Privacy Policy

The German version is legally binding. This English version is for your information only.

1. Controller

The controller responsible for data processing on this website and related services is:

Rebecca Hall, trading as "Bex Dawson"
Holtkampstr. 3–5
46145 Oberhausen
Germany
Phone: +49 177 3632764
Email: info@bexdawson.com

No data protection officer has been appointed, as this is not legally required.

2. General information

I process personal data only as far as this is necessary to provide the website, answer your questions or perform my services, where there is a legal obligation, or where you have given your consent. Your data is not sold. It is passed on only to the service providers named in this privacy policy.

3. Wix

This website is built with and hosted by Wix. The service provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.

When you use this website, Wix automatically saves access data in server log files. This includes the IP address, the date and time of access, the pages visited, the browser type and the operating system. This data is required to provide the website. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is the secure and error-free operation of the website. Wix processes the data on my behalf and according to my instructions (data processing agreement under Art. 28 GDPR).

The European Commission has made an adequacy decision for Israel. Wix also uses servers in the USA and other third countries. These transfers are carried out on the basis of the EU Standard Contractual Clauses under Art. 46 (2) (c) GDPR or, if the recipient is certified, the EU-US Data Privacy Framework.

4. Cookies and consent banner

This website uses cookies. I set technically necessary cookies, without which the website cannot function, on the basis of § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR. I set other cookies, such as those used for statistical analysis, only with your consent, on the basis of § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. On your first visit, a cookie banner appears through which you can freely give or refuse your consent. You can change or withdraw your consent at any time via the "Cookie settings" button at the bottom of the page.

5. Contact

When you contact me by phone, email or the contact form, I process the information you give me, such as your name, email address, phone number and message, to be able to respond to your enquiry. Where your enquiry relates to a contract or to steps before entering into one, the legal basis is Art. 6 (1) (b) GDPR. In all other cases, the legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is answering your enquiry.

My business email is hosted by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, the Netherlands, in data centres in the EU. Access from third countries, for example for support by group companies in India or the USA, cannot be ruled out and takes place on the basis of the EU Standard Contractual Clauses. I have a data processing agreement with Zoho.

6. Appointment booking

You can request appointments, including the free 30-Minute Run-Through, through the online booking system on my website. I use Wix Bookings for this (provider: Wix, see section 3). I collect your name, email address and requested appointment, and your phone number and message if you provide them. I check and confirm every request myself. A request is not binding until I have confirmed it. I only use your email address to organise the appointment and not for advertising, unless you have separately signed up for my newsletter. The legal basis is Art. 6 (1) (b) GDPR.

7. Information about health and wellbeing

Before or during our work together, I may ask about any health conditions or aspects of your wellbeing that may be relevant to working with your voice, breathing and body. This is health data and is specially protected. I process it only with your explicit consent under Art. 9 (2) (a) GDPR and solely to establish whether my services are suitable for you and to adapt the exercises safely to you. Where appropriate, I may also suggest that you seek professional support elsewhere. Providing this information is voluntary. I do not share it with third parties. It is stored only with the technical service providers named in this policy, and I delete it once our work together has ended. You can withdraw your consent at any time with effect for the future, without giving a reason, for example by emailing info@bexdawson.com.

8. Online sessions and recordings

I use Zoho Meeting (provider: Zoho Corporation B.V., see section 5) for online sessions. When you take part in an online session, your name and email address, technical data about your connection and use of the session, and your audio and video data are processed. The legal basis is Art. 6 (1) (b) GDPR.

I only make recordings of online or in-person sessions, for example for video feedback, if you have given your explicit consent beforehand. You can withdraw your consent at any time. I delete a recording as soon as it is no longer needed for the purpose for which it was made, or when you withdraw your consent. The legal basis is Art. 6 (1) (a) GDPR.

9. Contract handling, invoicing and bookkeeping

When you book a service with me, I process your data for the contract, invoicing and bookkeeping. This includes your first and last name, your address and email address, the services you have booked and your payment information. For businesses, it also includes the company name and, if applicable, the VAT identification number. The legal basis is Art. 6 (1) (b) GDPR. The legal basis for retention is Art. 6 (1) (c) GDPR in conjunction with statutory retention obligations.

For invoicing and bookkeeping I use Lexware Office from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany. A data processing agreement is in place with Lexware. If I engage a tax adviser, they have access to the necessary records. Tax advisers are bound by a statutory duty of confidentiality.

I keep invoices and accounting records for as long as the law requires, usually between 6 and 10 years.

10. Payments

You can pay by bank transfer or PayPal. For bank transfers, your bank and mine process the payment data. If you pay by PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal is itself responsible for this processing, and PayPal's privacy policy applies. The legal basis is Art. 6 (1) (b) GDPR.

11. Newsletter

Every two to four weeks, I send out a newsletter with a short overview of my most recent posts and offers. If you are interested, you can sign up to receive it. To send the newsletter, I need your email address. Any other details, such as your name, are optional.

I use a double opt-in process. This means that after signing up, you receive an email with a confirmation link. The newsletter is only sent once you have confirmed. I record the time you signed up and confirmed as proof.

I send the newsletter via Wix (see section 3). To improve my content, I analyse statistically whether a newsletter is opened and which links are clicked.

The legal basis is your consent under Art. 6 (1) (a) GDPR. You can unsubscribe at any time using the link at the bottom of each newsletter, or by contacting me. This does not affect the lawfulness of processing carried out before you unsubscribed. After you unsubscribe, I remove your email address from the mailing list.

12. My social media profiles

On this website I link to my profiles on Instagram, Facebook, TikTok, LinkedIn and Medium. These are simple links. Simply viewing this website does not send any data to these social networks. Only when you click a link do the terms and privacy policies of the network concerned apply.

When you view or interact with my profiles there, the operators collect your data and may also process it in the USA for their own purposes. For my Facebook page, I am jointly responsible with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Art. 26 GDPR), insofar as Meta compiles statistics on how the page is used ("Page Insights"). Meta has undertaken to assume the main obligations for this. You can find the agreement here: https://www.facebook.com/legal/terms/page_controller_addendum. You can also exercise your rights directly with Meta.

13. Storage period

Unless otherwise stated in this policy, I retain your data only for as long as is necessary to fulfil the purposes for which it was collected. Statutory retention periods remain unaffected.

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You have the right to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR). Please contact info@bexdawson.com to do so.

15. Right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to my processing of your personal data based on my legitimate interests (Art. 6 (1) (f) GDPR). Following such an objection, I will no longer process your personal data unless I can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You also have the right to object at any time to the processing of your personal data for the purposes of direct marketing. If you do so, I will no longer process your personal data for such purposes.

16. Right to lodge a complaint

You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.

17. Provision of data and automated decision-making

You are under no legal or contractual obligation to provide me with data. If you do not provide the data necessary for booking or invoicing, I will not be able to enter into or perform a contract with you. I do not use automated decision-making, including profiling.

Last updated: October 2026