Who are we?

The controller within the meaning of data protection law is:Éloi Niederwieser
Bernhard-Schineller-Str. 4
97508 Grettstadt
Germany
Email: [email protected]

General

Cookies

We use cookies on our website. Cookies are small (text) files that are created and stored on your device (e.g. smartphone, notebook, tablet, PC). Most cookies are so-called “session cookies”, which are deleted after the end of your visit. In individual cases, however, these cookies provide information in order to automatically recognize the user. By means of a so-called cookie ID, websites and servers can be assigned to the specific internet browser in which the cookie was stored.Cookies are used to improve the user-friendliness of our website and to ensure a technically error-free and optimized operation of our website. If you do not agree with the use of cookies, you can restrict or completely disable their use in your browser settings. In the event of restriction or deactivation, the usability of this website may be limited.The legal basis for data processing is Art. 6(1) sentence 1 lit. f GDPR, insofar as cookies are technically necessary for the provision of our services. Our legitimate interest arises from the purposes stated above. If we use cookies that are not technically necessary, this will only be done on the basis of your explicit consent.Some cookies are deleted when you close your browser (transient cookies). Other cookies (persistent cookies) remain stored on your device and enable us to recognize your browser. These cookies are automatically deleted after a predefined period.

Which access data do we collect?

When you visit our website, we collect the following data for technical reasons for each access:- name of the accessed website,
- IP address of the requesting device,
- date and time of access,
- amount of data transferred,
- browser type and version,
- operating system used by the user,
- website from which the user accessed this website (referrer URL),
- IP address of the requesting device,
- requesting provider,
- please add further data if necessary.We collect this data exclusively for the purpose of enabling you to visit our website. We generally store this data for 90 days unless specific retention obligations prevent deletion or processing is required for other reasons, such as law enforcement or defense against claims for damages. If we must continue processing your data due to special retention periods or for another reason, the data will be deleted as soon as the reason for processing no longer applies.

Data Security (SSL/TLS)

During your visit to this website, the SSL (Secure Socket Layer) procedure is used in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If the browser used by the user does not support 256-bit encryption, 128-bit v3 technology is used instead.You can recognize encrypted transmission by the key or lock symbol in your browser’s status bar. In addition to SSL encryption, technical and organizational security measures are used to protect data against accidental or intentional manipulation, loss, destruction or unauthorized access by third parties. These security measures are continuously improved in line with technological developments.

Contact

You may contact us via various communication channels such as email, phone, post or via a contact form. In the event of contact, we store your data for the purpose of processing your inquiry. Data is not passed on to third parties.The processing of personal data is carried out in accordance with Art. 6(1) sentence 1 lit. f GDPR. The legitimate interest lies in processing your inquiry. If your contact aims at concluding a contract, the legal basis for data processing is Art. 6(1) sentence 1 lit. b GDPR.We delete this data once your inquiry has been fully processed, provided that no statutory retention obligations apply and the processing cannot be based on another legal basis.

Tally

We use the service Tally, provided by Tally BV, located at August Van Lokerenstraat 71, 9050 Ghent, Belgium, to provide online contact forms.Tally stores the data entered and forwards it to us. Tally does not use this data for its own purposes. The legal basis for data processing is Art. 6(1) sentence 1 lit. f GDPR. We have a legitimate interest in the individual design of our contact forms.When using the forms, the personal data entered (e.g. name, email address and information provided in the form) is transmitted to us and processed on Tally’s servers. Processing is carried out for the purpose of handling inquiries and preparing and providing our coaching services.Tally processes the data exclusively on our behalf and not for its own purposes. A data processing agreement pursuant to Art. 28 GDPR exists. The legal basis for processing is Art. 6(1) lit. b GDPR (pre-contractual measures) and Art. 6(1) lit. f GDPR (legitimate interest in efficient communication).

