We are delighted that you are visiting our website. The protection and security of your personal information when using our websites is very important to us, because you matter to us — and we also value the security of our data.

We would therefore like to inform you here about which of your personal data we collect when you visit our websites and for what purposes this data is used.

This Privacy Policy applies to the online presence of Nana Pfeiffer Coaching, which is accessible under the domains nanapfeiffer.com, alignmentsummit.com, as well as the various subdomains (“our website”).

Nana Pfeiffer Coaching

Uhlestraße 17

29549 Bad Bevensen

Germany

E-Mail: mail@nanapfeiffer.com

Website: www.nanapfeiffer.com

This privacy policy fulfils the legal requirements for transparency in the processing of personal data. Personal data refers to all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behaviour when visiting a website.

Information that cannot (or can only be linked to you with a disproportionate amount of effort), for example through anonymisation, is not considered personal data. The processing of personal data (e.g. collection, querying, use, storage, or transfer) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no lawful reasons for further retention of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Regardless of this, we may store your personal data in individual cases for the assertion, exercise, or defence of legal claims, and where statutory retention obligations exist.

We will only share your personal data processed on our website with third parties if this is necessary for the fulfilment of the respective purposes and is covered in each individual case by a legal basis (e.g. consent or the protection of legitimate interests). In addition, we may transfer personal data to third parties in individual cases if this serves the assertion, exercise, or defence of legal claims. Possible recipients may include, for example, law enforcement authorities, lawyers, auditors, courts, etc.

Where we use service providers for the operation of our website who process personal data on our behalf as part of commissioned processing in accordance with Art. 28 GDPR, these may also receive your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing activities.

Cookies are small text files that are sent by us to the browser of your device during your visit to our website and stored there. As an alternative to cookies, information may also be stored in the local storage of your browser. Some functions of our website cannot be provided without the use of cookies or local storage (technically necessary cookies). Other cookies allow us to perform various analyses, for example enabling us to recognise your browser when you revisit our website and to transmit different types of information to us (non-essential cookies).

By using cookies, we can make our online offering more user-friendly and effective, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not cause any harm to your device. They cannot execute programs or contain viruses.

Information about the specific services for which we use cookies is provided in the individual processing descriptions.

Subject to the legal requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), you, as the data subject, have the following rights:

Right of access (Art. 15 GDPR, § 34 BDSG)
to information about the personal data stored about you, including meaningful details regarding the processing and a copy of your data;

Right to rectification (Art. 16 GDPR)
of inaccurate or incomplete data stored by us;

Right to erasure (Art. 17 GDPR)
of the personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;

Right to restriction of processing (Art. 18 GDPR)
where the accuracy of the data is contested, the processing is unlawful, we no longer need the data but you request its restriction instead of erasure because you need it for legal claims, or you have objected to processing pursuant to Art. 21 GDPR;

Right to data portability (Art. 20 GDPR)
where you have provided us with personal data based on consent pursuant to Art. 6(1)(a) GDPR or on the basis of a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit it directly to another controller where technically feasible;

Right to object (Art. 21 GDPR)
to the processing of your personal data where it is based on Art. 6(1)(e) or (f) GDPR and there are grounds relating to your particular situation, or where the objection is directed against direct marketing. The right to object does not apply if compelling legitimate grounds for processing can be demonstrated, or if processing is necessary for the establishment, exercise, or defence of legal claims. Where the right to object does not apply to specific processing activities, this is indicated there;

Right to withdraw consent (Art. 7(3) GDPR)
to withdraw your consent at any time with effect for the future;

Right to lodge a complaint (Art. 77 GDPR)
with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you may contact the supervisory authority of your habitual residence, place of work, or the place of our company’s registered office.

Below you will find information about the individual processing activities, the scope and purpose of data processing, the legal basis, whether providing your data is mandatory, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Type and scope of processing

If you subscribe to our newsletter via our website, we collect your email address as well as your name and store this information together with the date of registration and your IP address. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm the registration within 168 hours, it will automatically expire and the data will not be processed for newsletter distribution.

For sending the newsletter, we use a service provided by ITACWT Limited (Systeme.io), which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

We have integrated components of the email delivery service Systeme.io on our website. Systeme.io is a service of ITACWT Limited and offers marketing automation for businesses.

Systeme.io is used to store data entered in forms via cookies, transmit it, send marketing emails and automated messages, and create targeted campaigns.

In addition, Systeme.io provides us with the ability to analyze whether sent emails were opened, how many users received an email, and whether users unsubscribed from the newsletter after receiving an email.

In this context, your data is transmitted to the operator of Systeme.io, ITACWT Limited, Cruise Park Rise, Tyrrelstown, Dublin 15, Ireland.

Purpose and legal basis

We process your data for the purpose of sending newsletters based on your consent in accordance with Art. 6(1)(a) GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with effect for the future in accordance with Art. 7(3) GDPR. There is no legal or contractual obligation to provide your data; however, it is not possible to send the newsletter without providing it.

The use of Systeme.io is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG.

Storage duration

After subscribing to the newsletter, we store the data for a maximum of 168 hours until the subscription is confirmed. After successful confirmation, we store your data until you withdraw your consent (unsubscribe from the newsletter) and, for technical reasons, for a maximum of an additional 7 days thereafter.

