Privacy Policy
Last updated: 4 September 2026
1. General Information
The protection of your personal data is important to us. Personal data means any information that can be used to identify you personally.
This Privacy Policy explains which personal data is processed when you visit this website and in connection with enquiries, consultations and coaching services provided by Lena Alexandra Monser, as well as the purposes for which such data is processed.
Personal data is processed in particular on the basis of the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Controller
The controller responsible for the processing of personal data is:
Lena Alexandra Monser
beyondblnc
Elberfelder Str. 130
40724 Hilden
Germany
Phone: +49 160 95088218
Email: hello@beyondblnc.com
Website: www.beyondblnc.com
3. Hosting and Server Log Files – Squarespace
This website is provided through Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08 N12C, Ireland.
When you visit the website, Squarespace processes technically necessary data. This may include, in particular:
• IP address
• browser type and browser version
• operating system used
• referrer URL
• pages accessed
• date and time of access
• technical device and connection information
The processing is carried out to ensure the secure, stable and technically error-free provision of the website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and functional website.
Squarespace processes personal data on the basis of a data processing agreement pursuant to Art. 28 GDPR. Squarespace provides a current Data Processing Addendum for this purpose.
Further information can be found in Squarespace’s Privacy Policy.
4. Cookies and Similar Technologies
This website uses cookies and comparable technologies.
Cookies are small files or pieces of information that may be stored on or accessed from your device.
4.1. Strictly Necessary Cookies
Technically necessary cookies and similar technologies may be used without prior consent where they are strictly necessary to provide the website or functionality requested by you.
The storage of or access to information on your device is governed in particular by Section 25(2) TDDDG.
Where personal data is processed in this context, the processing is carried out in particular on the basis of Art. 6(1)(f) GDPR or, where a legal obligation applies, Art. 6(1)(c) GDPR.
4.2. Non-Essential Cookies
Non-essential cookies and similar technologies, particularly those used for analytics or marketing purposes, are only used with your prior consent.
The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Under Section 25 TDDDG, consent is generally required for storing information on or accessing information from a user’s device unless a statutory exception applies.
Consent may be withdrawn at any time with effect for the future.
5. Consent Management with Cookiebot
We use Cookiebot on this website to manage your cookie and privacy preferences.
The provider is:
Usercentrics A/S
Havnegade 39
1058 Copenhagen
Denmark
Cookiebot allows you to decide which non-essential cookies and services you wish to consent to when visiting our website.
The following information may be processed in particular:
• your consent decision
• the time of your consent decision
• technical browser and device information
• an identifier required to document your decision
The processing serves in particular to store your decision and to ensure the legally required documentation of consent granted or refused.
The legal basis is primarily Art. 6(1)(c) GDPR in connection with the legal requirements relating to consent management and, in addition, Art. 6(1)(f) GDPR.
Cookiebot is operated by Usercentrics A/S, which is based in Copenhagen.
You can change your cookie preferences at any time using the privacy settings function provided on the website.
6. Squarespace Analytics
We use Squarespace Analytics to statistically evaluate the use of our website and to improve our online presence.
The following data may be processed in particular:
• browser, network and device information
• IP address
• pages accessed
• referrer
• clicks and interactions
• time of page views
• information about the use of the website
Squarespace states that its analytics platform collects visitor activity via JavaScript and that non-essential analytics cookies can be restricted until consent has been obtained.
Where non-essential cookies or similar technologies are used for analytics purposes, processing only takes place after you have provided your consent through the consent management system.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Consent may be withdrawn at any time with effect for the future.
7. Contact and Contact Form
If you contact us via the contact form, by email, by telephone or through another communication channel, we process the data you provide in order to respond to your enquiry.
This may include, in particular:
• name
• email address
• telephone number
• content of your message
• other information voluntarily provided
Where your contact is made for the purpose of initiating a contract, processing is based on Art. 6(1)(b) GDPR.
For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in properly handling incoming enquiries.
Please do not submit health data, medical diagnoses, laboratory results or medical documents through the general contact form. Where health-related information is required for coaching purposes, such information will generally only be collected during the coaching process and after the appropriate explicit consent has been provided.
8. Email Communication / IONOS
For our business email communication, we use services provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
If you contact us by email, the following personal data may be processed in connection with the technical provision of the email service:
• sender and recipient email addresses
• time of communication
• technical metadata
• subject line and message content
• attachments transmitted
Processing by us is based on Art. 6(1)(b) GDPR where the communication relates to the initiation or performance of a contract.
