Privacy Policy
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Dr. Svetlana Nikolić Poligenis
The Inner Lab
Talstraße
40217 Düsseldorf
Germany
E-mail: info@innerlabacademy.com
Telephone: +49 152 29212485
2. General Information on Data Processing
I take the protection of your personal data very seriously.
Your personal data is processed exclusively in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and German data protection regulations.
Personal data is any information relating to an identified or identifiable natural person (e.g. name, email address, IP address).
3. Data Collection on This Website
a) Access Data (Server Log Files)
When you visit this website, the hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. These include:
- Browser type and version
- Operating system
- Referrer URL
- IP address
- Date and time of the request
This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest) to ensure the secure and stable operation of the website.
b) Contact Form
If you contact me via the contact form, your details (name, email address, message) will be stored and processed in order to respond to your inquiry.
Legal basis:
- Art. 6(1)(a) GDPR — your consent
- Art. 6(1)(b) GDPR — if your inquiry relates to a contract or pre-contractual measures
Your data will not be shared with third parties and will be deleted once the request has been fully processed, unless statutory retention obligations apply.
c) Email Contact
If you contact me directly via email, your message and contact details will be stored to process your request.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communication) or Art. 6(1)(b) GDPR (contract-related inquiries).
4. Assessments, Downloads & Digital Resources
When you download materials (e.g. PDFs) or use assessments or tools provided on this website, personal data such as name and email address may be collected.
This data is used exclusively for:
- Providing the requested content
- Communicating relevant information related to your inquiry
Legal basis: Art. 6(1)(a) GDPR (consent).
You may withdraw your consent at any time by contacting me at the email address above.
5. Third-Party Services & Hosting
This website is hosted by a professional hosting provider within the European Union.
Any data processing by service providers is based on data processing agreements (Art. 28 GDPR).
5a. Newsletter & Email Communication
If you subscribe to receive emails (e.g., after completing an assessment or downloading resources), your email address will be stored and processed for the purpose of sending relevant content related to identity integration.
- Service provider: ActiveCampaign
- Data processing: Based on Art. 6(1)(a) GDPR (consent)
You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting info@innerlabacademy.com.
5b. Payment Processing
When you purchase products or services, payment is processed through Stripe.
Data collected may include:
- Name
- Email address
- Payment information (processed securely by the payment provider)
- Billing address
Legal basis: Art. 6(1)(b) GDPR (contract performance).
I do not store your payment card details. Transaction records (excluding card details) are retained for 10 years as required by German tax law (§ 147 AO). Please refer to Stripe’s privacy policy for details on their data processing.
5c. Product Purchases, Programme Participation & Workshop Bookings
When you purchase digital products, enrol in programmes, or book workshops, the following data is collected and processed:
Data collected:
- Name and contact information
- Purchase history and transaction records
- Product access and download logs
- For the MI²™ Integration Programme: session attendance, assignment completion status, progress assessments (including Inner Stability Score calculations)
- For workshops: registration details, attendance records, dietary requirements or accessibility needs (if provided)
Purposes:
- To provide access to purchased products and services
- To deliver live sessions and workshops
- To track programme progress and provide personalised guidance
- To process refund, cancellation, or guarantee claims
- To comply with legal obligations (tax and commercial record-keeping)
Legal basis:
- Art. 6(1)(b) GDPR — contract performance
- Art. 6(1)(c) GDPR — legal obligation (for financial records)
Data sharing:
- Video conferencing: Live sessions may be conducted via Zoom. Please refer to Zoom’s privacy policy for their data processing practices.
- Session recordings (if applicable) are stored securely and shared only with the programme participant.
6. Cookies
This website may use technically necessary cookies to ensure proper functionality.
Cookies do not contain personal data and are required for:
- Website security
- Navigation and basic functionality
Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2) TTDSG.
If analytics or non-essential cookies are added in the future, a cookie consent banner will be implemented.
7. Social Media Links
This website contains links to external social media platforms (e.g. LinkedIn, Instagram).
When you click on these links, you leave this website. No data is transmitted automatically to these platforms through this website.
Please refer to the privacy policies of the respective platforms for information on their data processing.
8. Your Rights Under GDPR
You have the right to:
- Access your stored personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (“right to be forgotten”) (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time (Art. 7(3) GDPR)
To exercise your rights, please contact: info@innerlabacademy.com
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.
The competent authority is the data protection authority of your place of residence or of North Rhine-Westphalia (NRW), Germany.
10. Data Security
I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.
11. Data Retention Periods
Your personal data is retained only as long as necessary for the purposes for which it was collected, or as required by law.
After the retention period expires, data is securely deleted or anonymised.
12. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect legal or technical changes.
The current version published on this website always applies.