Privacy Policy
As of: May 2026
Below we inform you about the nature, scope and purpose of the processing of your personal data when using our website at "zoribegic.com" and our services. Personal data means all information relating to an identified or identifiable natural person.
1. Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The controller for the personal data processed here is:
Zorica BegićNervensystemcoaching
Marienstraße 23 · 52146 Würselen · Deutschland
E-Mail: hallo@zoribegic.com
(hereinafter "we")
2. General principles of data processing
We process personal data only where a legal basis exists. The relevant legal bases are in particular: Art. 6(1)(a) GDPR (consent), (b) (contract performance), (c) (legal obligation) and (f) (legitimate interests). The applicable legal basis is stated specifically in each of the sections below for each processing activity.
Personal data is deleted as soon as the purpose for storing it ceases to apply, unless statutory retention obligations prevent deletion. The specific retention periods are stated in the respective sections.
3. When you visit our website
When you visit our website, our server collects the following information from your device: browser type and version, operating system, previously visited website ("referrer"), IP address (anonymised) and time of the page request. This data is not merged with other data sources.
We collect and process this data to ensure the smooth operation of our website and to detect, prevent and pursue misuse of our services. We also use the data collected for statistical purposes, for example to evaluate which devices and browsers are used to access our website, in order to continuously adapt and improve our offering to meet user needs on this basis. This data processing is carried out on the basis of Art. 6(1)(f) GDPR.
We delete all the personal data mentioned above no later than twelve months after collection.
4. Cookies
This website uses CookieAdmin to manage cookie consent. On your first visit a banner is displayed. You can withdraw your consent at any time via "Cookie Settings" in the footer.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| wordpress_* | WordPress | Session management | Session |
| cookieadmin_* | CookieAdmin | Stores your consent | 12 months |
| pll_language | Polylang | Selected language | 1 year |
5. When you enter into a contract with us
When you enquire about an offering or enter into a contract with us, we process your name, your address (if provided) and your email address. If you voluntarily provide additional data when placing your order (e.g. an alternative billing address or a telephone number), we will also process this data.
We process this data electronically for the proper performance of the contract, in particular for the provision of the agreed services, invoicing, recording of payments and processing of complaints. This data processing is carried out on the basis of Art. 6(1)(b) GDPR.
We retain this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the commercial and tax retention periods to which we are subject have expired.
To the extent that we take session notes during coaching — whether on paper or digitally — we retain these notes until the end of the calendar year following the last coaching session. We then delete or destroy the notes. You have the right to request deletion or destruction at any time beforehand.
For a contract to be concluded between you and us, it is necessary that we receive your name and email address. The requirement to provide this data arises from statutory provisions (e.g. § 312i para. 1 no. 3 BGB, § 14 para. 4 UStG). Without providing this data you cannot therefore conclude a contract with us.
When deciding whether to enter into a contract, we do not use automated decision-making or profiling.
6. Payment
For payment, the payment service provider chosen by you collects and processes your name, email address, card or account number and/or other data as required by the payment method you have chosen. The contractual and privacy terms of the payment service provider you have chosen also apply.
When we receive a payment, we process the data transmitted to us by the payment service provider. When we receive a bank transfer to our account, we process in particular the name of the transferring account holder, the account number (IBAN and BIC) and the stated purpose of payment.
Processing is carried out on the basis of Art. 6(1)(b) GDPR. We retain this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the commercial and tax retention periods to which we are subject have expired.
7. Processors
To support our operational processes, we use the services of Lexoffice / Haufe-Lexware (Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg) as a processor in accordance with Art. 28 GDPR.
For the operation of our website on the internet, we use the technical services of GrL'Ca, Obala 32, 51511, Malinska, Croatia as a processor in accordance with Art. 28 GDPR.
8. Contact
If you use a contact form or chat function on our website, we process the data you enter; this may include your message, your name, your email address, your IP address, and the date and time of submission.
If you send us a message by email, we store your message with the sender data transmitted with it (name, email address and any further information added by your email program and the transmitting servers). For receiving, storing and sending emails, we use services provided by GrL'Ca, Obala 32, 51511, Malinska, Croatia as a processor in accordance with Art. 28 GDPR.
The legal basis for this data processing is Art. 6(1)(f) GDPR. We delete the data collected with your message no later than twelve months after the last communication with you on your matter, subject to the provision in the following paragraph.
If you send us a legally relevant declaration relating to the contractual relationship (e.g. a cancellation or complaint), the legal basis for processing, regardless of the method of transmission, is also Art. 6(1)(b) GDPR. In such a case we delete the data relating to your declaration once all mutual claims arising from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.
9. Video communication via Zoom
Coaching sessions take place via Zoom Video Communications, Inc. (55 Almaden Boulevard, San Jose, CA 95113, USA). IP addresses, audio/video data and metadata are processed. Zoom is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(b) and (f) GDPR. For further information please see the Zoom Privacy Policy.
10. Analytics & tracking
Analytics tools are only used with your explicit consent (Art. 6(1)(a) GDPR). No tracking cookies are set without your consent.
11. Newsletter
If you have subscribed to our newsletter, we will inform you by email about new offerings and features. You will receive no more than one newsletter per week. You can object to the use of your email address for advertising purposes at any time informally, without incurring any costs other than transmission costs at basic rates.
This data processing is carried out on the basis of your consent in accordance with Art. 6(1)(a) GDPR. If you withdraw your consent to the use of your email address for advertising purposes, we will delete your email address from our newsletter distribution list.
12. Your rights
With regard to the personal data we process about you, you have the following rights:
- Access (Art. 15 GDPR): You have the right to request confirmation from us as to whether we are processing personal data relating to you. If so, we will provide you with the personal data stored about you and the further information in accordance with Art. 15(1) and (2) GDPR.
- Rectification (Art. 16 GDPR): You have the right to have inaccurate personal data concerning you corrected without delay. Taking into account the purposes of processing, you also have the right to request the completion of incomplete personal data.
- Erasure (Art. 17 GDPR): You may request the immediate erasure of personal data concerning you under the conditions of Art. 17(1) GDPR, to the extent that processing is not required pursuant to Art. 17(3) GDPR.
- Restriction (Art. 18 GDPR): You may request restriction of the processing of your data where one of the conditions in Art. 18(1) GDPR applies.
- Data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and may request that we transmit this data to another controller without hindrance, where technically feasible.
- Withdrawal (Art. 7(3) GDPR): Where data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
RIGHT TO OBJECT (Art. 21 GDPR): FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; this right of objection exists in relation to data processing carried out on the basis of Art. 6(1)(f) GDPR in pursuit of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data override those interests. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS THE DATA IN QUESTION, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
OBJECTION TO DIRECT MARKETING: WHERE WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G. NEWSLETTER), YOU MAY OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, WITH THE RESULT THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THOSE PURPOSES.
If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. This does not preclude other administrative or judicial remedies.
Competent supervisory authority: Landesbeauftragte für Datenschutz NRW, Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de
13. Data security
This website uses SSL/TLS encryption (indicated by the padlock symbol and https:// in your browser's address bar).
14. Updates to this policy
This policy is current as of May 2026. Any changes will be published on this page.