Privacy Policy
As of October 2026
1. Data Controller
The entity responsible for the processing of personal data on this website and in connection with my services is:
Annabelle Bini
Liebigstr. 1D
10247 Berlin
Germany
Email: hey@annabellebini.com
Website: www.annabellebini.com
2. General Information
The protection of your personal data is important to me. I treat personal information confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
In this Privacy Policy, I explain what data is processed when you use my website and in connection with my coaching, breathwork, and training services.
3. Hosting and Website Management with Squarespace
My website is hosted on Squarespace.
When you visit the website, technically necessary data may be processed. This includes, in particular, your IP address, the date and time of your visit, browser information, the pages you viewed, and technical connection data.
The processing is necessary to ensure the availability, security, and proper functioning of the website.
The legal basis is Article 6(1)(f) of the GDPR (legitimate interest).
Service Provider: Squarespace. The applicable company and further information regarding data processing can be found in Squarespace’s Privacy Policy.
Privacy Policy: https://www.squarespace.com/privacy
Data may be processed outside the European Economic Area. In such cases, the applicable data protection transfer mechanisms apply.
4. Cookies and Website Analytics
This website uses technically necessary cookies and similar technologies to the extent that they are required for the website's operation and basic functions.
If analytics or marketing technologies are also used, their use will—to the extent required by law—only take place after you have given your consent.
The legal basis is Section 25 of the TDDDG for accessing information on your device, as well as Article 6(1)(a) or (f) of the GDPR for the subsequent processing of personal data, depending on the specific function.
You can change or withdraw your consent through the website's cookie settings.
Squarespace provides built-in features for analyzing website usage statistics. In particular, it can process page views, visitor counts, traffic sources, and technical usage information.
If cookies or similar technologies are used for purposes other than those necessary for this, such use is permitted only with the user's consent. Consent that has been given may be revoked via the website's cookie settings.
5. Making Contact
If you contact me by email or through a contact form, I will process the information you provide. This may include your name, email address, message, and any other information you choose to provide.
The data is used to process your request and communicate with you.
The legal basis is Article 6(1)(b) of the GDPR for pre-contractual or contractual matters, and Article 6(1)(f) of the GDPR for other inquiries.
The data will be deleted as soon as it is no longer needed for processing and there are no legal retention requirements or other legitimate reasons for further storage.
6. Newsletter via Mailchimp
If you sign up for my newsletter, I will use your email address and, if applicable, your name to send you information about my services, events, and content related to breathwork, coaching, and personal development.
The newsletter is sent via Mailchimp, a service provided by the Intuit group of companies.
The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR.
Registration is carried out through a confirmation process, if one has been set up. The information required to verify consent may be documented.
You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in each email or by contacting me directly.
Mailchimp may also process personal data in the United States. In doing so, it uses the data transfer mechanisms provided for under applicable data protection regulations.
For more information: https://www.intuit.com/privacy/
7. Coaching, Breathwork, and Facilitator Training
If you book or participate in one of my services, I will process the personal data necessary for its organization and execution.
These may include:
Name and Contact Information
Booking and Billing Information
Information on the Organization and Implementation of the Program
Personal concerns and goals voluntarily shared
The legal basis is Article 6(1)(b) of the GDPR (performance of a contract).
Data relevant for billing and tax purposes is stored in accordance with statutory retention requirements.
8. Health Questionnaires and Sensitive Personal Data
For certain breathwork sessions and workshops, I ask that you fill out a health questionnaire in advance.
This may involve processing information about physical and mental health, existing medical conditions, medication use, pregnancy, and other health-related circumstances relevant to participation.
This information is intended solely to help assess potential risks, prepare for breathing exercises, and determine whether certain exercises should be modified or omitted.
Health data is classified as specially protected personal data within the meaning of Article 9 of the GDPR.
To the extent that the processing is based on your explicit consent, the legal bases are Article 6(1)(a) and Article 9(2)(a) of the GDPR.
