Privacy policy

The controller for the processing described here is Carolina von Braun, who runs CVB Coaching. Send questions about how your personal data is processed, and requests to exercise your rights, to carolina@cvbcoaching.se.

Business

CVB Coaching

Run by

Carolina von Braun

Address

Skårsgatan 53, 412 69 Göteborg

Email

carolina@cvbcoaching.se

Website

cvbcoaching.se

• We only collect what is needed to book a first conversation and to carry out a coaching engagement.
• The website uses no cookies for statistics or marketing.
• In CVB Base you see your own coaching environment. Access to data is governed by your account and your choices in the service.
• We do not sell personal data or disclose it for others' marketing.

When you book an introductory conversation on the website, we process:

• your name, email address and phone number,
• your company or organisation if you provide it,
• the type of support you are interested in and what you write about your situation — in the extended form also your role, the situation you are in, what needs to become clearer and when you want to move forward,
• the time window you choose and the language you used on the website.

The purpose is to handle your request, book and hold the introductory conversation, assess whether to start a coaching engagement and communicate with you about the request. You receive a confirmation and later a reply by email, and Carolina receives a notification about the request.

Legal basis: the processing is necessary to take steps at your request before any contract is entered into (Article 6(1)(b) of the General Data Protection Regulation, GDPR). If you contact us on behalf of a company or organisation, we process your contact details on the basis of our legitimate interest in handling the request (Article 6(1)(f)).

If you email us directly, we process what you send in the same way. Please do not write sensitive personal data, such as health information, in the form or in an email.

If we start an engagement, we process, depending on the assignment:

• identity and contact details, role and, where relevant, organisation and commissioning client,
• contracts, signatures (name, email, account and time) and, for consumers, information about the right of withdrawal,
• the coaching agreement and development goals,
• sessions — date, time, place, focus and desired outcome,
• what you write yourself in CVB Base: preparations, reflections, commitments and notes,
• session summaries that Carolina has approved and shared with you,
• material and documents that you or Carolina upload or share,
• Carolina's own working notes about the conversations.

The purpose is to deliver the coaching, plan and follow up conversations, document what you have agreed and administer contracts and payment.

Legal basis: the contract with you (Article 6(1)(b)). When the coaching is ordered and paid for by your employer or another commissioning client, and the contract is with them, we process your data on the basis of our legitimate interest in delivering the coaching that has been ordered (Article 6(1)(f)). Data that must be kept under the Swedish Bookkeeping Act is processed to comply with a legal obligation (Article 6(1)(c)), and we may need to keep contracts and withdrawal records to establish, exercise or defend legal claims (Article 6(1)(f)).

CVB Base has no open registration. Accounts are created by CVB Coaching and you log in with your personal account. As a client you see your own coaching environment. Carolina has access to what she needs to deliver coaching to her clients.

Information and material are handled according to the sharing and access choices available in the service and as follows from the contract and the CVB Base terms of use. Commissioning clients have no account in CVB Base. What may be reported to a commissioning client is limited to what has been agreed in advance — not the content of the conversations.

Coaching is not healthcare or treatment, and CVB Base has no function for collecting sensitive personal data such as health information. Free text — reflections, preparations, notes and documents — may still contain things you choose to share.

Such data is processed on the basis of your explicit consent (Article 9(2)(a)). You give this consent separately under Profile in CVB Base. It is voluntary, separate from the contract and the terms, and the coaching can be carried out without it — in that case we ask you not to share such data. The consent covers what you write yourself in CVB Base or say in the conversations and Carolina documents. The times you give and withdraw consent are recorded and the history is kept.

You can withdraw the consent at any time under Profile. From the withdrawal onwards, we do not process sensitive personal data on the basis of the consent: content covered by the consent is restricted and no longer used in the coaching. You can still see your own content and request its erasure under Profile. Processing that took place before the withdrawal is not affected. Contracts, bookings and the consent history are not based on the consent and are kept as described in the section on retention.

The service sends email to you and to Carolina, for example confirmation of and reply to your introductory conversation, a contract confirmation with the contract and terms when a consumer contract has been concluded, and an acknowledgement of receipt if you withdraw from a consumer contract.

We use processors that process personal data on our behalf, for example for:

• storage of data, login and file storage in connection with CVB Base and bookings — generally within the EU/EEA,
• hosting of the website and technical server functions,
• sending email from the service.

Email sent to Carolina is also handled by the email service she uses for her mailbox.

Some providers are established outside the EU/EEA, including in the United States. Personal data may therefore be processed in, or be accessible from, countries outside the EU/EEA, even when storage is within the EU. Such a transfer may only take place on the basis of the European Commission's adequacy decision for companies certified under the EU–US Data Privacy Framework, or with the European Commission's standard contractual clauses. Contact us if you would like to know more about the safeguards.

• Requests for a first conversation are kept for as long as they are needed to handle the request and any further contact about an engagement.
• Content in a coaching engagement is kept during the engagement. When it ends, the history remains so that the engagement can be resumed, unless you or we close the account or request erasure as described below.
• Material you have uploaded or written yourself can be removed in the service where the function is available.
• The consent history (when consent was given and withdrawn) and erasure requests are kept for as long as the client record exists, so that it can be shown what applied.
• Sent and signed contracts, signatures and records of exercised withdrawal rights are kept for as long as needed to establish, exercise or defend legal claims, and to the extent they are accounting records for seven years under the Swedish Bookkeeping Act.
• The login account is removed separately. Contact us if you want your account deleted.

Under the GDPR you have the right to:

• access the personal data we process about you,
• have inaccurate data rectified — you can also change your contact details yourself under Profile in CVB Base,
• have data erased, unless it must be kept by law or is needed for legal claims,
• request restriction of processing,
• object to processing based on legitimate interest,
• receive the data you have provided in a structured, machine-readable format (data portability), where the processing is based on a contract.

The processing of sensitive personal data is based on your explicit consent, which you can withdraw at any time under Profile in CVB Base. Withdrawal does not affect processing that took place before. Other processing described here is not based on consent.

Contact carolina@cvbcoaching.se to exercise your rights.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.

The website only uses strictly necessary cookies for logging in to CVB Base. Read more in the cookie policy.

We update this policy when the processing changes. The date at the top shows when it was last changed. See also the general terms and the CVB Base terms of use. If the Swedish and English versions differ, the Swedish version applies.