Privacy Policy

Last updated: July 12th 2026

Thank you for visiting my website. This website is run by one person — me. This policy explains, in plain language, what happens with your data when you visit this site, write to me, book a call, join the newsletter, or work with me. I follow the EU General Data Protection Regulation (GDPR) and German data protection law (BDSG).

  1. Who is responsible

    Hedvika Tichá

    Richardstr. 59, 12055 Berlin, Germany

    hedvika@hedvikaticha.com

  2. Visiting this website (hosting)

    This site is hosted by Squarespace (Squarespace, Inc., New York, USA). When you visit, Squarespace automatically processes technical data — IP address, browser type, date and time of access — in server logs, to deliver the site securely. Legal basis: legitimate interest in a secure, functioning website (Art. 6 (1)(f) GDPR). Server logs are handled under Squarespace's data processing terms; see section 9 on international transfers.

  3. Contacting me (form or email)

    If you use the contact form or email me, I receive your name, email address, and message, and I use them only to reply. Legal basis: taking steps prior to entering a contract (Art. 6 (1)(b) GDPR) or my legitimate interest in answering you (Art. 6 (1)(f) GDPR). I keep inquiries as long as needed to handle them, then delete them, unless statutory retention duties apply.

  4. Booking an intro call

    Calls are booked through Simplero (Simplero Inc., USA). Simplero processes your name, email address, and scheduling details on my behalf. Legal basis: Art. 6 (1)(b) GDPR (steps prior to entering a contract).

  5. Newsletter

    If you sign up for my newsletter, your email address is processed by Simplero on my behalf. Sign-up uses double opt-in: you receive a confirmation email, and only your confirmation puts you on the list. Legal basis: your consent (Art. 6 (1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email; your address is then removed from the list. Simplero records whether emails are opened and which links are clicked, so I can see what's useful. If you don't want this, you can unsubscribe at any time.

  6. Purchases and payment

    If you buy a session, program, or digital product, I process your name, email address, and billing details to fulfill the contract. Payment is handled by Simplero and its payment providers; I never see your full payment credentials. Legal basis: contract performance (Art. 6 (1)(b) GDPR) and legal obligations (Art. 6 (1)(c) GDPR). Invoices and booking records are retained for the statutory periods (up to ten years under § 147 AO).

  7. Cookies

    This site uses only the technically necessary cookies set by Squarespace to make the site function (e.g. security, load balancing). I do not run advertising cookies, analytics, or tracking tools.

  8. If we work together (confidentiality)

    What you share with me in sessions stays between us. Session notes are kept privately and securely, are never shared, and are never used in testimonials or marketing without your explicit written consent. Where our work touches on your health or emotional life, I treat that information as specially protected (Art. 9 GDPR) and process it only on the basis of your consent, which you can withdraw at any time.

  9. International data transfers

    Some of my service providers (notably Squarespace) process data in the United States. Transfers are protected by the EU Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. I live and also work from Argentina, which holds an EU adequacy decision — meaning the European Commission recognizes its data protection level.

  10. How long I keep data
    Only as long as needed for the purpose it was collected for, unless the law requires longer (tax and commercial law: six to ten years for business correspondence and invoices). Newsletter data is kept until you unsubscribe.

  11. Your rights

    You have the right to access your data (Art. 15 GDPR), correct it (Art. 16), delete it (Art. 17), restrict processing (Art. 18), receive it in a portable format (Art. 20), and object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you can withdraw that consent at any time with effect for the future. To exercise any of these rights, email me: hedvika@hedvikaticha.com.

    You also have the right to complain to a data protection supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

  12. No automated decision-making
    I do not use automated decision-making or profiling.

  13. Changes
    I'll update this policy when the tools or the law change, and post the current version here with the date above.