• Tally Forms Privacy Policy

Live Chat and Video Conferencing

Zoom

We use Zoom to conduct video conferences, online meetings, and coaching sessions (hereinafter referred to as video conferences). Zoom is a service provided by Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter: Zoom).To participate in a video conference, you may use an app on a computer, tablet, or phone, or a common web browser. Participation is generally possible with audio and video. Audio and video can be activated or deactivated separately at any time. You may also have the option to share your screen so that other participants can view its content. Messages can be exchanged with all participants or individual participants via a chat function.Which data is processed?
Data you transmit yourself during the video conference: If you activate your camera or microphone during the video conference, other participants can perceive the data transmitted in this way (your video image and voice). The same applies to data you enter in the chat, information you provide in any interactive features, or when you share your screen.
User information: Generally, to display your participant status or identity, your name (first name, last name), email address, and profile picture (optional, depending on your Zoom account settings or entry inputs) are processed.
Conference metadata: Meeting topic/title, description (optional), participant IP addresses, device/hardware information, and connection logs (e.g., date, time, and duration of the session).
To participate in a video conference, you must at least provide a name. You may choose this name freely if you join without a registered Zoom account. If we record the video conference with your prior consent, we process the recording (audio, video, and chat protocols) exclusively for the purposes specified when consent was given.
Zoom processes and stores this data in accordance with its own privacy regulations. Since data is transferred to Zoom LLC servers in the USA, Zoom relies on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.Further information on how Zoom processes personal data can be found in Zoom’s privacy policy at:

• Zoom Privacy Policy

WhatsApp Business

Communication via WhatsApp BusinessFor 1:1 communication within the context of our coaching collaboration (such as text and voice messages) as well as for initial inquiries prior to contract conclusion, we use WhatsApp Business, an end-to-end encrypted messaging service, provided that you choose or initiate this communication channel.Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.End-to-End Encryption & Data Processing:
Content exchanged via WhatsApp Business (such as text and voice messages) is end-to-end encrypted, meaning message content is accessible only to the participating parties. However, Meta may process technical metadata (such as phone numbers, IP addresses, device information, and timestamps) in connection with service delivery.Purpose & Voluntariness:
The use of WhatsApp Business is voluntary. Personal data is processed for the purpose of handling initial inquiries, initiating or fulfilling our coaching relationship, and providing continuous support between live sessions (e.g., integrating coaching insights and addressing reflection questions).Legal Basis:
Art. 6(1)(b) GDPR: Insofar as the communication serves the initiation of a coaching inquiry or the performance of an active coaching contract.
Art. 6(1)(f) GDPR: Based on our legitimate interest in providing a low-threshold, efficient, and direct channel for client inquiries and ongoing coaching support.Contact Synchronization & Alternatives:
We have configured our device settings to prevent WhatsApp Business from automatically accessing or syncing our address book. If you prefer not to communicate via WhatsApp, alternative channels such as email or signal are available at any time upon request.Further information on how Meta processes personal data can be found in WhatsApp’s Privacy Policy:

• WhatsApp Business Privacy Policy

Data Transfer & Storage

For the secure storage and transmission of session recordings, audio files, and coaching materials, we use the services of Proton (Proton Drive / Proton Mail), provided by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland.
Scope and Purpose of Processing: Personal data (such as audio files, shared documents, and technical access data) is processed to securely store and deliver coaching contents to you. Proton utilizes strong end-to-end and zero-access encryption, ensuring that file contents remain protected from unauthorized access.
Retention & Deletion Policy: Session recordings and audio files shared via Proton Drive are stored temporarily to allow you to review and download your materials. All session recordings are permanently deleted from Proton Drive within 4 to 8 weeks after transmission.
Legal Basis: Art. 6(1)(b) GDPR (Performance of a contract / delivering coaching materials) and Art. 6(1)(f) GDPR (Legitimate interest in providing a secure and privacy-focused data exchange infrastructure).
Third-Country Transfer (Switzerland): Proton AG is based in Switzerland. The European Commission has officially issued an adequacy decision for Switzerland, guaranteeing an adequate level of data protection equivalent to GDPR standards.
Further details can be found in Proton’s Privacy Policy:

• Proton Privacy Policy

Appointment Scheduling

Zeeg

We use the Zeeg tool for simple, fast and convenient scheduling of coaching sessions and discovery calls. Zeeg is a service of Zeeg GmbH, Waldemarstraße 38, 10999 Berlin, Germany. We use this tool to enable efficient and user-friendly appointment coordination in the context of our coaching services.When booking an appointment via Zeeg, personal data such as name and email address are requested. This data is processed solely for the purpose of organizing, preparing and conducting coaching sessions or discovery calls.The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR, based on our legitimate interest in providing smooth and effective appointment scheduling and communication. If the appointment booking serves the initiation or performance of a coaching contract, the legal basis is additionally Art. 6(1) sentence 1 lit. b GDPR.When using Zeeg, the data you provide, including the information entered during the booking process, is transmitted to Zeeg. Further information on how Zeeg processes personal data can be found in Zeeg’s privacy policy at:

