS coaching, or couples mediation services.

Personal data means any information relating to an identified or identifiable individual.

Personal data is processed only where an appropriate legal basis exists.

3. Website Hosting – Wix

My website is hosted and operated using Wix.

Provider:

Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel

When you visit my website, the following information may be processed:

IP address
Date and time of access
Pages visited
Browser type and version
Operating system and device information
Referring website
Technical connection and log data

This processing is necessary to ensure the proper functioning, security, and availability of the website.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to maintain a secure and functional website.

Wix may process personal data outside the European Union or European Economic Area.

Israel is covered by an adequacy decision of the European Commission. Transfers to other countries are subject to the requirements of Articles 44–49 GDPR.

Further information:

https://www.wix.com/about/privacy

4. Cookies and Consent Management

My website uses cookies and similar technologies.

Cookies are small files stored on your device to enable website functions and, where permitted, collect information about website usage.

Essential Cookies

Essential cookies are necessary for the technical operation, security, and basic functionality of the website.

Where the storage of or access to information on your device is strictly necessary, this is permitted under Section 25(2) TDDDG.

The associated processing of personal data is generally based on Article 6(1)(f) GDPR.

Non-Essential Cookies

Additional cookies may be used for analytics, functional features, or marketing purposes.

Where legally required, these technologies are activated only after you have provided your consent.

The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG.

When you first visit my website, you can accept, reject, or individually configure non-essential cookies through the cookie banner.

You may withdraw or modify your consent at any time through the website's cookie settings.

5. Wix Analytics

I use the analytics features provided by Wix to evaluate website traffic and improve the functionality and user experience of my website.

The following information may be processed:

Number of website visits
Pages viewed
Duration of visits
Browser and device information
Approximate geographical location
Website usage patterns
Technical identifiers

Where analytics processing requires consent, the legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You can withdraw your consent at any time through the cookie settings.

6. Contact by Email or Telephone

If you contact me by email or telephone, I process the information you provide to respond to your enquiry.

This may include:

Name
Email address
Telephone number
Content of your enquiry
Additional information voluntarily provided

Where your enquiry concerns entering into or performing a contract, processing is based on Article 6(1)(b) GDPR.

For other enquiries, processing may be based on Article 6(1)(f) GDPR, reflecting my legitimate interest in responding to communications.

If you voluntarily disclose sensitive information, including health information, an additional legal basis under Article 9 GDPR may be required.

Please note that ordinary unencrypted email communication may not provide complete protection against unauthorized access.

7. Online Appointment Booking – Cal.com

I use Cal.com to manage online appointments for legal consultations, EDS coaching, and couples mediation.

Provider:

Cal.com, Inc.
2261 Market Street #4382
San Francisco, CA 94114
United States

My website contains external links to Cal.com booking pages. The booking calendar is not embedded directly into my website.

When you follow a booking link, you are redirected to Cal.com's external platform.

The following information is collected when you book an appointment:

Name
Email address
Telephone number
Selected appointment date and time
Type of service booked
Booking and confirmation details

This information is processed to arrange, confirm, and manage appointments.

The legal basis is Article 6(1)(b) GDPR.

For booking data processed on my behalf, Cal.com acts as a data processor under its Data Processing Agreement.

As Cal.com is based in the United States, personal data may be transferred to and processed there.

Cal.com states that it participates in the EU-U.S. Data Privacy Framework. Where applicable, transfers may be based on the European Commission's adequacy decision. Other transfers may rely on appropriate safeguards under Article 46 GDPR.

Further information:

https://cal.com/privacy

8. Video Consultations – Cal Video

I use Cal Video to conduct online legal consultations, EDS coaching sessions, and couples mediation.

During video consultations, the following information may be processed:

Participant names
IP addresses and technical connection data
Browser and device information
Date and duration of participation
Audio and video data during the meeting
Chat messages, where used

Processing is necessary to provide the booked consultation or mediation service.

The legal basis is Article 6(1)(b) GDPR.

Where special categories of personal data are processed, an additional legal basis under Article 9 GDPR applies, as explained in Section 11.

No Recording or AI Transcription

I do not record audio or video consultations.

I do not use automatic transcription or AI-generated meeting summaries.

However, Cal.com and its technical service providers may process connection information and other technical data necessary to provide the video conferencing service.

Further information:

https://cal.com/privacy

9. Payment Processing – Stripe

Payments for booked services are processed using Stripe.

Depending on the payment method and transaction, Stripe may process:

Name and contact details
Payment amount and currency
Payment date
Payment method
Card or banking information
Transaction identifiers
Payment status and security information

The processing is necessary to complete payments and comply with applicable legal obligations.

The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.

Where necessary for fraud prevention or the establishment, exercise, or defence of legal claims, processing may also be based on Article 6(1)(f) GDPR.

Depending on the processing activity, Stripe may act as an independent controller or as a processor.

Personal data may be transferred outside the European Economic Area, including to the United States, subject to the applicable requirements of Articles 44–49 GDPR.

