EMPOWERHER DIGITAL

Privacy Policy

Last updated: October 2026

Your privacy matters to us. This Privacy Policy explains how EmpowerHer Digital collects, uses and protects personal data when you visit our website, contact us or book a consultation.

1. Data Controller

The controller responsible for processing personal data through this website is:

Kim Bordes
EmpowerHer Digital
Pferdstraße 9
61476 Kronberg
Germany

Phone: +49 176 72 84 10 08
Email: [email protected]

The controller determines the purposes and means of processing personal data through this website.

2. General Information

We take the protection of your personal data seriously. Personal data means any information relating to an identified or identifiable natural person.

Depending on how you interact with us, this may include information such as your name, email address, telephone number, company information, IP address, appointment information and information you voluntarily provide through forms or other communications.

We process personal data in accordance with applicable data protection law, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Website Hosting and Technical Data

Our domain and hosting infrastructure is provided by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you access our website, technical information may be processed automatically in order to provide the website securely and reliably.

This information may include your IP address, browser type and version, operating system, referring website, date and time of access and technical information relating to the request.

Where applicable, this processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically functional operation of our website.

4. HighLevel / GoHighLevel

We use HighLevel, also commonly known as GoHighLevel, for website and customer relationship management functionality, forms, appointment scheduling and communication management.

When you submit information through our website, contact us through a form or book an appointment, the information you provide may be processed using HighLevel.

Depending on your interaction with us, this may include:

  • Your name
  • Email address
  • Telephone number
  • Company or business information
  • Appointment date and time
  • Information provided through forms
  • Communication history

We use this information to respond to enquiries, arrange consultations, manage prospective and existing customer relationships and provide our services.

Depending on the context, processing may be based on Art. 6(1)(b) GDPR where processing is necessary in connection with a contract or steps taken at your request before entering into a contract, Art. 6(1)(f) GDPR where we have a legitimate interest in responding to enquiries and managing business relationships, or Art. 6(1)(a) GDPR where you have provided consent.

Where HighLevel processes personal data on our behalf, it acts as a data processor. Appropriate contractual safeguards are used where required under applicable data protection law.

5. Contacting Us

If you contact us by email, telephone, website form or another communication channel, we process the information you provide for the purpose of handling and responding to your enquiry.

This may include your name, contact details, company information and the content of your communication.

Where your enquiry relates to a potential or existing contractual relationship, processing is generally based on Art. 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in responding to business enquiries pursuant to Art. 6(1)(f) GDPR.

6. Booking a Strategy Call

If you book a strategy call or consultation through our website, we process the information required to organise and conduct the appointment.

Depending on the booking form, this may include your name, email address, telephone number, company information, appointment date and time and information you voluntarily provide about your business or enquiry.

Appointment and contact information may be processed through HighLevel.

Where the appointment relates to a potential business relationship, the legal basis for this processing is Art. 6(1)(b) GDPR.

7. Communications and Marketing

Where you request information from us or communicate with us regarding our services, we may use the contact information you provide to respond to you and continue the relevant conversation.

Where consent is legally required for marketing communications, such communications will only be sent where the required consent has been obtained or another applicable legal basis permits the communication.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies that are technically necessary for the operation, security and functionality of the website.

Where cookies or similar technologies are not strictly necessary, they will only be used where the legally required consent has been obtained.

In accordance with § 25 TDDDG, storing information on or accessing information from a user's device generally requires consent unless a statutory exception applies, including where the technology is strictly necessary to provide a service expressly requested by the user.

If we introduce analytics, advertising or other optional tracking technologies, this Privacy Policy and our consent mechanism will be updated accordingly.

9. Recipients and Service Providers

We only disclose personal data where this is necessary to operate our business, provide our services, fulfil contractual obligations, comply with legal requirements or where another lawful basis permits the disclosure.

Service providers may include hosting, CRM, communication, scheduling, IT and other technical service providers.

Where a service provider processes personal data on our behalf, appropriate data processing arrangements are used where required by applicable law.

10. International Data Transfers

Some service providers used by us may process personal data outside Germany or the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we use or rely upon an appropriate transfer mechanism as required by applicable data protection law.

This may include an adequacy decision of the European Commission or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable statutory retention obligations.

Once the purpose for processing no longer applies and no statutory retention requirement or other lawful basis requires continued storage, the relevant personal data will be deleted or anonymised.

12. Your Data Protection Rights

Subject to the applicable legal requirements, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing
  • Receive personal data you have provided in a portable format where the legal requirements are met
  • Withdraw consent at any time with effect for the future

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact:

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

14. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Nevertheless, no internet-based transmission or storage system can be guaranteed to be completely secure.

15. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our website, services, technology or applicable legal requirements.

The version published on this website at the relevant time applies.

© 2026 EmpowerHer Digital. All rights reserved.