Privacy Policy
Effective date: 15 March 2026
This Privacy Policy explains how Olga Ivanova, operating as Coding Elf Academy ("we", "us"), collects and processes personal data in connection with the website codingelf.academy and the 6-week 1-on-1 mentorship program (the "Program"). We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
The controller responsible for the processing of personal data on this website is:
Olga Ivanova
Coding Elf Academy (sole proprietorship)
Chodowieckistraße 27
10405 Berlin, Germany
Email: olgacodingelf@gmail.com
2. Data We Collect and Legal Bases
Website visit: When you visit codingelf.academy, our hosting provider (Framer) automatically processes technical data such as IP address, browser type, device, referrer URL, and timestamp. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating and securing the site).
Enrolment and payment: When you enrol in the Program, we collect your name, email address, and any information you provide during the intro call or checkout. Payment is processed by Stripe; we receive confirmation and invoice data but do not store your card details. Legal basis: Art. 6(1)(b) GDPR (performance of the contract).
Scheduling and sessions: When you book a call via Calendly or attend sessions via Zoom or Google Meet, we process your name, email, calendar data, and session audio/video as required to deliver the Program. Legal basis: Art. 6(1)(b) GDPR.
Async communication: If you contact us or participate in the Program via email (Gmail), WhatsApp, Discord, or Slack, we process the content of your messages, your contact identifiers, and metadata generated by those platforms. Legal basis: Art. 6(1)(b) GDPR for Program-related messages; Art. 6(1)(f) GDPR for general enquiries.
Analytics: With your consent, we use Google Analytics and Microsoft Clarity to understand how visitors use the site, including session recordings and heatmaps. These tools process pseudonymised usage data and may set cookies. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). You can withdraw your consent at any time via the cookie banner.
Marketing emails: If you subscribe to our email list, we process your email address to send updates about the Program, free resources, and related content. Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe at any time via the link in any email.
Testimonials: With your prior written consent, we may publish your first name, professional outcome, and quoted feedback on our website and social channels. Legal basis: Art. 6(1)(a) GDPR.
Legal obligations: We retain invoices and tax-relevant records to comply with German commercial and tax law. Legal basis: Art. 6(1)(c) GDPR.
3. Recipients and Processors
We share personal data only with service providers who process it on our behalf under data processing agreements, or where required by law. These include:
• Framer B.V. — website hosting
• Stripe Payments Europe, Ltd. — payment processing and invoicing
• Google LLC — Gmail, Google Meet, Calendly (via Google sign-in), Google Analytics
• Calendly, LLC — session scheduling
• Zoom Video Communications, Inc. — video sessions
• Microsoft Corporation — Microsoft Clarity analytics
• WhatsApp Ireland Ltd. / Meta — messaging
• Discord Inc. — messaging and community
• Slack Technologies, LLC — messaging
We do not sell personal data.
4. International Transfers
Some of the service providers listed above are based in the United States or process data outside the European Economic Area. Where this is the case, transfers are safeguarded by the EU–U.S. Data Privacy Framework (where applicable) and/or EU Standard Contractual Clauses under Art. 46 GDPR.
5. Retention
We keep personal data only as long as needed for the purposes set out above. Program-related communications are retained for the duration of the Program and a reasonable period afterwards for support. Invoices and tax-relevant records are retained for up to ten (10) years under German commercial and tax law (§ 147 AO, § 257 HGB). Marketing data is retained until you unsubscribe.
6. Your Rights
Under the GDPR, you have the right to access your data (Art. 15), rectify inaccurate data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw consent at any time with future effect (Art. 7(3)).
You have the right to object at any time to the processing of your data for direct marketing purposes (Art. 21(2) GDPR). If you object, we will no longer use your data for this purpose.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for our business is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
To exercise any of these rights, contact olgacodingelf@gmail.com.
7. Cookies and Consent
Essential cookies required to operate the site are set without consent. Analytics and measurement cookies (Google Analytics, Microsoft Clarity) are set only after you give consent via our cookie banner. You can change or withdraw your consent at any time.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available on this page with the effective date above.