Privacy policy

This policy explains what personal data I collect when you visit m3coaching.no or use my services, why I collect it, and what rights you have. Personal data is any data that can be used to identify you personally.

Raphael Öttinger (sole proprietorship), trading as M3 | coaching Org. no.: 933 630 161 Dalsbygdvegen 269, 3720 Skien, Norway Email: raphael@m3coaching.no Website: www.m3coaching.no

I process personal data in accordance with the EU General Data Protection Regulation (GDPR), as applied in Norway through the Personal Data Act (personopplysningsloven). The legal bases are:

Art. 6(1)(a) GDPR: your consent Art. 6(1)(b) GDPR: performance of a contract or pre-contractual measures (e.g. coaching enquiries and bookings) Art. 6(1)(c) GDPR: legal obligations (e.g. bookkeeping and tax law) Art. 6(1)(f) GDPR: legitimate interests (e.g. secure and efficient operation of the website)

This website is hosted by Lovable (hosting provider). When you visit the site, the provider processes technical data on my behalf under a data processing agreement (Art. 28 GDPR). This is based on my legitimate interest in a reliable and secure website (Art. 6(1)(f) GDPR).

The hosting provider automatically collects and stores information that your browser transmits, such as IP address, date and time of the request, browser type and version, operating system, and referrer URL. This data is not merged with other data sources. It is stored for a short period and then deleted, unless needed for security purposes.

If you contact me by email or through a contact form, I process the information you provide (name, email address, message, and any other details) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to my services, otherwise Art. 6(1)(f) GDPR. I delete your data once your enquiry has been dealt with, unless statutory retention obligations apply.

If you book or use coaching services (e.g. Life Coaching, Personal Coaching or Business Coaching), I process your contact details, booking and invoice details, and the content you choose to share in sessions, to the extent necessary to provide the service (Art. 6(1)(b) GDPR). Coaching content is treated confidentially and is not passed on to third parties without your consent. If you voluntarily share special categories of data (e.g. health-related information), I process them only on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time.

To invoice services and meet accounting obligations, I process your name, address, and invoice and payment details. Under Norwegian bookkeeping law, accounting records must generally be kept for five years (Art. 6(1)(c) GDPR). Payments are handled via bank transfer. Invoices and accounting data may be shared with my accounting software provider and my accountant as processors.

For video sessions I use providers such as Zoom or Google Meet. The provider processes the data required for the connection (e.g. IP address, meeting metadata). Sessions are not recorded unless we have expressly agreed on this in advance.

This website uses only technically necessary cookies and no analytics or tracking tools. Technically necessary cookies are based on Art. 6(1)(f) GDPR.

Some service providers may process data outside the EU/EEA. Where this happens, I ensure an adequate level of protection, e.g. through an adequacy decision or EU Standard Contractual Clauses (Art. 44 ff. GDPR).

I store personal data only as long as necessary for the purposes described, or as required by law. After that, the data is deleted.

You have the right to:

access your data (Art. 15 GDPR) rectification of inaccurate data (Art. 16 GDPR) erasure (Art. 17 GDPR) restriction of processing (Art. 18 GDPR) data portability (Art. 20 GDPR) object to processing based on legitimate interests (Art. 21 GDPR) withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR)

To exercise your rights, contact me at raphael@m3coaching.no.

You have the right to lodge a complaint with the supervisory authority: Datatilsynet (Norwegian Data Protection Authority), Postboks 458 Sentrum, 0105 Oslo, Norway, www.datatilsynet.no

I may update this policy when my services or legal requirements change. The current version is always available on this page.