You may withdraw your consent at any time, effective for the future. This does not affect the lawfulness of the processing that took place up to that point.
Without sufficient information regarding a person's medical fitness, it may be necessary for safety reasons not to offer certain breathing exercises.
Health information will not be used for advertising or newsletter marketing.
Retention Period for Health Data
The information provided in the health questionnaire will be used exclusively for the preparation and safe conduct of the respective coaching, training, or educational program.
They will be retained for the duration of the respective support and deleted upon its completion as soon as they are no longer necessary for this purpose, unless statutory retention requirements or other legitimate reasons require longer storage.
9. Using Google Forms
For health questionnaires and, if necessary, organizational forms, I use Google Forms, a service provided by Google.
When you fill out a form, the data you enter is processed through Google's technical infrastructure. Depending on the configuration, technical usage information may also be collected.
Google may also process data outside the European Economic Area.
For more information: https://policies.google.com/privacy
10. Payment Processing and Billing
In connection with paid services, I process the information necessary for billing and payment processing.
This includes, in particular, name, billing address, services booked, payment amounts, and payment status.
Depending on the payment method you choose, payment service providers or banks may be involved.
The legal basis is Article 6(1)(b) of the GDPR for the performance of a contract, as well as Article 6(1)(c) of the GDPR for compliance with legal obligations.
Payment Service Provider
Depending on the selected payment method, I use bank transfers as well as the payment service providers Revolut, Wise, Stripe, and PayPal to process payments.
In this process, the personal data required to process the payment—specifically, the name, payment amount, payment information, and, if applicable, billing information—is processed by the respective provider.
The legal basis for my processing of your data is Article 6(1)(b) of the GDPR (performance of a contract). The respective privacy policies of the payment service providers also apply to their processing of your data.
11. Confidentiality and Disclosure of Data
I will treat any personal information you share with me in connection with my services as confidential.
Data will only be disclosed if it is necessary to fulfill a contract, if there is a legal obligation to do so, if you have given your valid consent, or if there is another legal basis for doing so.
Technical service providers may have access to personal data in the course of their respective duties. Where necessary, appropriate data processing agreements are in place.
12. Retention Period
Personal data is generally stored only for as long as is necessary for the respective purpose or as required by statutory retention obligations.
The specific retention periods depend on the respective data category. Statutory retention periods may apply, particularly for billing records.
Processing based on consent will be terminated upon revocation, unless there is another legal basis for continued processing.
13. Your Rights
In accordance with the applicable legal requirements, you have the right to:
To obtain information about your stored personal data (Art. 15 of the GDPR)
Correcting Inaccurate Data (Art. 16 of the GDPR)
To request the erasure of your data (Art. 17 of the GDPR)
Restricting Processing (Art. 18 of the GDPR)
To receive your data in a portable format (Art. 20 of the GDPR)
Objecting to processing based on legitimate interests (Art. 21 of the GDPR)
The right to withdraw consent at any time with future effect (Art. 7(3) of the GDPR)
You also have the right to file a complaint with a competent data protection supervisory authority.
If you have any questions or wish to exercise your rights, you can contact hey@annabellebini.com at any time.
14. Data Security
I take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, and misuse.
This website uses an encrypted HTTPS connection.
15. Changes to This Privacy Policy
I may update this Privacy Policy if legal requirements, technical processes, or the services used change.
The version published on this website at any given time shall apply.
Optional additions for future features
Online Booking System: If an online booking system is integrated in the future, I will provide additional information regarding the respective provider, the data processed, the legal basis, and any potential data transfers.
Additional contact or registration forms: If additional forms are used, I will provide information about their respective purposes, recipients, and retention periods.
Video and Online Sessions: When video conferencing services are used for online coaching or training, the relevant providers and data processing activities are described separately.
Embedded Media and Social Media: When external content or tracking functions are integrated, the respective providers, legal bases, and any necessary consents are specified.