Datenschutz von Lumina Intuitive Coaching
📄 Client Data Protection & Privacy Policy
1. Purpose of This Policy
This Data Protection & Privacy Policy explains how Ioana Andronic collects, uses, stores, and protects personal data obtained directly from clients and participants in the course of delivering coaching, intuition readings, or related services.
We are committed to safeguarding your privacy and handling your personal information with the highest levels of security, transparency, and professionalism.
2. Types of Data We Collect
We may collect the following categories of personal data directly from you (verbally, in writing, or through intake forms, contracts, or session notes):
- Identification Data: Name, address, date of birth, phone number, email address.
- Billing Data: Payment details, invoicing information, and transaction history.
- Session Data: Information you choose to share during coaching or readings, including goals, challenges, personal or professional background.
- Communication Data: Emails, text messages, voice notes, and other direct communications.
- Special Category Data (Sensitive Data): On occasion, sessions may touch upon health, emotional, or personal matters. Such data will only be processed with your explicit consent and handled with the highest level of confidentiality.
3. Legal Basis for Processing
Your data is processed in accordance with the General Data Protection Regulation (GDPR) and relevant German data protection laws, based on:
- Contractual necessity – to provide the services you request.
- Legal obligations – e.g., accounting and tax compliance.
- Legitimate interest – for internal business operations, service quality, and safeguarding.
- Consent – where sensitive information or marketing communication is involved.
4. How We Use Your Data
Your personal data may be used for the following purposes:
- Delivering coaching, readings, and related services.
- Communicating with you regarding sessions, programs, or events.
- Processing payments and fulfilling administrative obligations.
- Maintaining session notes for continuity and quality of service.
- Sending updates, newsletters, or offers (only with your consent).
- Ensuring compliance with legal and regulatory requirements.
We do not sell or rent your personal information.
5. Data Sharing and Third Parties
We only share data with trusted service providers where necessary, such as:
- Payment processors (e.g., Stripe, PayPal, banks).
- Professional advisors (e.g., accountants, legal counsel).
- Technology providers (e.g., secure scheduling, invoicing, or CRM platforms).
All third-party providers are bound by data protection agreements to ensure compliance with GDPR standards. Data is never shared for marketing or unrelated purposes.
6. Data Retention
We retain client data only as long as necessary:
- Client records: generally up to 5 years after service completion (to comply with business and tax obligations).
- Session notes: stored securely and deleted when no longer required.
- Marketing data: until you unsubscribe or withdraw consent.
After these periods, data will be securely deleted or anonymized.
7. Data Security
We implement strict technical and organizational measures to protect your information, including:
- Secure digital storage with encryption and access controls.
- Password-protected systems with multi-factor authentication.
- Confidential handling of physical notes (stored securely or destroyed).
- Limited access to data by authorized personnel only.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct inaccurate or incomplete information.
- Erasure: Request deletion of your data, where legally permissible.
- Restriction: Limit how your data is processed.
- Portability: Receive your data in a machine-readable format.
- Objection: Object to certain processing activities, including marketing.
- Withdrawal of Consent: Withdraw consent at any time without affecting prior lawful processing.
9. International Transfers
If your data is transferred outside the EU/EEA, we ensure appropriate safeguards (such as EU Standard Contractual Clauses) are in place to protect your privacy.
10. Liability & Voluntary Participation
Participation in our services is voluntary and undertaken at your own discretion and responsibility. While we uphold strict confidentiality, you acknowledge that outcomes cannot be guaranteed. By engaging with our services, you release Ioana Andronic from liability relating to the use or interpretation of the information provided.
11. Updates to This Policy
We may update this policy periodically to reflect changes in law, technology, or our business practices. The latest version will always be available upon request.
12. Contact & Complaints
If you have questions, concerns, or wish to exercise your rights, contact:
Ioana Andronic
ioana.andronic@gmail.com
ioana.andronic@gmail.com