Privacy policy

This English version is provided for convenience; in the event of any discrepancy, the German version at rabiha-ansari.de shall prevail.

1. Data protection at a glance

General information

This section summarises how your personal data is handled when you visit this website. Personal data means any information relating to an identified or identifiable natural person (the data subject). The privacy policy below explains our data protection practices in detail.

Data collection on this website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. You can find their contact details in the “Information about the controller” section of this privacy policy.

How do we collect your data?

We collect some data directly from you, for example when you complete a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data, such as your browser, operating system or the time of your page visit. This data is collected automatically as soon as you access this website.

What do we use your data for?

Some data is collected to ensure that the website works correctly. This website does not use its own visitor analytics or marketing trackers. Where contracts can be concluded or initiated through the website, the submitted data is also processed for contractual offers, orders or other service enquiries.

What rights do you have regarding your data?

Subject to the applicable conditions and exceptions, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection under Art. 15–21 GDPR. You also have the right to request correction or erasure of this data. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, in certain circumstances, to request restriction of the processing of your personal data. You further have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about this or any other data protection questions.

2. Hosting

This website is hosted through Lovable. Lovable Cloud is used to store and process training enquiries and newsletter subscriptions. When pages and images are accessed, technical processing includes the IP address, requested URL, browser information and access time, to the extent necessary to deliver the website securely. The legal basis is Art. 6(1)(f) GDPR (secure and reliable provision). Provider information: https://lovable.dev/privacy and https://lovable.dev/subprocessors.

The previous website listed ALL-INKL as its hosting provider. That information has been updated to reflect the hosting arrangements for this website. Specific contractual documents, data processing agreements, storage regions, subprocessors and any safeguards required for transfers to third countries must be confirmed by the controller and legally reviewed before the website enters full operation; no claim is made here that a review has already taken place or a contract has been concluded.

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.

We collect personal data when you use this website. Personal data means any information relating to an identified or identifiable natural person (the data subject). This privacy policy explains what we collect, how we process it and why.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

Rabiha Ansari – AI Coaching & Consulting

Große Gallusstraße 14,

60315 Frankfurt am Main,

Germany

Telephone: +491781008693

Email: message@rabiha-ansari.eu

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Retention period

Unless a more specific retention period is stated in this privacy policy, we retain your personal data until it is no longer needed for the purpose for which it was processed. If you submit a valid erasure request or withdraw consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law. In that case, we erase the data once those grounds no longer apply.

General information on the legal bases for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data under Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, a transfer may rely on the derogation in Art. 49(1)(a) GDPR only if its conditions are met, including informing you of the possible risks arising from the absence of an adequacy decision and appropriate safeguards. If you have consented to cookies being stored or information on your device being accessed, for example through device fingerprinting, processing is additionally based on § 25(1) TDDDG. Consent may be withdrawn at any time. If your data is required to perform a contract or take pre-contractual steps, we process it on the basis of Art. 6(1)(b) GDPR. Access to or storage of information on your terminal equipment without consent is permitted only where an exception under § 25(2) TDDDG applies; any subsequent processing of personal data also requires a legal basis under the GDPR. We also process your data on the basis of Art. 6(1)(c) GDPR where necessary to comply with a legal obligation. Processing may further be based on our legitimate interests under Art. 6(1)(f) GDPR. The following sections of this privacy policy explain the legal bases applicable in each case.

Information on data transfers to third countries without an adequate level of data protection and to US companies without DPF certification

Among other tools, we use tools from companies based in third countries without an adequate level of data protection, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in those countries. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in third countries without adequate data protection.

Transfers of personal data to third countries must meet the requirements of Art. 44 ff. GDPR. The European Commission’s adequacy decision under Art. 45 GDPR for the EU-US Data Privacy Framework (DPF) covers transfers to participating US organisations with an applicable, active certification; it does not cover all US recipients. Where no applicable adequacy decision exists, transfers require appropriate safeguards under Art. 46 GDPR, such as standard contractual clauses together with any necessary supplementary measures, or an applicable derogation under Art. 49 GDPR. Information about transfers to third countries, including data recipients, is provided in this privacy policy.