For other business enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in properly handling and conducting business communications.
Where IONOS processes personal data on our behalf, such processing takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Sensitive health data, medical documents, diagnoses or laboratory results should generally not be transmitted by unencrypted email. Where health-related information is required for coaching purposes, it is generally collected during in-person or digital coaching sessions. If transmission by email is necessary in an individual case, appropriate additional protective measures should be used.
9. Processing of Client Data in Connection with Coaching and Consultation Services
If you use a coaching or consultation service provided by Lena Alexandra Monser, we process the data necessary to prepare, perform and administer the relevant contract.
This may include, in particular:
• name and contact details
• contractual and billing information
• information about your goals
• information about nutrition and dietary habits
• information about physical activity and training
• body-related data, where necessary for the coaching
• information required to prepare individual nutrition or training plans
• communications and coaching notes
The processing of ordinary personal data is based on Art. 6(1)(b) GDPR where such processing is necessary for the performance of the agreed coaching service.
10. Health Data and Other Special Categories of Personal Data
As part of individual nutrition, health or fitness coaching, information may be processed that qualifies as health data within the meaning of Art. 9 GDPR.
This may include, for example, information concerning:
• illnesses or health-related limitations
• symptoms or injuries
• allergies and intolerances
• medication
• pregnancy
• medical diagnoses
• body or health-related measurements
Health data belongs to the special categories of personal data and is subject to enhanced legal protection. Art. 9 GDPR generally prohibits the processing of such data but permits it, among other circumstances, where the data subject has provided explicit consent for specified purposes.
Where health data is processed as part of the coaching, this is generally done only after you have provided your explicit consent.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Art. 9(2)(a) GDPR.
Consent may be withdrawn at any time with effect for the future.
The lawfulness of processing carried out before withdrawal of consent remains unaffected.
11. Payment Processing
Payment for our services is generally made by bank transfer.
In connection with payment processing, we process the data required for this purpose, including in particular:
• name of the person making the payment
• bank or payment information
• invoice amount
• payment date
• payment reference
The financial institutions involved in processing the bank transfer process the necessary information under their own responsibility under data protection law.
Our processing is based on Art. 6(1)(b) GDPR and, where data must be retained due to tax or commercial law requirements, Art. 6(1)(c) GDPR.
12. Video Conferences / Microsoft Teams
For online consultations and digital coaching sessions, we may use Microsoft Teams.
The provider for users in the European Economic Area is generally:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
When participating in a Microsoft Teams meeting, the following personal data may be processed in particular:
• name or display name
• email address, where used for the invitation or participation
• IP address
• technical device and connection information
• audio and video data
• meeting and participant information
• where applicable, chat messages and other content shared during the meeting
The processing is carried out for the purpose of initiating or performing the coaching contract on the basis of Art. 6(1)(b) GDPR.
Where health data is communicated verbally during a coaching session, such processing takes place on the basis of the separately provided explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with Art. 9(2)(a) GDPR.
Coaching sessions are generally not recorded or transcribed. Functions for automatic recording, transcription or AI-assisted summaries are generally not used for coaching sessions involving sensitive personal or health-related information.
Where Microsoft processes personal data on our behalf, such processing takes place on the basis of the applicable data protection and data processing terms for Microsoft Online Services.
13. Document and Invoice Processing
13.1 Document and Invoice Archiving with fileee
For the digital management and archiving of business and billing documents, we use services provided by:
fileee GmbH
Windthorststraße 68
48143 Münster
Germany
In connection with the use of fileee, personal data contained in invoices, payment documents and other business records may be processed.
This may include, for example:
• name
• address
• contractual and invoice information
• invoice amount
• payment information
• other information required to document the relevant business transaction
Processing is carried out for the proper administration of contracts and business transactions and to comply with statutory commercial and tax documentation and retention obligations on the basis of Art. 6(1)(b) and Art. 6(1)(c) GDPR.
Where fileee processes personal data on our behalf, such processing will be governed by a data processing agreement pursuant to Art. 28 GDPR.
13.2 Invoice Creation with sevDesk
We use sevDesk for the creation and management of outgoing invoices. The provider is:
sevDesk GmbH
Im unteren Angel 1
77652 Offenburg
Germany
In connection with invoice creation, the following personal data may be processed in particular:
name and address
contact details
contractual and service information
invoice number and invoice date
invoice amount
payment and billing information
other information required for proper invoicing
Processing is carried out for the performance and administration of the relevant contract and for compliance with statutory tax and commercial law obligations on the basis of Art. 6(1)(b) and Art. 6(1)(c) GDPR.
