Privacy policy

Short version: this website sets no cookies, uses no analytics and loads nothing from third parties. The only personal data it handles is what you type into the contact form, and that is used for one thing: answering you.

1. Controller

Abigail Hattendorf, Englschalkinger Straße 224, 81927 München, Germany. Email: contact@littlerootsmunich.de.

2. Visiting this website

When you open a page, the server processes technical data that your browser sends: IP address, date and time, the page requested, the referring page and your browser's user agent. This is necessary to deliver the page and keep the service secure (Art. 6(1)(f) GDPR). Server logs are kept for no longer than 14 days and are not combined with other data.

Hosting: the website runs on a server of Oracle Cloud Infrastructure, data centre in Frankfurt am Main, Germany. Oracle processes this data on my behalf under a data processing agreement (Art. 28 GDPR).

The domain's name servers are operated by Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare only answers the address lookup for this domain; your visit to the website itself does not pass through Cloudflare.

3. No cookies, no tracking

This site does not set cookies or use comparable technologies, and it uses no analytics, advertising or social media plugins. Fonts and images are served from this server. That is why you see no cookie banner.

4. Contact form and email

If you use the contact form or write to me, I process the details you provide (name, email address and your message; optionally your phone number, your children's ages and how you heard about me) to answer your enquiry and, if you wish, to prepare a coaching agreement. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

Please do not send health information or diagnoses through the form. If such information becomes relevant later, I will ask for your explicit written consent first (Art. 9(2)(a) GDPR).

Your enquiry is stored on the server described above, and I receive a notification of it by email. Enquiries that do not lead to a collaboration are deleted no later than 12 months after receipt; nightly backups of the server are overwritten after 30 days. Data from a coaching agreement is kept as long as tax and commercial law requires (usually 6 to 10 years for invoices).

5. Email providers

Sending. The notification about your enquiry is sent through the email service Brevo (Brevo GmbH, Cologne, Germany; parent company Brevo SAS, Paris, France). Brevo processes the content of the notification and technical delivery data. Processing takes place within the European Union under a data processing agreement (Art. 28 GDPR).

Receiving. Emails to contact@littlerootsmunich.de are received by Cloudflare Email Routing and forwarded to my mailbox (Cloudflare, Inc., address above). Cloudflare processes the sender address, subject, content and technical headers of your message, under a data processing agreement (Art. 28 GDPR). Cloudflare also processes this data in the USA, on the basis of the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a reachable contact address) and Art. 6(1)(b) GDPR where your message concerns a contract.

6. Video calls

For online sessions I use a video service that we agree on before the call. I will tell you which provider is used and link its privacy information before the first session.

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). To exercise them, an email to the address above is enough.

You also have the right to lodge a complaint with a supervisory authority. For private bodies in Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

8. Changes

I update this policy when the website or the law changes. Last updated: 16 October 2026.