Privacy Policy

As of November 10, 2026

A privacy policy is legally required, and it's also personally important to me, especially since my work concerns your health. Here you can find out what data I process, why, and what rights you have.

  1. Responsible body
  2. Legal basis
  3. Hosting and server log files
  4. Cookies and consent
  5. Visitor statistics with Koko Analytics
  6. Contact via email and telephone
  7. Appointment booking with Calendly
  8. Health data, orientation questionnaire and coaching
  9. Online appointments via Zoom
  10. Shop and orders
  11. Payment providers
  12. Newsletter with Brevo
  13. YouTube
  14. fonts
  15. Website translation
  16. Links to social networks
  17. Transfer to third countries
  18. Storage period
  19. Your rights
  20. Right to object
  21. Changes

1. Responsible body

Interconnected Life LLC, represented by Emmy Verlaak
3833 Powerline Road, Suite 101, Fort Lauderdale, FL 33309, USA
Email: welcome@migraine-transformation.com Telephone: +49 176 32 866 520

In the following, I will refer to myself as "I". My services are also aimed at people in the European Union, therefore the General Data Protection Regulation (GDPR) applies to the processing of your data.

2. Legal basis

I will only process your data if one of these legal bases applies:

  • your consent (Art. 6 para. 1 lit. a GDPR), in the case of health data your explicit consent (Art. 9 para. 2 lit. a GDPR);
  • the performance of a contract or pre-contractual steps at your request (Art. 6 para. 1 lit. b GDPR);
  • legal obligations, such as retention obligations (Art. 6 para. 1 lit. c GDPR);
  • my legitimate interest, for example in a secure website (Art. 6 para. 1 lit. f GDPR).

For the storage of and access to information on your device (for example, cookies), Section 25 TDDDG also applies.

3. Hosting and server log files

My website is located at:

Webdesign-Müllers, owner Sonja Müller
Johannes-Stauß-Str. 22, 72474 Winterlingen, Germany

When you access the website, the server automatically stores technical data: your IP address, date and time, the page accessed, the previously visited page, browser, and operating system. This is necessary to ensure the website is delivered securely and reliably (Art. 6 para. 1 lit. f GDPR). The log files are deleted after 7 days. I have a data processing agreement with the hosting provider.

The website is encrypted using SSL/TLS. You can recognize this by the padlock symbol and "https://" in the address bar.

4. Cookies and consent

I use technically necessary cookies, for example for the shopping cart, without your consent. All other services that set cookies or transmit data to third parties will only be loaded if you agree.

I manage your consent using the Borlabs Cookie plugin, which runs on my own server. It stores your selection in a cookie so you aren't asked again on every visit. You can change or withdraw your selection at any time via the "Cookie settings" link at the bottom of each page.

5. Visitor statistics with Koko Analytics

To see which pages are read and how visitors find my website, I use the Koko Analytics plugin. It runs exclusively on my own server; no data is transmitted to third parties. Koko Analytics does not set cookies and does not store anything on your device. It records the page visited, the previously visited website, and the number of visits. To detect repeat visits, an anonymous checksum is generated from the IP address and browser identifier, which is deleted daily. Your IP address itself is not stored. I only see aggregated figures and cannot identify you from them. The legal basis for this is my legitimate interest in designing my website to meet user needs (Art. 6 para. 1 lit. f GDPR).

6. Contact via email and telephone

When you write to me or call me, I process your information to answer your inquiry (Art. 6 para. 1 lit. b or f GDPR). If you voluntarily provide me with health information, I will only use it for your inquiry. The legal basis for this is your explicit consent (Art. 9 para. 2 lit. a GDPR).

Please note: Regular emails are not end-to-end encrypted. It's best to discuss highly personal health details in person.

7. Booking an appointment with Calendly

For introductory meetings, coaching sessions, and the Migraine Circle, I use Calendly (Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA). My website links to my Calendly calendar. The Calendly page only opens when you click the link. When you book an appointment, Calendly processes your name, email address, chosen date, and your answers in the booking fields. The legal basis for this processing is the performance of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Calendly is certified under the EU-US Data Privacy Framework. Please do not enter detailed health information in the booking fields.

8. Health data, orientation questionnaire and coaching

In the orientation questionnaire, during coaching sessions, and at retreats, you might talk about your migraines, other ailments, medications, or your life story. This is health data and therefore specially protected data (Art. 9 GDPR).

  • I will only process your data with your explicit consent (Art. 9 para. 2 lit. a GDPR), which I will obtain before the questionnaire or before the start of the coaching.
  • Only I have access to it. I don't share it and I don't use it for advertising.
  • I will keep my notes and your questionnaire answers for the duration of our support, and delete them no later than five years after our last contact, or sooner if you request. This allows me to continue our work together if you return after a break.
  • You can withdraw your consent at any time with effect for the future. An email is sufficient.