Where sevdesk processes personal data on our behalf, such processing takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Health data, medical documents, diagnoses or laboratory results are not stored in sevdesk for invoicing purposes.
14. WhatsApp
If you wish, we offer communication via WhatsApp.
For users in the European Region, WhatsApp is generally provided by WhatsApp Ireland Limited.
The following personal data may be processed in connection with such communication:
• telephone number
• name
• profile information
• message content
• time of communication
• technical connection and metadata
WhatsApp states that personal messages and calls are end-to-end encrypted.
The use of WhatsApp is voluntary. Alternatively, you can contact us by email or telephone.
Where the communication relates to the initiation or performance of a contract, processing by us is based on Art. 6(1)(b) GDPR.
WhatsApp should generally not be used to transmit sensitive health data, medical documents, diagnoses or laboratory results. Appropriate separately agreed communication channels will be used for transmitting such information.
We do not use WhatsApp for unsolicited advertising.
15. Instagram
Our website contains a link to our Instagram profile.
For users in the European Union, the service is generally provided by Meta Platforms Ireland Limited.
Where the website only contains an external link, no data is transmitted to Instagram through that link merely as a result of visiting our website.
A connection to Instagram is only established when you click the link and visit Instagram.
The privacy policies of Meta and Instagram apply there.
Where we merely provide a link to our Instagram profile, this is based on our legitimate interest in presenting and promoting our business pursuant to Art. 6(1)(f) GDPR.
16. Transfers of Data to Third Countries
Some of the service providers we use belong to international corporate groups or may process personal data outside the European Economic Area.
Where personal data is transferred to a third country, this takes place only in accordance with the applicable legal requirements.
Depending on the provider, the transfer may in particular be based on:
• an adequacy decision of the European Commission
• certification under the EU-U.S. Data Privacy Framework, where applicable
• Standard Contractual Clauses adopted by the European Commission
• another legally recognised safeguard
Further information regarding the safeguards applicable to transfers to third countries, including copies of the relevant safeguards where appropriate, may be requested using the contact details provided above.
17. Retention Periods
Personal data is generally stored only for as long as necessary for the relevant purpose.
Enquiries that do not result in a contract are deleted once the enquiry has been fully dealt with and there are no legitimate reasons for further retention.
Contractual, invoice and payment data is retained in accordance with statutory commercial and tax retention obligations.
Invoices and accounting records archived in fileee are currently retained for ten years.
For accounting documents and supporting records, the statutory retention period is generally eight years; other documents may be subject to retention periods of six or ten years depending on their nature.
Coaching data is retained only for as long as necessary to perform the coaching and, where applicable, for the establishment, exercise or defence of legal claims.
Health data is generally processed only for as long as necessary for the purposes of the coaching and while the relevant consent remains valid.
If consent is withdrawn, the relevant health data will be deleted unless another legal basis permits or requires further processing.
Further processing may in particular be necessary for the establishment, exercise or defence of legal claims. In such cases, the legal basis is Art. 6(1)(f) GDPR in conjunction with Art. 9(2)(f) GDPR.
18. SSL/TLS Encryption
This website uses SSL/TLS encryption for security purposes.
An encrypted connection can generally be recognised by “https://” and the relevant security symbol displayed by your browser.
This protects data transmitted between your browser and our website against unauthorised access during transmission.
19. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights:
• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent pursuant to Art. 7(3) GDPR
Consent may be withdrawn at any time with effect for the future.
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
To exercise your rights, simply contact us using the contact details provided above.
20. Automated Decision-Making
No decision based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, currently takes place in connection with our services.
21. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority particularly responsible for the controller is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
(Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen – LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Postal address:
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
22. Provision of Personal Data
For general enquiries, there is generally no statutory obligation to provide personal data. However, certain information is necessary in order for us to process your enquiry.
For the conclusion and performance of a coaching or consultation contract, the information necessary for identification, communication, contract administration and provision of the agreed services must be provided.
Without such information, it may not be possible to conclude or perform a contract.
Providing health data is generally voluntary.
Where certain health information is necessary to provide an individually tailored and appropriate coaching service, failure to provide this information may mean that certain personalised recommendations or services cannot be provided or can only be provided to a limited extent.
23. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where changes to our website, our services or applicable legal requirements make this necessary.
The current version of this Privacy Policy is available on our website.