• Zeeg Privacy Policy

Reviews

Reviews help us to continuously improve our products and services. We would therefore appreciate it if you would provide us with feedback. If you have given us your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, we will use your email address to send you a review reminder by email.This consent can be withdrawn at any time by sending a message to the contact option described below or directly to Trusted Shops.

Newsletter

General Information on Newsletter DistributionIf you subscribe to our newsletter, we process your personal data to send you regular updates, articles, and coaching insights. For this purpose, we store and process your email address, as well as any additional information you voluntarily provide (such as your name).When you register, technical log data (including your IP address, timestamp, and registration details) is stored to document your consent and protect against unauthorized use of your email address by third parties.Your data is stored for as long as your subscription is active. If you unsubscribe, your data will be removed from our active distribution list and stored only as necessary to document past compliance or prevent future unwanted mailings, unless further processing is required for other legitimate reasons (e.g., contract execution).

Substack

For the distribution and management of our newsletter, articles, and publications, we use the service Substack, provided by Substack Inc., 1111 Broadway, Floor 3, Oakland, CA 94607, United States.
Scope and Purpose of Processing: When you subscribe or interact with our Substack publication, the data you enter is stored on Substack’s servers. Substack processes this data to deliver emails, provide publishing and community interaction features (such as comments and likes), and run performance analytics (e.g., open rates).
Legal Basis:
Art. 6(1)(a) GDPR (Consent): Newsletter subscription and related data processing take place on the basis of your explicit consent.
Art. 6(1)(f) GDPR (Legitimate Interest): Based on our legitimate interest in delivering high-quality content, evaluating publication reach, and offering an interactive reader community.
Third-Country Transfer (USA): Substack Inc. is located in the United States. Data transfer to the US is safeguarded by the European Commission’s Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.
Revocation & Unsubscribing: You may withdraw your consent and unsubscribe from our newsletter at any time by clicking the "Unsubscribe" link at the bottom of any email or by managing your settings directly on Substack.
Further information on data processing by Substack can be found in Substack’s Privacy Policy:

• Substack Privacy Policy

External Payment Service Providers

To process paid legal transactions, we use payment service providers. In this case, the payment data you enter is transmitted to the selected payment service provider. The legal basis for the transmission of your data is Art. 6(1) sentence 1 lit. b GDPR (processing for contract performance).Further information on data processing by the payment service provider can be found in the respective provider’s privacy policy. We use the following providers:

ThriveCart

We use ThriveCart (provider: WebActix Ltd., 6 Boulder Lane, Pyes Pa, Tauranga 3112, New Zealand – processing may take place via servers in the USA) to process sales and orders of our coaching services.During the ordering process, personal data such as name, email address, billing data and order-related information is processed.Processing is carried out for the purpose of contract performance pursuant to Art. 6(1) lit. b GDPR.The transfer of personal data to third countries takes place on the basis of appropriate safeguards pursuant to Art. 46 GDPR (e.g. standard contractual clauses).

• ThriveCart Privacy Policy

Stripe

We use the payment service provider Stripe (provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland) to process payments.Stripe processes personal data such as name, email address, payment information and transaction data for the purpose of payment processing.Processing is carried out on the basis of Art. 6(1) lit. b GDPR (contract performance).Depending on the payment method, personal data may be transferred to affiliated Stripe companies, including in third countries (in particular the USA). This transfer is based on appropriate safeguards pursuant to Art. 46 GDPR (e.g. standard contractual clauses).