9. Online appointments with Zoom

I conduct online coaching sessions, the Migraine Circle, and my free online meetings via Zoom (Zoom Communications, Inc., 55 Almaden Boulevard, San Jose, CA 95113, USA). Your name, image, audio, and technical connection data will be processed. The legal basis for this is the performance of the contract or your participation (Art. 6 para. 1 lit. b GDPR). I highly recommend turning on your camera, as my work thrives on interaction. It's not mandatory, however. In group sessions, you can choose to display only your first name. Zoom is certified under the EU-US Data Privacy Framework.

I only make recordings if I have informed you beforehand and you have given your consent. I will also tell you who can see them and when they will be deleted.

10. Shop and orders

I use WooCommerce, which runs on my own server, to process orders. I process your name, address, email address, the service booked, and payment status to fulfill your order (Art. 6 para. 1 lit. b GDPR). I retain invoice and order data for as long as required by law, generally up to ten years (Art. 6 para. 1 lit. c GDPR).

11. Payment providers

Depending on the chosen payment method, I will forward the data necessary for the payment:

  • PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg
  • Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland

The legal basis is the performance of the contract (Art. 6 para. 1 lit. b GDPR). The payment providers process your data partly under their own responsibility, for example for fraud prevention. You can find more details in their privacy policies.

12th newsletter with Brevo

When you subscribe to my newsletter, I process your email address and, if provided, your first name. The legal basis for this is your consent (Art. 6 para. 1 lit. a GDPR). After registering, you will receive an email in which you confirm your subscription (double opt-in). I store the time of registration and confirmation as proof.

I use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) for sending newsletters. The data is stored within the EU. Brevo tracks whether and when you open a newsletter and which links you click. This allows me to see which topics interest you. By subscribing, you also consent to this.

You can unsubscribe from the newsletter at any time using the unsubscribe link in every email. Afterwards, I will delete your data, except for a block notice so that you are not contacted again.

When you register for a free online meeting, I use your first name, email address, the chosen date, and, if applicable, the link you used to register. This information is then used to send you the Zoom link and all emails related to the meeting. By registering, you'll also receive my newsletter, which I'll mention in the form. Everything else mentioned above applies as well.

13. YouTube

My website contains a link to my YouTube channel (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data is only transferred when you click the link.

On some pages, I embed videos directly, for example, participant testimonials. This is done using enhanced privacy mode (youtube-nocookie.com). Instead of the video, you'll initially see a placeholder. The video will only load if you click "Load video" there or consent in the cookie banner under "External media" (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). Afterwards, YouTube will learn, among other things, your IP address and which page you are visiting, and YouTube may store information on your device. Data may be transferred to Google in the USA. Google is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time via "Cookie settings" at the bottom of each page.

14. Fonts

The fonts used on this website are stored on my own server. No connection is made to Google or other font providers when the page loads.

15. Translation of the website

I use the TranslatePress plugin, which runs on my own server, to translate my website. Page texts are automatically translated once and stored on my server. No data about you is transmitted to a translation service.

16. Links to social networks

On my website you will find links to my social media profiles. These are simple links. Data is only transferred when you click on a link and open the network's page.

17. Transfer to third countries

Because my company is based in the USA and some service providers are located there, data may be transferred to the USA. This only happens on the basis of the EU-US Data Privacy Framework or the EU Commission's Standard Contractual Clauses.

18. Storage duration

I only store your data for as long as it is necessary for the respective purpose or as required by law. After that, I delete it.

19. Your rights

You have the right to:

  • Information about your stored data (Art. 15 GDPR),
  • Rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Withdrawal of consent with effect for the future (Art. 7 para. 3 GDPR),
  • Complaint to a data protection supervisory authority, in particular in the country where you live or work (Art. 77 GDPR).

Simply send an email to welcome@migraine-transformation.com.

20. Right to object

Your right to object (Art. 21 GDPR)

If I process your data based on my legitimate interest (Art. 6 para. 1 lit. f GDPR), you can object to this processing at any time for reasons arising from your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds which override your interests, or the processing serves the purpose of establishing, exercising or defending legal claims.

You can object to the use of your data for direct marketing at any time without giving reasons.

21. Changes

I will update this privacy policy if my offers, the services used, or the legal situation changes. The version published here at any given time applies.

You don't have to give me any data. However, without the information necessary for a contract, I can't process a booking, for example. No automated decisions or profiling take place.

en_USEnglish