Privacy Policy
Effective as of: August 30, 2026
1. General Information
The protection of your personal data is important to us. Personal data means any information relating to an identified or identifiable natural person.
This Privacy Policy explains what personal data is processed when you visit this website and when you contact or use the consulting and coaching services provided by beyondblnc, as well as the purposes for which such data is processed.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The controller responsible for processing personal data is:
Lena Alexandra Monser
beyondblnc
Elberfelder Str. 130
40724 Hilden
Germany
Phone: +49 160 95088218
Email: lenaa.mns@gmail.com
Website: www.beyondblnc.com
3. Hosting and Server Log Files – Squarespace
This website is hosted by:
Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8, D08 N12C
Ireland
When you access this website, Squarespace may automatically process certain technical information required to provide the website securely and reliably.
This may include in particular:
IP address
Browser type and browser version
Operating system
Referrer URL
Pages accessed
Date and time of access
Technical device and connection information
The processing is necessary to ensure the secure, stable and technically correct operation of the website.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional provision of our website.
Squarespace processes personal data on our behalf in accordance with Article 28 GDPR where acting as a data processor.
Further information regarding data processing by Squarespace can be found in Squarespace's Privacy Policy.
4. Cookies and Similar Technologies
This website uses cookies and similar technologies.
Cookies are small files or pieces of information that may be stored on or accessed from your device.
4.1 Technically Necessary Cookies
Technically necessary cookies and similar technologies may be used without prior consent where they are strictly necessary to provide the website or a function expressly requested by you.
Where personal data is processed in this context, the legal basis is generally Article 6(1)(f) GDPR or, where processing is required by law, Article 6(1)(c) GDPR.
4.2 Non-Essential Cookies
Cookies and similar technologies that are not technically necessary, in particular those used for analytics or marketing purposes, are only used after you have given your prior consent.
The legal basis for the processing of personal data is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
5. Consent Management with Cookiebot
We use Cookiebot on this website to manage your cookie and privacy preferences.
Cookiebot is provided by:
Usercentrics A/S
Havnegade 39
1058 Copenhagen
Denmark
Cookiebot allows you to choose which categories of non-essential cookies and services you wish to accept.
In this context, information may be processed regarding:
Your consent preferences
Date and time of your consent
Technical browser and device information
An identifier required to record your consent decision
The processing is carried out in particular to record and document your consent choices and to comply with applicable legal requirements regarding consent management.
The legal basis is Article 6(1)(c) GDPR and, where applicable, Article 6(1)(f) GDPR.
You may change or withdraw your cookie preferences at any time using the privacy or cookie settings provided on this website.
6. Squarespace Analytics
We use Squarespace Analytics to understand how visitors use our website and to improve our online presence.
Depending on your settings and consent, the following information may be processed:
Browser, network and device information
IP address
Pages visited
Referrer information
Clicks and interactions
Time of page visits
Information about the use of the website
Where non-essential cookies or similar technologies are used for analytics, processing only takes place after you have given your consent through our consent management system.
The legal basis is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
7. Contact Requests and Contact Form
If you contact us using the contact form, by email, telephone or another communication channel, we process the personal data you provide in order to respond to and manage your request.
This may include in particular:
Name
Email address
Telephone number
Content of your message
Other information voluntarily provided by you
Where your request relates to the initiation or performance of a contract, processing is based on Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in appropriately responding to and managing enquiries addressed to us.
8. Email Communication / Google
We use Google services for email communication.
For users in the European Economic Area, Google services are generally provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When you contact us by email, Google may process technical and communication data such as:
Sender and recipient addresses
Date and time of communication
Email metadata
Content of emails
Our processing is based on Article 6(1)(b) GDPR where the communication relates to the initiation or performance of a contract and otherwise on Article 6(1)(f) GDPR.
Further information regarding Google's processing of personal data can be found in Google's Privacy Policy.
9. Client Data in Connection with Coaching and Consulting Services
When you use coaching or consulting services provided by beyondblnc, we process personal data required to prepare, perform and administer the contractual relationship.
Depending on the services agreed, this may include:
Name and contact details
Contractual and billing information
Information about your personal goals
Information about diet and eating habits
Information about exercise and training
Body-related information where relevant to the coaching
Information required to create individual nutrition or training plans
Communication records
Coaching notes
Ordinary personal data required for the performance of the coaching or consulting agreement is processed on the basis of Article 6(1)(b) GDPR.
10. Health Data and Other Special Categories of Personal Data
Individual nutrition, health or fitness coaching may involve the processing of information that qualifies as health data within the meaning of Article 9 GDPR.
This may include, for example:
Existing illnesses or health conditions
Symptoms or injuries
Allergies and intolerances
Medication
Pregnancy
Medical diagnoses voluntarily disclosed by you
Body or health-related measurements
Health data constitutes a special category of personal data and is subject to increased legal protection.
