Privacy policy
1. Data controller
The controller responsible for processing personal data on this website is:
Jenny Beutnagel · Growpowerment
Helene-Lange-Straße 16
14469 Potsdam · Germany
Email: jenny@growpowerment.com
2. Hosting and visiting the website
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit, technical data transmitted by your browser is processed to provide the website. This includes, in particular, your IP address and information about the page requested.
The data is processed to deliver the website and maintain its security and stability. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to provide you with a functioning, secure website.
STRATO processes technical access data as the hosting provider. According to STRATO, IP addresses are stored for a maximum of seven days to detect and prevent attacks.
A data processing agreement pursuant to Article 28 GDPR is in place with STRATO.
3. Contact by email and contact form
When you email me or use the contact form, I process your name, email address or telephone number, the content of your message and the information you provide to respond to your enquiry and, where appropriate, arrange an introductory conversation. The form requires your name and the subject of your enquiry; either an email address or a telephone number is sufficient for a reply.
Enquiries submitted through the form are sent by email from this website to jenny@growpowerment.com. The form does not create an additional collection of message content in the WordPress database. Messages are processed in the email inbox.
To protect against automated enquiries, the form uses a hidden verification field, time-limited form authorisation and a limit on sending attempts. This involves processing an IP identifier hashed with a secret key and temporary technical identifiers; the form does not separately store the plain-text IP address or include it in the message. Attempt counters expire after 15 minutes, and confirmation and duplicate-prevention identifiers after 10 minutes. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is to prevent misuse and ensure reliable delivery. No external CAPTCHA service is used for this purpose.
Where the enquiry concerns entering into or performing a contract with you, the legal basis is Article 6(1)(b) GDPR. Other enquiries, for example from a company contact, are processed under Article 6(1)(f) GDPR. My legitimate interest is to respond to your enquiry.
Providing information is voluntary. Without working contact details and information about your enquiry, I may be unable to respond. For an initial introduction, a brief description of your enquiry and your contact details are sufficient. Please do not send confidential health information.
I delete the data once the enquiry has been fully dealt with and no further storage is necessary. Statutory retention obligations or the need to establish and enforce legal claims may require longer retention. Processing to comply with legal obligations is based on Article 6(1)(c) GDPR; processing necessary for legal claims is based on Article 6(1)(f) GDPR.
My email inbox is also hosted by STRATO. As a service provider, STRATO processes the message and connection data required to receive, store and send emails. A data processing agreement is in place. I use Microsoft Outlook to manage my emails. Automatic forwarding to other email addresses is not configured.
4. Cookies and consent management
I have not currently installed Google Analytics or comparable additional tracking or marketing services on this website.
The WordPress plugin Complianz is installed to manage cookie preferences. Where it stores your selection, the cookies or browser storage used serve to respect your decision. Section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies to strictly necessary storage and access. Where personal data is processed to fulfil statutory consent obligations, the legal basis is Article 6(1)(c) GDPR.
If additional services are introduced in the future, this privacy policy will be updated before they are used and any required consent will be obtained.
5. Online meetings with Google Meet
I use Google Meet through a personal Google account for introductory online conversations and other online meetings. Data processed may include your display name, email address or account information, technical connection data such as your IP address and device information, and the start time and duration of the meeting. Depending on how the service is used, audio and video data, chat content and screen-sharing content are transmitted. Other participants can see or hear content you share.
Google Meet is a Google service; Google Ireland Limited is a relevant point of contact for users in the European Economic Area. When a personal account is used, Google also processes data under its own privacy policy. Further information is available in the Google Privacy Policy.
Google may also process data outside the European Economic Area, including in the United States. According to Google, depending on the transfer, it relies on adequacy decisions, including the EU–US Data Privacy Framework, and, where necessary, standard contractual clauses. Information and guidance on obtaining a copy of the safeguards can be found in Google’s data transfer frameworks.
The data is processed to conduct the agreed conversation. Where this is necessary to enter into or perform a contract with you, the legal basis is Article 6(1)(b) GDPR. Other business conversations are based on Article 6(1)(f) GDPR; my legitimate interest is location-independent communication.
I retain appointment and communication data that I store for as long as needed to organise and follow up on the conversation. Statutory retention obligations and the need to protect legal claims may require longer storage. Data that Google stores under its own responsibility is subject to its privacy policy and retention information.
Recording, transcription and AI notes
We agree separately for each session whether a conversation will be recorded, transcribed or supported by automated AI notes. Before use, I inform all participants about the specific feature, provider, purpose, people with access and retention period. I only activate the feature after all participants have given their explicit, voluntary consent. Participation without these additional features remains possible.
Processing for these purposes is based on Article 6(1)(a) GDPR. Where special categories of personal data are involved, an additional appropriate legal basis is required, in particular explicit consent under Article 9(2)(a) GDPR. Consent may be withdrawn at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.
6. Your rights
Subject to the statutory conditions, you have the right to access your personal data, rectify inaccurate data, request erasure or restriction of processing, and data portability. You may withdraw consent at any time with effect for the future.
Right to object: Where I process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. I will then stop processing this data unless overriding compelling legitimate grounds apply or the processing serves legal claims. You may object to processing for direct marketing at any time without providing specific reasons.
To exercise your rights, simply email jenny@growpowerment.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the place where you live or work or where you believe an infringement has occurred. In Brandenburg, this is the State Commissioner for Data Protection and the Right of Access to Files, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany: www.lda.brandenburg.de.
Last updated: 26 September 2026