The specific storage duration of the processed data is not under our control but is determined by ITACWT Limited. Further information can be found in Systeme.io’s privacy policy: https://systeme.io/de/privacy-policy

Type and scope of processing

As part of the order process for our online courses and online coaching programs, we collect your personal data for the registration of a customer account. The information collected via the mandatory fields during registration is required for processing the order in the online shop. When registering a permanent user account, we additionally collect a password you choose yourself. In addition, you may voluntarily provide additional information that you consider necessary for processing the order.

Your personal data will only be passed on to third parties (e.g. shipping service providers / freight companies) and processors pursuant to Art. 28 GDPR insofar as this is necessary for order processing.

Purpose and legal basis

We process your personal data for the purpose of registering a customer account in order to fulfil a contract with you pursuant to Art. 6 (1) lit. b GDPR. There is a contractual obligation to provide your data insofar as it concerns mandatory fields, as this information is required to identify you and to fulfil the contract on our part. There is no legal obligation to provide the data. Without providing this information, ordering in our online shop and thus entering into a contract is not possible. There is no obligation to provide the voluntarily entered additional information. Ordering in our online shop is also possible without providing voluntary information.

The additional processing of your password for the registration of a permanent user account is carried out for the purpose of providing a customer account and displaying your previous purchases as well as storing your purchase-related data (e.g. billing address, different delivery addresses) on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. By deleting your customer account, you may revoke your consent at any time with effect for the future pursuant to Art. 7 (3) GDPR.

Storage duration

When registering a customer account, we store the purchase-related data beyond the end of the contract until your consent is withdrawn (deletion of the customer account). In both cases, further storage of your data only takes place if statutory retention obligations (e.g. tax and commercial law) exist.

Type and scope of processing

If you use the comment function on our website, we collect your name, email address, comment/message and store this data together with the IP address and date.

No transfer of your personal data to other recipients takes place when using the comment function.

Purpose and legal basis

The processing of your personal data is carried out for the purpose of commenting on content on our website on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future by informal notification [deletion of your comments]. There is no legal or contractual obligation to provide your data; however, the comment function cannot be used without providing your data.

Storage duration

We store your personal data until you withdraw your consent and, for technical reasons, for a maximum of 7 additional days.

We maintain so-called fan pages, accounts, or channels on the networks listed below in order to provide you with information and offers within social networks and to offer additional ways to contact us and learn about our services. Below we inform you about which data we or the respective social network process in connection with the use of our pages/accounts.

Data we process from you

If you contact us via messenger or direct message through the respective social network, we usually process your username and any additional information you provide, insofar as this is necessary to process/respond to your request.

Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest).

(Static) usage data received from social networks

We receive automatically generated statistics about our accounts via insights features. These statistics include total page views, likes, page activity, post interactions, reach, video views, and demographic information (e.g. gender distribution among followers).

These statistics contain only aggregated data and cannot be linked to individual persons.

Data processed by social networks

You do not need to be a member of the social network to view our pages; no user account is required.

However, please note that social networks collect and store data even from visitors without accounts (e.g. technical data), and use cookies and similar technologies, over which we have no control. Details can be found in the privacy policies of the respective networks.

If you interact with our pages (comment, like, share, or contact us via messenger), registration and provision of personal data are required.

We have no influence on data processing by social networks. According to our knowledge, your data is processed for the provision of services and analysis of usage behaviour (including cookies, pixels/web beacons), and may be used for interest-based advertising. Data may also be processed outside the EU/EEA and shared with third parties.

Further information can be found in the privacy and cookie policies of the respective platforms.

Facebook Profile and Page

When visiting our Facebook profile or page, Facebook collects your IP address and other information stored in cookies. This is used to provide us with statistical information about page usage.

More information:

https://www.facebook.com/privacy/policy/

We use this data only to understand user interests and improve our online presence. We may receive your name, messages, comments, and public profile information.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest), or Art. 6 (1) lit. a GDPR (consent).

We are jointly responsible with Facebook for page content. However, Facebook is primarily responsible for processing insights data.

More info:

https://www.facebook.com/legal/terms/page_controller_addendum

Instagram Page

When visiting our Instagram page, Instagram collects your IP address and other cookie-based data. This is used to provide statistical insights.

More information:

https://www.facebook.com/legal/terms/information_about_page_insights_data/

We may receive aggregated insights data only; no individual identification is possible.

We may also receive name, messages, comments, and public profile data when you interact with us.

Legal basis: Art. 6 (1) lit. f GDPR or Art. 6 (1) lit. a GDPR.

We are jointly responsible with Instagram for page content. Instagram is primarily responsible for insights data processing.

More info:

https://www.facebook.com/legal/terms/page_controller_addendum

LinkedIn Page

LinkedIn is a professional social network operated by LinkedIn Inc., Sunnyvale, California, USA.

When using LinkedIn, data such as username, job title, and IP address may be collected via tracking technologies. LinkedIn uses this data for analytics and recommendations.

We process your data only for communication and interaction purposes (name, messages, comments, public profile data).

Legal basis: Art. 6 (1) lit. f GDPR or Art. 6 (1) lit. a GDPR.

We are jointly responsible with LinkedIn for our company page. However, LinkedIn has full access to user data and is responsible for fulfilling user rights.

More information:

https://about.linkedin.com

https://www.linkedin.com/legal/privacy-policy

https://de.linkedin.com/legal/cookie-policy

This English version of the Privacy Policy is provided for convenience. The German version (Datenschutzerklärung) is legally binding. You find it here: https://www.alignmentsummit.com/widerrufsbelehrung

As of 01.06.2026