Privacy policy

This translation is provided for your convenience. The German version is legally binding.

1. Controller

Loreta Gjestila, MPU preparation (MPU Gjestila), Hasleystr. 16, 58511 Lüdenscheid, Germany. Email: info@mpu-gjestila.de

2. The essentials in brief

This site sets no cookies, uses no analytics or advertising services and loads no fonts, scripts or content from third-party servers. The fonts are hosted on my own web space. I only receive data when you write to me via the form or by email, or call me.

3. Hosting and server logs

The site is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When the site is accessed, the server stores technically necessary information in log files: IP address, date and time, the address accessed, amount of data transferred, browser and operating system. This serves the secure and stable operation of the site (Art. 6(1)(f) GDPR). A data processing agreement is in place with Hostinger (Art. 28 GDPR). The logs are deleted by the host after a short time.

4. MPU check

The MPU check on the home page runs entirely in your browser. Your answers are neither stored nor transmitted to me or to third parties. If you then click “Book your first call”, the reason, language and recommended package are passed only in the address of the request page, so that the form is pre-filled.

5. Requests via the form

When you submit the “first call” form, your details (name, phone number, optionally email address, reason, package, language, availability, message, how you found me) are sent to me as an email by a script on my own web space. No third-party form service is used. If you enter an email address, you receive an automatic confirmation of receipt by email. It contains no information about the reason for your MPU. To protect against abuse, your IP address is stored for at most one hour, only as a hash that cannot be reversed.

The legal basis is steps prior to entering into a contract (Art. 6(1)(b) GDPR). Information about the reason for the MPU, for example about alcohol or drugs, may be health data. I process it only with your explicit consent, which you give by ticking the box in the form (Art. 9(2)(a) GDPR). You can withdraw your consent at any time by email.

If we do not start working together, I delete your request no later than six months after our last contact. If we do, the statutory retention periods for business records apply.

6. Contact by email, phone or WhatsApp

The WhatsApp buttons on this site are simple links. Nothing from WhatsApp is loaded with the page and no data is transmitted. Only when you tap a button does WhatsApp open with a prepared message, which you send yourself. Section 7 and WhatsApp’s privacy information apply to its use. The same applies to the link to my Instagram profile: Instagram (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) only opens when you tap it.

When you write to me or call me, I process your details to deal with your enquiry (Art. 6(1)(b) GDPR). Storage is handled as for the form.

7. Video calls

Sessions take place by phone or video. For video calls I use WhatsApp, Zoom or Jitsi Meet, as agreed with you. You have a say in which one we use. The respective provider processes technical connection data and, depending on the program, your phone number or name. The legal basis is the performance of our contract (Art. 6(1)(b) GDPR).

  • WhatsApp: WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. Calls are end-to-end encrypted. Metadata may be transferred to Meta Platforms Inc. in the USA; the company is certified under the EU-US Data Privacy Framework.
  • Zoom: Zoom Communications Inc., 55 Almaden Blvd, San Jose, CA 95113, USA. Certified under the EU-US Data Privacy Framework. The data processing agreement (Art. 28 GDPR) is part of Zoom’s terms of service.
  • Jitsi Meet: Depends on the server used. For the public service meet.jit.si this is 8x8 Inc., USA.

The providers’ own privacy information also applies to these programs. If you do not want to use any of them, we simply talk by phone.

8. Encryption

The site is delivered exclusively in encrypted form via HTTPS.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just write to info@mpu-gjestila.de.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. No automated decisions

There is no automated decision-making and no profiling. The recommendation in the MPU check is non-binding guidance that is created only in your browser.