Privacy Policy

1. Controller

The controller responsible for the data processing described in this policy is:

Geek Techware UG (haftungsbeschränkt), trading as The Human Shift
Berner Str. 6, 27809 Lemwerder, Germany
Represented by: Francesca Rossin, Joerg Wiesmann
Email: francesca@francesca-rossin.com

Full company details are listed in our Imprint.

2. Your rights

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you (Art. 15 GDPR);
• Request correction of inaccurate or incomplete data (Art. 16 GDPR);
• Request erasure of your data, where we are not legally required to retain it (Art. 17 GDPR);
• Request restriction of processing (Art. 18 GDPR);
• Receive your data in a portable format (Art. 20 GDPR);
• Object to processing based on legitimate interest (Art. 21 GDPR); and
• Withdraw consent at any time, where processing is based on consent (Art. 7(3) GDPR), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact francesca@francesca-rossin.com. You also have the right to lodge a complaint with a supervisory authority — for Geek Techware UG, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), or the data protection authority in your own country of residence.

3. Hosting and server log files

This website is hosted by STRATO AG (Strato.de), a German hosting provider. When you visit the site, Strato's servers may automatically collect and store information in server log files, such as your browser type, operating system, referring page, and the date and time of access. This is a standard function of any web server, is required to deliver the site to you reliably and securely, and is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR). This data is not merged with any other data source and is typically deleted automatically after a short period. See Strato's privacy policy for details of its own processing as our hosting provider.

4. Cookies and analytics

This website does not currently use analytics, advertising, or tracking cookies. If we introduce tools such as Google Analytics or advertising pixels in the future, we will update this policy and, where required, request your consent via a cookie banner before any non-essential cookies are set.

5. Contacting us by email

If you email us, we process the personal data included in your message (such as your name, email address, and message content) to respond to your enquiry. This is based on your consent (Art. 6(1)(a) GDPR) and, where the enquiry relates to a potential engagement, our legitimate interest in responding (Art. 6(1)(f) GDPR). We retain this correspondence for as long as necessary to handle your enquiry and any follow-up, unless a longer retention period applies for legal or tax reasons.

6. Booking a call (Calendly)

To book a welcome call or session, this site links out to Calendly, a scheduling service. When you book through Calendly, you provide information directly to Calendly (typically your name, email address, and chosen time slot), and Calendly processes that data as an independent controller or processor under its own privacy policy. We receive your booking details in order to prepare for and hold the session. Booking is based on your consent and on steps taken at your request prior to a potential contract (Art. 6(1)(a) and (b) GDPR). Calendly is operated by Calendly LLC (USA); please review Calendly's privacy policy for details of its own processing and any international data transfer safeguards.

7. Newsletter (coming soon)

We are in the process of setting up a newsletter and sales-funnel platform through Systeme.io. Once live, signing up will be entirely optional and based on your explicit consent (Art. 6(1)(a) GDPR), collected via a double opt-in process. You will be able to unsubscribe at any time using the link in every email. This section will be updated with full details of what is collected and how before the newsletter goes live.

8. Coaching, supervision, coach education, and mentor coaching services

If you engage Francesca Rossin as a coaching, supervision, coach education, or mentor coaching client, your personal data is processed to deliver that service and to fulfil related professional, contractual, and legal obligations (Art. 6(1)(b) contract performance, and Art. 6(1)(c) legal obligation, GDPR). This includes:

• Contact details (name, email, and/or phone number) used to schedule and hold sessions;
• An activity log recording the type of service, number of hours, and engagement dates, which may be requested by credentialing bodies such as the ICF or EMCC as proof of coaching experience;
• Brief session notes, taken to support the quality of our work together, kept anonymised where possible and handled as described in your Service Agreement;
• Session recordings and AI-generated summaries (e.g. the Zoom AI Companion), only ever made with your explicit consent, used strictly for the agreed purpose, and deleted once that purpose is fulfilled; and
• Invoicing details required for tax and accounting purposes.

The full detail of how client data is collected, used, and retained during an engagement — including your specific rights to access, correct, or request deletion of that data — is set out in the Service Agreement provided to you at onboarding. Where the two documents differ in detail, the Service Agreement governs the coaching relationship itself, and this Privacy Policy governs the website.

9. Video conferencing (Zoom, Google Meet)

Sessions are typically held over Zoom or Google Meet. These providers process data such as your name, email address, and connection data to enable the call, and may offer features like AI-generated summaries, which are only used with your consent. Please review Zoom's and Google's privacy policies for details of their own processing.

10. Collaboration tools (Miro)

For some sessions, particularly training, facilitation, or group work, we may use Miro as a collaborative whiteboard. We limit what is entered into Miro to what is necessary for the session, and avoid entering identifying client data where possible. See Miro's privacy policy for details.

11. Google Workspace

Geek Techware UG uses Google Workspace for business email, calendaring, and document storage. Access is restricted to Francesca Rossin and her business partner and co-founder, Joerg Wiesmann. See Google Workspace's privacy commitments for details of Google's own processing as our data processor.

12. Payments and invoicing

Payments are handled via direct bank transfer, Stripe, or PayPal. Depending on the service booked, you may be able to choose your preferred payment method, or a specific gateway may be fixed for that booking. Stripe and PayPal each process the payment data you provide directly to them (such as your card or account details) under their own privacy policies — see Stripe's privacy policy and PayPal's privacy policy for details. Invoicing itself requires certain personal or business data (such as name, address, and, for businesses, a tax registration number), which we are legally required to retain for the periods set out under German commercial and tax law (Handelsgesetzbuch and Abgabenordnung). This processing is based on Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(b) GDPR (contract performance).

13. Tax consultant and tax authority (Finanzamt)

Where legally required, invoicing and accounting data may be shared with our tax consultant and, where applicable, the German tax authority (Finanzamt), solely for the purposes of tax compliance and reporting (Art. 6(1)(c) GDPR).

14. International data transfers

Some of the tools listed above (including Zoom, Calendly, Systeme.io, Stripe, and Google Workspace) may process data outside the European Economic Area, in particular in the United States. Where this occurs, the respective provider is responsible for ensuring an appropriate legal basis for the transfer, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. We select providers who state a commitment to GDPR compliance, but recommend reviewing each provider's own privacy policy for the specifics of their international transfer safeguards.

15. Data security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including restricting internal access to Francesca Rossin and her business partner, and using secure, access-controlled storage. No method of transmission or storage over the internet is entirely secure, and we cannot guarantee absolute security.

16. Children's privacy

This website and our services are directed at adults. We do not knowingly collect personal data from children.

17. Changes to this policy

We may update this Privacy Policy from time to time, for example as our tools or services change. The "last updated" date at the top of this page reflects the most recent revision.

18. Contact

For any questions about this Privacy Policy or how your data is handled, contact Francesca Rossin at francesca@francesca-rossin.com.