Privacy policy (Datenschutzerklärung)
Last updated: 8 October 2026
1. Controller
The controller responsible for data processing on this website under the EU General Data Protection Regulation (GDPR) is:
Sharon von Simson, The Midlife Mind Flipc/o Autorenglück #88262
Albert-Einstein-Straße 47
02977 Hoyerswerda, Germany
Email: hello@midlifemindflip.com
2. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel automatically processes technical data your browser sends: IP address, date and time of the request, the page requested, referrer URL, browser type and operating system. This is necessary to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in operating a secure website). Vercel is certified under the EU-US Data Privacy Framework, and we have a data processing agreement with Vercel. Log data is deleted by Vercel after a short retention period.
3. Free guide and waitlist
If you request the free guide, we process your first name, email address and the time you gave consent. We use this information to send you the guide and a short series of emails about the Midlife Mind Flip program. If you join the waitlist for the next cohort, we use the same information to tell you when enrolment opens. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in any email or by emailing hello@midlifemindflip.com. Withdrawal does not affect the lawfulness of processing before it.
Your details are stored in a database run by Supabase, Inc., in its East US (North Virginia) data centre, and emails are sent using Postmark, a service of ActiveCampaign, LLC, 1 N Dearborn St, Suite 500, Chicago, IL 60602, USA. Both act as our processors. Data transfers to the USA are based on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. We keep your data until you withdraw consent or ask us to delete it.
4. Payments
When you enrol, you pay on a checkout page provided by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe processes your name, email address, billing address and payment details to take the payment, prevent fraud and issue your receipt and invoice. We receive your name, email address, billing address and the payment status, but not your full card details. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations to keep accounting records (Art. 6(1)(c) GDPR). We keep this information for as long as tax and commercial law require, normally up to ten years. Stripe's privacy policy is at stripe.com/privacy.
4. Enrolment and payment
When you enrol using the form on this website, we receive your name, email address, chosen payment option and the time you accepted the terms. These details are sent to us by email through Postmark (see section 3) and are not stored in the website’s database; they are kept in our mailbox (see section 5). We use them to confirm your place, send you the payment details and your invoice, and run the programme. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations to keep accounting records (Art. 6(1)(c) GDPR). We keep this information for as long as tax and commercial law require, normally up to ten years.
5. Emailing us
When you write to hello@midlifemindflip.com, and when this website sends us a notification about a sign-up or enrolment, the email is stored by our email host, GreenGeeks, in the USA, and forwarded to our Gmail account, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use your message to reply to you. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or, where your message concerns the programme, the performance of the contract (Art. 6(1)(b) GDPR). Data transfers to the USA are based on the EU Standard Contractual Clauses. We delete emails when they are no longer needed, unless tax and commercial law require us to keep them.
6. Taking part in the programme
If you enrol, we process the information you share with us during the programme. Group sessions and one-to-one coaching take place by video call using Zoom, provided by Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Data transfers to the USA are based on the EU-US Data Privacy Framework. Group sessions are recorded, including the image and voice of everyone taking part, so that members of your cohort can watch the replays; recordings are shared only with your cohort and are kept for at least 12 months after the final session. The community runs on Substack, provided by Substack, Inc., San Francisco, USA, and on WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Your name, your posts and, on WhatsApp, your phone number are visible to the other members of the community. We keep notes from your one-to-one coaching for one year. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).
Sharon maintains her coaching credentials with the International Coaching Federation (ICF). For that purpose your name, contact details and the start and end dates of your coaching may be shared with the ICF to verify the coaching relationship. No coaching notes are shared. The legal basis is our legitimate interest in maintaining professional credentials (Art. 6(1)(f) GDPR).
7. Fonts
The fonts on this website are hosted on our own server. No connection to third-party font services is made.
8. Cookies
This website does not use cookies or tracking tools. Stripe’s checkout page sets its own cookies, which are needed to process the payment securely and prevent fraud.
9. External links
This website links to Substack, LinkedIn and Calendly. When you follow these links, the privacy policies of those services apply.
10. Your rights
Under the GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). To exercise any of these rights, email hello@midlifemindflip.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.