Further information:

https://stripe.com/privacy

10. Legal Consultations and Attorney-Client Confidentiality

As a German-qualified attorney-at-law, I process personal data where necessary to assess, establish, perform, or terminate a legal services engagement.

This may include:

Identification and contact information
Contractual and billing information
Information relating to legal matters
Correspondence and documents
Personal and financial circumstances
Health information and other sensitive personal data, where relevant

The legal basis is primarily Article 6(1)(b) GDPR.

Where processing is required to comply with legal obligations, Article 6(1)(c) GDPR applies.

Special categories of personal data may be processed under Article 9(2)(f) GDPR where necessary for the establishment, exercise, or defence of legal claims.

As a German attorney-at-law, I am subject to professional confidentiality obligations, particularly under Section 43a(2) of the German Federal Lawyers' Act (BRAO) and Section 203 of the German Criminal Code (StGB).

Client information is disclosed only where necessary for the provision of legal services, required by law, or otherwise legally permitted.

Legal advice is exclusively provided in relation to German law and the German legal and social security systems.

11. EDS Coaching and Health Information

I offer practical coaching services to individuals living with Ehlers-Danlos Syndrome (EDS).

These services focus on daily structure, energy management, pacing, organization of medical appointments and documents, and practical strategies for managing everyday challenges.

During coaching sessions, clients may voluntarily disclose health-related information, including:

Medical diagnoses
Pain and fatigue symptoms
Physical limitations
Information about medical treatment
Medical reports and documents
Personal circumstances affecting daily life

Health information constitutes a special category of personal data under Article 9(1) GDPR.

The processing of general personal data necessary to provide coaching services is based on Article 6(1)(b) GDPR.

Where the processing of health information relies on explicit consent, the additional legal basis is Article 9(2)(a) GDPR.

Such consent may be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Where health information is processed in connection with separate legal advice concerning legal claims, Article 9(2)(f) GDPR may apply.

EDS coaching does not constitute medical treatment, psychological therapy, or the practice of medicine. It provides practical, organizational, and lifestyle-related support.

EDS coaching is available internationally. Legal advice remains limited to German law.

12. Couples Mediation

During couples mediation, I process personal data necessary to prepare and conduct mediation sessions.

This may include:

Names and contact details
Appointment and contractual information
Personal and family circumstances
Information about relationship conflicts
Voluntarily disclosed personal information
Sensitive information, where relevant

For participants who are parties to the mediation agreement, processing of general personal data is based on Article 6(1)(b) GDPR.

Where personal data concerning other individuals is processed, Article 6(1)(f) GDPR may apply, depending on the circumstances.

Processing of special categories of personal data requires an additional legal basis under Article 9 GDPR, which may include explicit consent under Article 9(2)(a) GDPR.

Information shared during mediation is treated confidentially.

Personal data is disclosed to third parties only where a valid legal basis exists.

Couples mediation may be provided internationally. Any separate legal advice is limited to German law.

13. Recipients of Personal Data

Personal data is disclosed to third parties only where necessary to provide my services, comply with legal obligations, or where another lawful basis exists.

Recipients may include:

Website hosting and technical service providers
Appointment scheduling providers
Video conferencing providers
Payment service providers
Email and IT service providers
Accounting and tax service providers
Courts, authorities, or other legally authorized recipients, where applicable

Where service providers process personal data on my behalf, the requirements of Article 28 GDPR apply.

14. Data Retention

Personal data is retained only for as long as necessary for the relevant processing purpose or as required by law.

Retention periods depend on:

The duration of the contractual relationship
The purpose of processing
Applicable statutory retention requirements
The need to establish, exercise, or defend legal claims

Legal client files are subject to the applicable retention requirements under Section 50 BRAO.

Accounting and tax records are retained in accordance with applicable German tax and commercial law.

Once the relevant retention period has expired, personal data will be deleted unless further retention is legally required or otherwise permitted.

15. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the following rights:

Right of access – Article 15 GDPR
Right to rectification – Article 16 GDPR
Right to erasure – Article 17 GDPR
Right to restriction of processing – Article 18 GDPR
Right to data portability – Article 20 GDPR
Right to object – Article 21 GDPR
Right to withdraw consent – Article 7(3) GDPR

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact me using the details provided in Section 1.

Statutory restrictions on data subject rights, including those relating to professional legal confidentiality, remain applicable.

16. Right to Lodge a Complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.

The supervisory authority generally responsible for my professional establishment is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)

Website: https://www.ldi.nrw.de

You may also contact another competent data protection supervisory authority.

17. Data Security

I implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, and unlawful disclosure.

My website uses HTTPS encryption.

When selecting and using external service providers, I take applicable data protection requirements and the confidentiality obligations associated with my legal profession into account.

However, no technical system can guarantee absolute security.

18. Automated Decision-Making

I do not use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with my own legal consultation, coaching, or mediation services.

19. Changes to This Privacy Policy

I may update this Privacy Policy where necessary to reflect changes in legal requirements, technical systems, or the services offered.

The current version will be available on my website.