Recipients of personal data

In the course of our business activities, we work with various external parties. This sometimes requires personal data to be transferred to them. We disclose personal data to external parties only where necessary to perform a contract, where legally required, for example when providing data to tax authorities, where we have a legitimate interest in disclosure under Art. 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement under Art. 28 GDPR. Where processing is carried out jointly, an arrangement under Art. 26 GDPR is concluded.

Withdrawal of your consent to data processing

Where processing is based on consent under Art. 6(1)(a) GDPR, you may withdraw it in accordance with Art. 7(3) GDPR. You may withdraw your consent at any time. This does not affect the lawfulness of any processing carried out before you withdrew it.

Right to object to data collection in particular cases and to direct marketing (Art. 21 GDPR)

WHERE DATA IS PROCESSED ON THE BASIS OF Art. 6(1)(e) GDPR OR Art. 6(1)(f) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER Art. 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER Art. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Under Art. 77 GDPR, data subjects who consider that the processing of personal data relating to them infringes the GDPR have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

Right to data portability

Under Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit those data to another controller, where processing is based on consent or a contract and is carried out by automated means. If you request direct transfer to another controller, this will take place only where technically feasible.

Access, rectification and erasure

Subject to the applicable conditions and exceptions, you have the right of access to your personal data and the information specified in Art. 15 GDPR, including its source, recipients and purposes of processing, the right to rectification under Art. 16 GDPR and the right to erasure under Art. 17 GDPR. Information is generally provided free of charge, subject to Art. 12(5) GDPR. You may contact us at any time about this or any other questions concerning personal data.

Right to restriction of processing

Under Art. 18 GDPR, you have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose. This right applies in the following cases:

- If you contest the accuracy of personal data we hold about you, we generally need time to verify it. During verification, you have the right to request restriction of the processing of your personal data.

- If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.

- If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of erasure.

- If you have objected under Art. 21(1) GDPR, your interests must be weighed against ours. Until it is determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

Where processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a padlock symbol appears in the browser address bar.

SSL or TLS encryption protects the data you transmit to us against interception during transmission; it cannot guarantee absolute security.

Objection to promotional emails

We object to the use of contact details published to meet legal notice requirements for unsolicited advertising or promotional information. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, for example through spam emails.

Enquiries by email or telephone

If you contact us by email or telephone, we store and process your enquiry, including any associated personal data, such as your name and the details of your enquiry, to handle your request. We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual steps. In all other cases, processing is based on our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested; consent may be withdrawn at any time.

We retain data you provide in an enquiry until you request erasure, withdraw consent to storage or the purpose of storage no longer applies, for example once your enquiry has been dealt with. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Locally hosted fonts

The Manrope font is provided together with this website. Your browser does not need to connect to Google Fonts to load it.

4. Audio and video conferences

Data processing

We communicate with our customers through several channels, including online conferencing tools. The specific tools we use are listed below. When you communicate with us through an online video or audio conference, your personal data is collected and processed by us and the provider of the relevant conferencing tool.

Conferencing tools collect all data you provide or use to access them, such as your email address and/or telephone number. They also process the conference duration, the start and end times of participation, participant numbers and other contextual information relating to the communication (metadata).

The tool provider also processes all technical data required for online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers and connection type.

Content exchanged, uploaded or otherwise provided within the tool is also stored on the providers’ servers. This includes, in particular, cloud recordings, chat or instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we cannot fully control the processing operations of the tools used. The control we have depends largely on each provider’s policies. For further information on processing by conferencing tools, please refer to the privacy policies of the tools listed below.

Purpose and legal bases

Conferencing tools are used to communicate with prospective or existing contractual partners or to provide certain services to our customers (Art. 6(1)(b) GDPR). Their use also generally simplifies and speeds up communication with us or our business (a legitimate interest under Art. 6(1)(f) GDPR). Where consent has been requested, the tools concerned are used on that basis; consent may be withdrawn at any time with effect for the future.

