What this notice covers

This notice explains how personal data is processed when you visit this website and when you use the contact form or the Founding Coach registration.

Binding privacy notices for registrations, bookings, payments, and other app-specific features are provided directly inside the KREST app.

Website access

When you access the website, technically required connection and server data may be processed, including IP address, date and time of access, requested resources, referrer, browser details, and device information.

This processing is necessary to deliver the website, maintain stability, analyze errors, and protect against abuse. The legal basis is Art. 6(1)(f) GDPR.

Contact form

If you contact us via the form, we process the information you enter, especially name, email address, optional company, and message, in order to answer your request and communicate with you.

The legal basis is Art. 6(1)(b) GDPR if your request relates to pre-contractual steps or the use of KREST; otherwise Art. 6(1)(f) GDPR.

Founding Coach registration

If you register through the Founding Coach section, we process the data requested there, especially first and last name, email address, postal code, city, category, certification status, coaching formats, and optional details such as a profile link.

We use this data to handle your pre-launch interest, structure the pilot phase, and contact you about KREST. The legal basis is Art. 6(1)(b) GDPR where pre-contractual steps are involved; otherwise Art. 6(1)(f) GDPR.

Spam and abuse protection

We use Google reCAPTCHA for the contact form. To protect the Founding Coach registration, we also use Firebase App Check, which relies on reCAPTCHA v3. This may involve the transfer of data such as IP address, browser details, referrer, timestamps, and security or interaction data to Google.

Where consent is requested for individual protection mechanisms, the legal basis is Art. 6(1)(a) GDPR. Otherwise the processing is based on Art. 6(1)(f) GDPR in order to protect forms and backend services against abuse.

Recipients and service providers

• Hosting and infrastructure providersWebsite delivery, technical operation, stability, and security
• Google reCAPTCHASpam and abuse protection for forms
• Google Firebase / Google Cloud FunctionsTechnical backend for contact requests and Founding Coach registration

International data transfers

When Google services are used, processing in third countries, especially the United States, cannot be ruled out. Where a provider is covered by an adequacy decision, we rely on Art. 45 GDPR; otherwise on appropriate safeguards under Art. 46 GDPR, especially Standard Contractual Clauses.

Retention period

We keep personal data only as long as necessary for the stated purposes. Contact requests and Founding Coach data are generally stored until the relevant purpose has been fulfilled or you ask for deletion, unless legal retention obligations apply.

Your privacy setting remains stored in your browser until you change it or clear your local browser storage.

Your rights

• Access to your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure within the scope of Art. 17 GDPR
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future

For requests, please contact: datenschutz@krest-coaching.com