Privacy Policy.

The party responsible for the processing of your personal data (the "data controller") is:

Benjamin Pfeifer
P. City English
Berlin, Germany
ben@pcityenglish.com

Depending on how you interact with this website, we may process the following categories of personal data:

• Contact data: your name and email address, when you contact us by email or submit an inquiry
• Booking data: your name, email address, and time zone, collected by Calendly when you schedule a consultation or class
• Payment data: billing name, email, and payment card details, processed by Stripe when you purchase a coaching package
• Communication data: the content of emails or messages you send us
• Usage and technical data: IP address, browser type, pages visited, and approximate location, collected automatically by Squarespace when you visit this website
• Cookie data: information stored in cookies on your device (see Section 7 below)

We do not collect sensitive personal data (such as health data, political opinions, or biometric data) and we do not knowingly collect data from children under 16.

We process your personal data only where we have a lawful basis under the GDPR (Regulation (EU) 2016/679). The table below sets out our purposes and the relevant legal basis (Article 6 GDPR):

• To provide coaching services and manage our coaching relationship — legal basis: performance of a contract (Art. 6(1)(b))
• To respond to inquiries and communicate with you — legal basis: legitimate interest in responding to potential clients (Art. 6(1)(f))
• To process payments for coaching packages — legal basis: performance of a contract (Art. 6(1)(b)); compliance with legal obligations for financial records (Art. 6(1)(c))
• To improve and operate this website — legal basis: legitimate interest in maintaining a functional and secure website (Art. 6(1)(f))
• To use non-essential cookies — legal basis: your consent (Art. 6(1)(a))

We use the following third-party services to operate this website and deliver our services. Each acts as a data processor on our behalf, or as an independent data controller in respect of their own services:

• Squarespace, Inc. (United States) — website hosting and analytics. Data transfers to the US are covered by the EU-US Data Privacy Framework. Squarespace Privacy Policy
• Calendly, LLC (United States) — appointment scheduling. Data transfers to the US are covered by Standard Contractual Clauses. Calendly Privacy Policy
• Stripe, Inc. (United States) — payment processing. Stripe is certified under the EU-US Data Privacy Framework and processes payment data as an independent data controller under applicable financial regulations. Stripe Privacy Policy
• Google LLC (United States) — Google Fonts, loaded from Google's CDN on page load. Your IP address is transmitted to Google's servers when fonts are requested. Google Privacy Policy

We do not sell your personal data to any third party.

• Email correspondence and coaching records: retained for the duration of our coaching relationship and for a period of up to three years afterward, in case of follow-up or disputes
• Payment and invoice records: retained for 10 years to comply with German commercial law (§ 257 HGB) and tax law (§ 147 AO)
• Booking data (Calendly): retained in accordance with Calendly's own data retention policy; we do not store copies independently beyond what is necessary for the coaching relationship
• Website analytics (Squarespace): retained for up to 26 months, subject to Squarespace's data retention practices

When the applicable retention period ends, we delete your personal data securely or anonymize it.

As a data subject in the EU/EEA, you have the following rights:

• Right of access (Art. 15): you may request a copy of the personal data we hold about you
• Right to rectification (Art. 16): you may ask us to correct inaccurate data
• Right to erasure (Art. 17): you may ask us to delete your data, subject to legal retention obligations
• Right to restriction (Art. 18): you may ask us to restrict processing in certain circumstances
• Right to data portability (Art. 20): you may request your data in a machine-readable format where processing is based on consent or contract
• Right to object (Art. 21): you may object to processing based on legitimate interest; we will stop unless we can demonstrate compelling legitimate grounds
• Right to withdraw consent (Art. 7(3)): where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at ben@pcityenglish.com. We will respond within 30 days.

This website uses cookies — small text files stored on your device. Squarespace, as our hosting provider, sets certain cookies necessary for the website to function. Additional analytics and performance cookies may be set by Squarespace.

You can control or delete cookies through your browser settings. Disabling cookies may affect the functionality of this website. Where non-essential cookies require your consent, this is managed through the cookie banner displayed on your first visit.

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority. The supervisory authority for Berlin, Germany is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin, Germany
www.datenschutz-berlin.de

You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

We may update this privacy policy from time to time. When we do, we will update the "Last reviewed" date at the top of this page. We encourage you to review this policy periodically. Continued use of this website after any changes constitutes your acceptance of the updated policy.