Privacy Policy

Last updated: 9 October 2026

1. Who I Am

Your privacy matters to me. As a Birth & Family Doula, I understand the importance of trust, confidentiality, and respecting your personal choices.

This Privacy Policy explains how I collect, use, store, and protect your personal information when you visit my website, contact me, book a consultation, or use my services.

Data Controller:

Laura Hermann
Birth & Family Doula
Schlehenhag 18
85276 Pfaffenhofen an der Ilm
Germany

Email: hello@doulalaura.de
Website: https://www.doulalaura.de

I am responsible for processing your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

2. Information Collected When You Visit My Website

My website is created and hosted using Wix.

Service provider:

Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel

When you visit my website, certain technical information may be collected automatically, including:

Your IP address
Browser type and version
Operating system and device information
Date and time of your visit
Pages accessed on my website
Technical information needed to ensure website functionality and security

This information is processed to operate the website, maintain its security, and resolve technical issues.

Legal basis: Article 6(1)(f) GDPR (legitimate interests in maintaining a secure and functional website).

Wix may process and store data in countries outside the European Economic Area, including the United States. International transfers are subject to applicable data protection safeguards, including adequacy decisions and Standard Contractual Clauses where required.

For more information, please visit:
https://www.wix.com/about/privacy

3. Cookies and Similar Technologies

My website uses cookies and similar technologies to support its operation.

Essential cookies are used to ensure the website functions properly, remains secure, and provides basic features.

Other cookies, such as those used for analytics or marketing, will only be used where the required consent has been obtained.

For essential technologies, the legal basis for accessing or storing information on your device is Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any associated processing of personal data is based on Article 6(1)(f) GDPR.

For non-essential technologies requiring consent, the legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Where consent is required, you can withdraw it at any time through the website's cookie settings.

4. Contacting Me by Email

If you contact me by email, I will process the information you provide in order to respond to your enquiry.

This may include:

Your name
Your email address
Your telephone number, if provided
The content of your message
Any other information you voluntarily share

My business email account is hosted through Microsoft 365, provided by Microsoft.

Microsoft processes information as part of its cloud-based email services. Depending on the service configuration and processing requirements, information may be processed outside the European Economic Area, subject to appropriate legal safeguards.

Further information about Microsoft's privacy practices is available at:

https://privacy.microsoft.com/en-gb/privacystatement

Legal basis: Article 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, or Article 6(1)(f) GDPR for general enquiries.

Email correspondence is retained only for as long as necessary for the relevant purpose, unless legal obligations require longer storage.

Please be aware that ordinary email may not be an appropriate way to send particularly sensitive health information. If you need to share such information, we can agree on a suitable method of communication.

5. Booking a Free Connection Call Through Calendly

You can book a free 30-minute connection call through Calendly, an external appointment scheduling service.

Service provider:

Calendly LLC
115 E Main St., Ste A1B
Buford, GA 30518
United States

When you book a connection call, the following information is collected:

Your name
Your email address
Your pronouns
Your partner's name
Your partner's pronouns
Your chosen appointment date and time

I use this information to arrange our conversation, communicate with you about your appointment, and address you and your partner respectfully and appropriately.

Providing pronouns helps me create a welcoming and inclusive environment. Pronouns are not used to make assumptions about gender identity, sexual orientation, or other personal characteristics.

Information about your partner is used solely in connection with the requested appointment and any subsequent communication or services where relevant.

Legal basis: Article 6(1)(b) GDPR, as the processing is necessary to arrange a consultation requested by you prior to potentially entering into a service agreement.

For information that is not necessary to arrange the consultation, such as optional pronoun information, processing is based on Article 6(1)(f) GDPR (legitimate interest in respectful and personalised communication), where applicable.

Calendly may process personal information in the United States. International transfers are subject to applicable data protection safeguards, including the EU-US Data Privacy Framework or Standard Contractual Clauses, as appropriate.

You can find Calendly's Privacy Notice here:

https://calendly.com/legal/privacy-notice

Information collected through Calendly is retained only as long as necessary for appointment administration, related communication, and any applicable legal obligations.

6. Personal Information Shared During Doula Support

As a Birth & Family Doula, my work involves supporting individuals and families through pregnancy, birth, and the postnatal period.

During our conversations and work together, you may choose to share personal information such as:

Your family circumstances
Your pregnancy and birth preferences
Your wishes, concerns, and expectations
Information about your partner or other family members
Information relevant to the support you would like to receive

Some of this information may qualify as sensitive personal data, including health-related information.

I will only collect and process information that is relevant and necessary for providing my services.

General client and contractual information is processed under Article 6(1)(b) GDPR.

Where processing involves special categories of personal data, such as health information, I will obtain your explicit consent under Article 9(2)(a) GDPR where that is the applicable legal basis, alongside an appropriate legal basis under Article 6 GDPR.

You may withdraw consent at any time with effect for the future.

I do not share information about your pregnancy, health, family circumstances, or personal experiences with healthcare providers, hospitals, or other third parties unless you have authorised the disclosure or another lawful basis permits or requires it.

7. Confidentiality and Respect

Trust and confidentiality are central to my work.

I treat the information you share with sensitivity and respect, regardless of your background, identity, family structure, or personal circumstances.

Information shared during consultations and doula support is used only for purposes connected with providing my services, fulfilling legal obligations, or other purposes permitted by applicable law.

I do not sell your personal information.

8. Sharing Information With Service Providers

To operate my website and provide my services, I use trusted external service providers, including:

Wix: Website hosting and technical operation
Microsoft 365: Business email hosting and communication
Calendly: Appointment scheduling and management

These providers may process personal information on my behalf or, for certain processing activities, act as independent controllers.

Where required, appropriate data processing agreements and international transfer safeguards apply.

I do not disclose personal information to unrelated third parties without a lawful reason.

9. How Long I Keep Your Information

I only retain personal information for as long as it is needed for the purpose for which it was collected.

In particular:

General enquiries are deleted when they are no longer required, unless retention is justified or legally required.
Appointment information is kept for as long as necessary to manage appointments and related enquiries.
Client information is retained as necessary to provide agreed services and comply with applicable legal obligations.
Invoices and other business records are retained in accordance with applicable German tax and commercial law.

When information is no longer required, it is securely deleted or anonymised, where appropriate.

10. Your Data Protection Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

Access: You can request information about the personal data I hold about you.
Correction: You can request correction of inaccurate or incomplete information.
Erasure: You can request deletion of your personal information.
Restriction: You can request that certain processing activities be restricted.
Data portability: You can request your information in a structured, commonly used, machine-readable format where applicable.
Objection: You can object to certain processing activities, particularly those based on legitimate interests.
Withdrawal of consent: You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact:

hello@doulalaura.de

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority for private businesses in Bavaria is generally:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

Website: https://www.lda.bayern.de

11. Protecting Your Information

I take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, or disclosure.

My website uses HTTPS encryption to protect information transmitted between your browser and the website, provided that the secure connection is correctly configured.

Access to client and business information is restricted as appropriate.

12. Changes to This Privacy Policy

I may update this Privacy Policy to reflect changes in my services, website functionality, legal requirements, or the external providers I use.

The latest version will always be available on this website.

If you have any questions about how your personal information is handled, please contact me at:

hello@doulalaura.de