Where the processing of health data is necessary in connection with the coaching services, such data is generally processed only on the basis of your explicit consent pursuant to Article 9(2)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
11. Payment Processing
Payment for our services is generally made by bank transfer.
For payment processing, we may process information including:
Name of the payer
Bank or payment information
Invoice amount
Payment date
Payment reference
The financial institutions involved in carrying out the bank transfer process the data required for the transaction under their own data protection responsibility.
Our processing is based on Article 6(1)(b) GDPR.
Where payment or accounting information must be retained due to statutory commercial or tax obligations, processing is based on Article 6(1)(c) GDPR.
12. Zoom
We may use Zoom to provide online consultations and coaching sessions.
When you participate in a Zoom meeting, the following information may be processed depending on the functions you use:
Name
Email address
IP address
Technical device information
Audio and video data
Chat messages
Meeting metadata
The scope of processing depends on the features used during the respective meeting.
Meetings are not recorded unless this has been expressly agreed in advance.
Processing is carried out for the initiation or performance of the coaching agreement on the basis of Article 6(1)(b) GDPR.
Further information regarding the processing of personal data can be found in Zoom's Privacy Statement.
13. WhatsApp
If you wish, we may communicate with you using WhatsApp.
For users in the European Region, WhatsApp is provided by WhatsApp Ireland Limited.
When communicating via WhatsApp, the following information may be processed:
Telephone number
Name
Profile information
Message content
Date and time of communication
Technical connection and metadata
Personal messages and calls are generally protected by end-to-end encryption. However, WhatsApp may process certain metadata associated with the use of the service.
The use of WhatsApp is voluntary. You may alternatively contact us by email or telephone.
Where communication is required for the initiation or performance of a contract, our processing is based on Article 6(1)(b) GDPR.
Where health data is communicated through WhatsApp and processed by us, such processing is generally based on your explicit consent pursuant to Article 9(2)(a) GDPR.
We do not use WhatsApp to send unsolicited marketing communications.
14. Instagram
Our website contains a link to our profile on Instagram.
Instagram is provided to users in the European Union by Meta Platforms Ireland Limited.
Where our website merely contains an external link to Instagram, no personal data is transmitted to Instagram solely as a result of visiting our website through that link.
A connection to Instagram is established only when you actively click the link and visit Instagram.
From that point onward, the processing of personal data is subject to Meta's and Instagram's applicable privacy policies.
The link to our Instagram profile is provided on the basis of our legitimate interest in presenting and promoting our business and online presence pursuant to Article 6(1)(f) GDPR.
15. Transfers of Personal Data to Third Countries
Some of the service providers used by us belong to international corporate groups or may process personal data outside the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, such transfers take place only where the requirements of the GDPR are met.
Depending on the service provider and the circumstances, transfers may in particular be based on:
An adequacy decision of the European Commission
Certification under the EU-U.S. Data Privacy Framework, where applicable
Standard Contractual Clauses approved by the European Commission
Another legally recognised safeguard for international data transfers
16. Data Retention
Personal data is stored only for as long as necessary for the purpose for which it was collected or processed.
Enquiries that do not result in a contractual relationship are deleted once the enquiry has been fully resolved and there is no legitimate reason for further retention.
Contractual, invoice and payment information is retained in accordance with applicable statutory commercial and tax retention obligations.
Certain accounting documents may therefore need to be retained for several years in accordance with applicable law.
Health information and coaching data are not retained for longer than necessary for the performance of the coaching relationship or for legitimate documentation and legal defence purposes, unless a statutory retention obligation requires further storage.
Where processing is based solely on your consent and no other legal basis for continued storage exists, the relevant data will be deleted following withdrawal of consent where legally required.
17. SSL/TLS Encryption
This website uses SSL/TLS encryption for security purposes and to protect confidential information transmitted through the website.
An encrypted connection can generally be identified by the use of https in your browser.
Encryption helps protect information transmitted between your browser and our website against unauthorised access during transmission.
18. Your Rights under the GDPR
Subject to the applicable statutory requirements, you have the following rights regarding your personal data:
Right of access pursuant to Article 15 GDPR
Right to rectification pursuant to Article 16 GDPR
Right to erasure pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to object pursuant to Article 21 GDPR
Right to withdraw consent pursuant to Article 7(3) GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
To exercise your rights, you may contact us using the contact details provided above.
19. Automated Decision-Making
We do not currently use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with our services.
20. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
(Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen – LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
P.O. Box 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
21. Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary to reflect changes to our website, our services or applicable legal requirements.
The version of the Privacy Policy published on this website at the time of your visit shall apply.