Retention period

Data collected directly by us through video and conferencing tools is deleted from our systems once you request erasure, withdraw consent to storage or the purpose of storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence over how long conferencing tool operators retain your data for their own purposes. Please contact the operators directly for details.

Conferencing tools used

We use the following conferencing tools:

Zoom

Appointments are booked through an external link to Zoom Scheduler. The Zoom page opens only after you click the link; contact and appointment details entered there are processed to organise the call (Art. 6(1)(b) GDPR). We use Zoom for calls. The provider is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Details of data processing are provided in Zoom’s privacy policy: https://www.zoom.com/de/trust/privacy/privacy-statement/.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details are available here: https://www.zoom.com/de/trust/privacy/privacy-statement/.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/5728.

5. Embedded videos

YouTube

On the “About me” page, we embed a video of a podcast appearance. The video is loaded only when you actively start it by clicking the preview image. No connection to YouTube is established before this click.

Once the video starts, data is transferred to YouTube (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). This includes, in particular, your IP address, device and browser information and the page accessed; YouTube may set cookies. We use the embedded version through youtube-nocookie.com, which, according to the provider, transfers information only when the video starts.

The purpose of embedding the video is to present the podcast appearance. The legal basis for the actively loaded video is your consent under Art. 6(1)(a) GDPR and, where required, § 25(1) TDDDG. You give consent by clicking “Play video” after reading the accompanying explanation. Reloading the page stops the embedded video from remaining active; this does not affect data already transferred. Further information on YouTube’s data processing is available in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

6. AI training enquiry form

If you enquire about training through the “Book AI training” page, we process your details (name, company, email address, optional telephone number, training format, AI tool, participant numbers, preferred dates, delivery method and comments) solely to handle your enquiry and prepare a quotation. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). The data is stored in our website provider’s database and deleted once no longer required for handling the enquiry, provided no statutory retention obligations prevent deletion.

7. Newsletter

If you subscribe to our newsletter through our website, we process your first name, surname and email address, together with the time and wording of your consent, to email you information on AI topics and our consulting services. The legal basis is your consent under Art. 6(1)(a) GDPR. We use a double opt-in process: you receive the newsletter only after clicking the link in the confirmation email.

Registration details, consent wording, registration time and delivery status are also stored in Lovable Cloud. The request is forwarded to Brevo from the server through the Lovable connection service. We use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) for delivery. Your details are transferred to Brevo and stored on servers located within the European Union. Brevo acts as our processor within the meaning of Art. 28 GDPR. You may withdraw consent at any time through the unsubscribe link in each email or by contacting message@rabiha-ansari.eu; the lawfulness of processing carried out beforehand remains unaffected. After withdrawal, you will receive no further newsletters. Necessary suppression records to prevent further messages and evidence of consent may be retained separately from the active mailing list to the extent permitted by law. Automatic deletion of separately stored registration records upon unsubscribing through Brevo is not currently configured; please send erasure requests to message@rabiha-ansari.eu.

9. Protection against automated form abuse

To protect against spam, the server limits the number of requests for each form and normalised email address. A checksum derived from the email address is stored for the short-lived counters; it is pseudonymised, not anonymous. The counters are cleared during subsequent form requests after two hours have elapsed. No additional visitor IP addresses are stored for this purpose. The legal basis is Art. 6(1)(f) GDPR (protection against abuse and ensuring availability).

10. Features specific to this website

ROI calculator

Inputs in the ROI calculator are processed locally in your browser only and are not transmitted to me. Only when you select “Email results” does your own email application open with prefilled values; only what you choose to send is sent.

External links

Links to Zoom, LinkedIn, and other services open only when clicked. The relevant provider’s privacy notice then applies.

Cookies and analytics

Before the embedded YouTube video starts, this website does not use its own analytics or marketing cookies. After you consent, YouTube may use cookies and similar technologies; details are provided in the section on embedded videos.

AI-assisted content

Some images and text on this website were created or edited using artificial intelligence. Illustrative depictions are not evidence of actual client projects, events, or results. Rabiha Ansari is responsible for editorial content. Visiting this website, selecting an AI tool in the training form, and using the ROI calculator do not transmit your inputs to the named AI providers.