• Stripe Privacy Policy

Website Hosting & Infrastructure

Our website and privacy policy are hosted using the service Carrd, provided by Carrd Inc., 2300 M St NW, Suite 800, Washington, DC 20037, United States.
Scope and Purpose of Processing: When accessing our website, Carrd automatically processes and stores technically necessary access data (server log files, such as your IP address, browser type, operating system, timestamp of access, and referrer URL). This processing is required to securely deliver the website, maintain system stability, and prevent malicious attacks.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest in ensuring the secure, efficient, and technically flawless operation of our website).
Third-Country Transfer (USA): Carrd Inc. is located in the United States. Personal data transmitted to the US is safeguarded on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection in compliance with GDPR requirements.
Further information can be found in Carrd’s Privacy Policy:

• Carrd Privacy Policy

Social Networks

We maintain online presences on social networks and platforms, such as Facebook fan pages on the Facebook platform. The online presence is technically provided by the respective social network or platform (hereinafter “platform”).The platform may process personal data such as your IP address. If you are logged into the social network, the platform may link your user profile with your visit. Personal data processing by the platform occurs in particular when visiting the social media presence or interacting with it, e.g. liking a post.Data processing by the platform can be found in the respective platform’s privacy policy. Data is generally processed for market research and advertising purposes. The platform may create user profiles and generate personalized advertising.Further and more detailed information on processing by the respective platform and objection options (opt-out) can be found on the platform via the provided links.When visiting our social media presence, your IP address is transmitted to and processed by the operator. This IP address is often anonymized (for German IP addresses) and deleted after a certain period. The operator also stores information about users’ devices (e.g. as part of login notifications), which may allow IP addresses to be assigned to individual users.Platform operators do not conclusively disclose how data from visits is used for their own purposes, the extent to which activities are assigned to users, how long data is stored or whether data is passed on to third parties.If you are logged in to a platform during your visit, cookies containing your identifier may be stored on your device. This allows the operator to track that you visited the page and how you used it. This also applies to other pages on the platform.You can prevent profile assignment and interaction tracking by logging out of the social network, disabling the “stay logged in” function, deleting cookies stored on your device, and restarting your browser.We use the following platforms:

Instagram

Meta Platforms Ireland Limited,4 Grand Canal Square, Grand Canal Harbour, Dublin 2, IrelandUsers also have the option to contact us via direct messages (Direct Messages) on Instagram.
In doing so, personal data such as the Instagram username and the content of the message are processed. Data processing is carried out both by us and by Meta Platforms Ireland Limited as the operator of the platform. Further information on data processing by Instagram can be found in Instagram’s privacy policy.

• Instagram Privacy Policy

TikTok

TikTok Technology Limited,10 Earlsfort Terrace, Dublin, D02 T380Contact is also possible via direct messages on TikTok.
In doing so, personal data such as the TikTok username and the content of the message are processed. Data processing is carried out by us as well as by TikTok Technology Limited as the operator of the platform. Further information on data processing can be found in TikTok’s privacy policy.

• TikTok Privacy Policy

Facebook

Meta Platforms Ireland Limited,Merrion Road, Dublin 4, D04 X2K5, IrelandContact is also possible via direct messages (Messenger) on Facebook. In doing so, personal data such as the Facebook username, profile details, and the content of the message are processed. Data processing is carried out by us as well as by Meta Platforms Ireland Limited as the operator of the platform. Further information on data processing can be found in Facebook’s privacy policy.

• Facebook Privacy Policy

Your Rights as a Data Subject

s a data subject, you have various rights regarding your personal data.You have the following rights with respect to us as the controller:- withdrawal of consent
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to object (Art. 21 GDPR)To exercise your rights, it is sufficient to notify us.You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Notification to the competent supervisory authority is sufficient.To exercise your rights, a simple notification to us is sufficient.Last updated: September 2026

Imprint

Information pursuant to Section 5 DDG (German Digital Services Act)Éloi Niederwieser (Éloi Lumière)
Bernhard-Schineller-Str. 4
97508 Grettstadt
GermanyContact
Phone: +49 1522 8992315
Email: [email protected]Consumer Dispute Resolution
We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.Privacy Policy
You can find our Privacy Policy here.Coaching Disclaimer
The coaching services offered are intended to support personal development and self-reflection. They do not replace medical, psychological, or psychotherapeutic treatment. Coaching is not a substitute for diagnosis, treatment, or therapy by licensed medical or mental health professionals. If you are experiencing acute psychological distress or a medical condition, please seek appropriate professional support.

Terms and Conditions

Scope of Application

These Terms and Conditions apply to all coaching services provided by Éloi Lumière to consumers.
A consumer is any natural person who enters into a legal transaction for purposes that are predominantly outside their trade, business, or profession.

