01 — Our approach
Her Strategy Dossier is built around informed decisions, thoughtful strategy, and personal agency. We believe that the same principles should apply to your personal information.
This Privacy Policy explains what information we collect when you visit our website, purchase our educational products, subscribe to our communications, or contact us. It also explains how we use, store, and protect that information, and the rights you have over your personal data.
02 — Who is responsible for your data?
The data controller responsible for processing your personal information is:
Her Strategy Dossier
- Legal entity / owner: Xuezhou de Pol
- Business address: Monumentenstr. 31, 10829 Berlin, Germany
- Email: avaknowlogie[at]gmail.com
- Website: https://her-strategy-dossier.com/
The controller determines why and how personal data is processed, in accordance with applicable data protection law, including the EU General Data Protection Regulation (GDPR), where applicable.
03 — What information we collect
Depending on how you interact with our website, we may collect the following categories of information:
Information you provide
- Contact details, such as your name and email address.
- Account information, if you create an account.
- Billing and transaction information associated with your purchases.
- Messages, enquiries, feedback, or other information you voluntarily submit.
- Responses or content you choose to provide through learning materials or interactive features.
Information collected automatically
- Device, browser, and technical information.
- IP address and basic server log information.
- Website usage data, where analytics or similar technologies are enabled.
- Cookie preferences and consent records.
We aim to collect only the information reasonably necessary for the relevant purpose.
04 — How we use your information
We may process your personal information to:
- Provide access to courses, digital products, and learning resources.
- Process orders, payments, refunds, and customer support requests.
- Send essential service-related communications.
- Send newsletters or marketing communications where legally permitted.
- Maintain website functionality, security, and performance.
- Understand how visitors use our website and improve our content, where permitted.
- Meet applicable legal, tax, and accounting obligations.
We do not treat every interaction as permission to send marketing communications. Where consent is required, we will request it separately.
05 — Legal basis for processing
Under the GDPR, our legal basis depends on the purpose of processing. These bases may include:
- Contract: to fulfil purchases, provide products, and manage customer accounts.
- Legal obligation: to comply with applicable accounting, tax, or other legal requirements.
- Legitimate interests: to secure, maintain, and improve our services, where our interests do not override your rights.
- Consent: for activities such as certain marketing communications and non-essential cookies, where consent is required.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
06 — Cookies and similar technologies
Our website may use cookies and similar technologies to support essential functionality, remember preferences, measure website performance, or support marketing activities.
Essential technologies may be necessary to provide the service you request. Non-essential technologies will be used only in accordance with applicable consent requirements.
You can manage your preferences through our cookie settings, where available. You may also adjust cookie settings in your browser, although disabling certain cookies may affect website functionality.
07 — Payments and third-party services
We may rely on carefully selected third-party service providers to operate our website and deliver our products. Depending on the services actually used, these may include:
- Website hosting and content management.
- Payment processing and transaction management.
- Email delivery and newsletter management.
- Course delivery or customer account services.
- Website analytics and security tools.
Payment details may be processed directly by the relevant payment provider. We do not claim to store full payment card details unless our actual payment infrastructure requires and supports this.
These providers process personal data according to their respective roles, contractual arrangements, and applicable privacy requirements.
08 — International data transfers
Some service providers may process personal data outside the European Economic Area (EEA). Where such transfers take place, we will rely on an applicable legal transfer mechanism and implement any additional safeguards required by law.
09 — How long we retain information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.
For example, purchase and accounting records may need to be retained to comply with statutory obligations. Marketing information is retained according to the applicable purpose, consent status, and legal requirements.
When information is no longer needed, we will delete it or anonymise it where appropriate.
10 — How we protect your information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, or disclosure.
No online system can guarantee absolute security. We review our practices as reasonably necessary and work with service providers appropriate to the nature of our activities.
11 — Your privacy rights
Subject to the conditions and exceptions under applicable law, you may have the right to:
- Request access to your personal data.
- Correct inaccurate or incomplete information.
- Request deletion of your personal data.
- Restrict certain processing activities.
- Receive certain data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, contact us using the details in Section 02. We may need to verify your identity before responding.
If you are located in Germany, you can also contact the competent data protection supervisory authority. The relevant authority depends on the circumstances and applicable jurisdiction.
12 — Children’s privacy
Our educational products are intended for an audience of adults and young adults, unless a particular product expressly states otherwise. We do not knowingly collect children’s personal data in circumstances where doing so would violate applicable law.
13 — Changes to this policy
We may update this Privacy Policy when our practices, services, or legal obligations change. The revised version will be published on this page with an updated revision date.
14 — Contact
Questions about this policy or the handling of your personal information are welcome.
Privacy enquiries
avaknowlogie[at]gmail.com
