Last updated: November 2026
The controller responsible for the processing of personal data on this website is:
Katja Baisch
UNDO – Beyond Coaching. Into Initiation.
Nerotal 10
65193 Wiesbaden
Germany
Protecting your personal data is important to me.
UNDO processes personal data in accordance with applicable data protection laws, particularly the European Union General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data refers to any information relating to an identified or identifiable natural person.
This Privacy Policy explains how personal data is collected, processed, stored, and protected when you visit this website or use the services offered by UNDO.
When you access this website, certain technical information may be automatically collected and processed to ensure its functionality, stability, and security.
This may include:
The legal basis for this processing is Article 6(1)(f) GDPR, based on the legitimate interest in operating a secure and functional website.
To be completed: Hosting provider, data recipients, specific retention periods, and information on any transfers of data outside the European Economic Area.
If you contact UNDO via email or through a contact form, the personal information you provide will be processed for the purpose of responding to your inquiry.
This may include your name, email address, and the content of your message.
Where your inquiry relates to a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR.
For other inquiries, processing is based on Article 6(1)(f) GDPR, reflecting the legitimate interest in responding to communications.
Personal data will be deleted once it is no longer required for the relevant purpose, unless statutory retention obligations apply.
When you inquire about or book coaching sessions, consulting services, or Pilates classes, personal data may be processed to organize and deliver the requested services.
This may include:
The legal basis for this processing is generally Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract or pre-contractual measures.
Where special categories of personal data, such as health-related information, are processed, this will only take place where an appropriate legal basis under Article 9 GDPR applies.
When registering for an UNDO retreat, personal data is processed to manage bookings, organize the event, and provide the services included in the retreat.
This may include:
The legal basis is generally Article 6(1)(b) GDPR, where processing is necessary to perform the booking contract.
Where necessary for the organization and delivery of the retreat, relevant personal data may be shared with participating service providers, including accommodation providers.
Any such disclosure will be limited to the information necessary for the respective purpose and will be based on an appropriate legal basis.
To be completed: Booking platform, payment service providers, specific data recipients, and retention periods.
Photographs and video recordings may be created during UNDO retreats.
Where identifiable individuals appear in content intended for marketing, website publication, or social media, the processing and publication of such content will be based on an appropriate legal basis.
Where consent is required, it will be obtained separately.
Any consent provided may be withdrawn at any time with effect for the future.
Further information regarding photography, filming, and the use of recordings may be provided to participants in a separate privacy notice.
This website may use cookies or comparable technologies.
Technically necessary technologies are used to provide essential website functions.
Where cookies or similar technologies require consent, they will only be used after the relevant consent has been obtained.
The processing of personal data is subject to the applicable legal basis under Article 6 GDPR. The storage of information on users' devices, or access to such information, is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
To be completed: Actual cookies and tracking technologies, third-party providers, purposes, storage durations, and consent withdrawal options.
This website may contain links to external websites and social media platforms, including Instagram.
When you follow an external link, you leave the UNDO website. The privacy policies of the respective third-party providers apply to any subsequent processing of personal data.
Where social media content is embedded directly into this website, the associated data processing will be explained separately.
Personal data may be shared with external service providers where necessary to operate the website, deliver booked services, or comply with legal obligations.
Such providers may include:
Website hosting and IT service providers
Booking and scheduling platforms
Payment service providers
Accommodation and event partners
Professional advisers where required
Where service providers act as data processors, appropriate data processing agreements will be concluded in accordance with Article 28 GDPR, where required.
Personal data will only be stored for as long as necessary to fulfil the purposes for which it was collected.
Applicable statutory retention obligations, particularly those arising under German commercial and tax law, remain unaffected.
Once the relevant retention period has expired, personal data will be deleted unless another legal basis permits or requires continued storage.
Specific retention periods will be provided for the respective processing activities wherever they can be determined.
Under the GDPR, you have the following rights, subject to the applicable legal requirements:
You may exercise your rights at any time by contacting:
katja.baisch@undoconsulting.de
If you believe that your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.
The competent supervisory authority in Hesse, Germany, is:
The Hessian Commissioner for Data Protection and Freedom of Information
Website: https://datenschutz.hessen.de
This Privacy Policy may be updated from time to time to reflect changes in legal requirements, website functionality, or the processing of personal data in connection with UNDO's services.