Privacy Policy
(As of March 2025)

Protecting your personal data is of utmost importance to us at CherryField Coaching & Consulting GmbH (hereinafter referred to as “CherryField” or “we”). Below, we inform you about the collection, processing, and use of your personal data when visiting our website and within the scope of our business processes. This privacy policy complies with the requirements of the EU General Data Protection Regulation (GDPR) and applicable national regulations, in particular the German Federal Data Protection Act (BDSG).

1. Controller

CherryField Coaching & Consulting GmbH
Am Kirschfeld 18
14532 Kleinmachnow
Germany

Email: matthias@cherryfield-cc.com

2. General Information on Data Processing

2.1 Scope of Processing of Personal Data

We generally process your personal data only to the extent necessary to provide a functional website, our content and services, or to communicate with you. Personal data is usually processed only with your consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and processing is permitted by law.

2.2 Legal Bases

• Consent (Art. 6 para. 1 lit. a GDPR): Where we obtain your consent for specific processing operations.

• Contract performance or pre-contractual measures (Art. 6 para. 1 lit. b GDPR): Where processing is necessary to fulfill a contract or to take steps prior to entering into a contract.

• Legal obligation (Art. 6 para. 1 lit. c GDPR): Where processing is required to comply with a legal obligation.

• Legitimate interests (Art. 6 para. 1 lit. f GDPR): Where processing is necessary to safeguard our legitimate interests or those of a third party, provided your interests or fundamental rights and freedoms do not override them.

2.3 Storage Duration and Deletion of Data

Your personal data will be deleted or blocked once the purpose of storage no longer applies. Further storage may occur if required by European or national legislation in EU regulations, laws, or other legal provisions to which we are subject. Data will also be deleted or blocked once a legally prescribed retention period expires, unless further storage is necessary for contract performance or initiation.

3. Collection and Processing of Personal Data When Visiting Our Website

3.1 Server Log Files

Each time our website is accessed, our system automatically collects data and information from the accessing device’s system, including:

• Browser type and version

• Operating system

• Internet service provider

• IP address

• Date and time of access

• Referring website

• Pages visited on our site

Temporary storage of this data is necessary to ensure website functionality and system security (e.g. misuse detection). The legal basis is our legitimate interest under Art. 6 para. 1 lit. f GDPR. Data is deleted after no more than 7 days unless needed longer for the stated purpose.

3.2 Cookies

Our website uses cookies, which are small text files stored on your device to make our website more user-friendly and efficient.

• Session cookies are deleted automatically after your visit.

• Persistent cookies remain stored until deleted by you.

Technically necessary cookies are used based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). Other cookies (e.g. for analytics) are only used with your consent (Art. 6 para. 1 lit. a GDPR). You can disable or delete cookies at any time via your browser settings.

3.3 Contact Form and Email

When you contact us via our website’s contact form or email, your submitted data is processed for handling your request and any follow-up questions. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR) or Art. 6 para. 1 lit. b GDPR if your request is contract-related. Your data will be deleted once it is no longer needed and there are no legal retention obligations.

3.4 Analytics Tools (if used)

If we use tools to analyze user behavior (e.g. Google Analytics), this is done exclusively with your consent (Art. 6 para. 1 lit. a GDPR). Details can be found in a separate privacy notice or cookie settings on our website.

4. Disclosure of Data to Third Parties

Your personal data is only disclosed to third parties if necessary for contract fulfillment, required by law, or you have consented to it.

4.1 Processors

We may use external service providers (processors) for tasks such as hosting or IT support. These providers are bound by data processing agreements (DPAs) in accordance with Art. 28 GDPR.

4.2 Data Transfers to Third Countries

Personal data is only transferred to countries outside the EU/EEA if required for fulfilling our (pre-)contractual obligations, legally mandated, or based on your consent. We ensure an adequate level of data protection through suitable safeguards (e.g. standard contractual clauses).

5. Rights of Data Subjects

If your personal data is processed, you are a “data subject” under the GDPR and have the following rights:

• Right of access (Art. 15 GDPR): Request access to your personal data.

• Right to rectification (Art. 16 GDPR): Request correction or completion of inaccurate data.

• Right to erasure (Art. 17 GDPR): Request deletion of your personal data under certain conditions.

• Right to restriction (Art. 18 GDPR): Request limitation of processing under certain conditions.

• Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format and transfer it to another controller.

• Right to object (Art. 21 GDPR): Object to processing based on Art. 6 para. 1 lit. e or f GDPR for reasons arising from your specific situation.

• Right to withdraw consent (Art. 7 para. 3 GDPR): Withdraw previously granted consent at any time with future effect.

6. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates data protection laws, you may lodge a complaint with the relevant supervisory authority. In most cases, this will be the authority responsible for our company headquarters. A list of supervisory authorities in Germany can be found on the website of the German Data Protection Conference (Datenschutzkonferenz).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or destruction. These include encryption, firewalls, and access control systems.

8. Updates to This Privacy Policy

This privacy policy is current as of March 2025.
Due to changes in our website, services, or legal requirements, it may be necessary to update this policy. The latest version is always available on our website.