Contracting Party

The contract is concluded with:
Éloi Niederwieser (operating as Éloi Lumière)
Bernhard-Schineller-Str. 4
97508 Grettstadt
Germany
Email: [email protected]

Conclusion of Contract

The presentation of coaching services on the website does not constitute a legally binding offer, but an invitation to submit an order or booking request.
By completing the booking process, executing the coaching agreement, or confirming the purchase (“Buy / Place Order with Obligation to Pay”), you submit a binding request to book the selected coaching service.
The contract is concluded once you receive a written confirmation or invoice by email. Please ensure that you provide an email address to which you have regular access, as all contractual communication will be sent to this address.

Prices

All prices displayed or communicated at the time of booking apply. Prices are final prices.
If applicable, prices may be reduced through special offers or discount codes, which will be reflected in the final invoice or booking overview.

Payment

The following payment methods may be made available during the booking or onboarding process:
Invoice (Bank Transfer)
Credit Card (processed securely via Stripe)
Apple Pay / Google Pay (processed securely via Stripe)
We reserve the right to offer or limit specific payment methods on a case-by-case basis depending on the client’s location, contract volume, or individual booking setup.

Invoice

If payment by invoice is agreed upon, the full amount is due upon receipt of the invoice and must be paid within the payment period stated on the invoice via bank transfer. Access to the coaching services or scheduled sessions may be granted only after full payment has been received in full, unless otherwise agreed in writing.

Credit Card / Online Payments via Stripe

If you choose an online payment method (such as Credit Card, Apple Pay, or Google Pay), payment processing is handled securely via our payment provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Your card or account will be charged upon completion of the booking or checkout process. Payments from accounts worldwide are accepted.

Right of Withdrawal

Right of Withdrawal

You have the right to withdraw from this contract within fourteen (14) days without giving any reason. The withdrawal period begins on the day the contract is concluded.
To exercise your right of withdrawal, you must inform us by email ([email protected]) of your decision to withdraw from this contract. Your notification must include your full name, address, and email address.

Early Commencement of Services & Expiry of the Right of Withdrawal

By booking or requesting the coaching service to begin during the withdrawal period, you expressly agree that the coaching services may begin before the expiry of the 14-day withdrawal period.
You acknowledge and agree that:
If the coaching services have already begun at your request prior to withdrawal, you will be required to pay an amount proportional to the services already provided up to the time you communicated your withdrawal.
If the coaching service has been fully provided upon your express request, your right of withdrawal expires completely.

Consequences of Withdrawal

If you withdraw from this contract, we will refund all payments received from you without undue delay and no later than fourteen (14) days from the date we receive your withdrawal notice.
If services have already been provided during the withdrawal period at your request, an appropriate amount corresponding to the services rendered will be deducted from the refund. Refunds will be issued using the same payment method used for the original transaction, unless explicitly agreed otherwise.

Voluntary Return Policy

No voluntary return or refund policy is offered beyond the statutory right of withdrawal.

Provision of Services

Coaching services are provided digitally and are available worldwide. Sessions and support are conducted online via video call (e.g., Zoom), messaging platforms (e.g., WhatsApp Business), and/or cloud platforms (e.g., Proton Drive), depending on the specific service booked.

Retention of Title & Intellectual Property

Until full payment has been received, all rights, titles, and intellectual property regarding provided coaching materials, workbooks, recordings, and documentation remain fully with Éloi Niederwieser (operating as Éloi Lumière).

Liability

We are liable without limitation for intent and gross negligence.
In cases of slight negligence, liability exists only for injury to life, body, or health, or for the breach of essential contractual obligations (cardinal obligations). In cases of a breach of essential contractual obligations due to slight negligence, liability is limited to foreseeable damages typical for this type of contract.
This limitation of liability also applies to our legal representatives, employees, and agents.

Therapy & Medical Disclaimer

The coaching services provided do not constitute and do not replace medical, psychological, psychiatric, or psychotherapeutic diagnosis, treatment, or care.
Coaching is designed solely for personal development, self-reflection, and educational purposes. If you are experiencing acute psychological distress, mental health conditions, or physical medical issues, you are advised to seek appropriate care from licensed medical or healthcare professionals.

Effective Date

These Terms and Conditions are effective as of January 14, 2026.