Privacy Policy — Rosie Rapp

Placeholder. This is a working skeleton, not legal advice. Before launch it needs to be completed with Rosie's details and checked against the services the live site actually uses — in particular the three flagged below.

1. Controller

rosie.rapp — Roseanne Freel Thomas, c/o Online-Impressum #10102, Europaring 90, 53757 St Augustin, Germany, hello@rosierapp.com. See the Imprint for full details.

2. Hosting

This website is hosted by Hostinger International Ltd. The host processes server log files (IP address, date and time of the request, page requested, referrer, browser and operating system) on the basis of our legitimate interest in a secure and reliable service (Art. 6 (1)(f) GDPR). A data processing agreement is in place.

3. Contact forms

This website has three enquiry forms — on the Contact page, the Speaking page and the Corporate Offerings page. All three are handled by a script on our own server. No third-party form service is involved, and your data is not passed to one.

What you enter depends on the form: your name, your company or organization (on the Speaking page, the company or event), your email address, your phone number, the area you are interested in or the keynote topic, whether you would like the engagement in person or virtually, the location, a date or timeframe, the audience size (Speaking page only) and your message. Your name and email address are required; on the Speaking page the company or event, the audience size and the location are required as well. Everything else is optional, and a field you leave empty is not included in the message we receive.

The script emails this data to our mailbox and keeps no copy of it. It records only that a submission happened, on which page, and whether the mail server accepted it — a technical check that the forms are working. That record contains no personal data of any kind, not even an IP address.

Our mailbox is provided by Google Ireland Ltd. as part of Google Workspace, under a data processing agreement. Where data is transferred to the United States in the course of that service, it is covered by Google's certification under the EU–US Data Privacy Framework. Your data is processed in order to answer your enquiry, on the basis of Art. 6 (1)(b) and (f) GDPR, and is kept until your enquiry has been fully dealt with.

Check before launch: confirm which Google entity the Workspace account is actually contracted with and name it above — the answer differs for EU and UK customers.

4. Fonts

This website uses the typefaces Playfair Display, Open Sans, Barlow Condensed and Caveat. The font files are stored on our own server and are loaded from there. No connection to Google Fonts or any other external font service is established, and your IP address is therefore not transmitted to any third party in order to display this page.

5. Cookies and analytics

This website sets no cookies of its own and uses no analytics or tracking.

Check before launch: if analytics, a cookie banner, a booking widget or embedded social feeds are added later, they must be described here first.

6. External links

Links to Instagram, LinkedIn and external booking tools lead to third-party services with their own privacy policies. We have no influence over the data they collect once you follow such a link.

7. Your rights

Access to the personal data we hold about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interests (Art. 21 GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

To exercise any of these, email hello@rosierapp.com.

Terms & Conditions

The terms 1:1 ADHD coaching is booked on — scope, booking, payment, cancellation, withdrawal and confidentiality — are set out in the Terms and Conditions for Coaching. Corporate consulting, workshops and speaking engagements are agreed separately in writing.

Last updated: date.