LEGAL
Privacy Policy
Effective Date: 01 June 2025
Transparent handling of personal data is very important to us. This privacy policy provides information on what personal data we collect, for what purpose and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.
1. Who we are
PeakFlow by Nicole Zimmer operates the website www.findpeakflow.com (hereinafter referred to as "we"). We are a coaching, training and consulting business.
If you have any questions or concerns about the protection of your data by us, you can contact our data protection officer:
PeakFlow by Nicole Zimmer
Nicole Zimmer
Wartstrasse 12
8032 Zürich
nicole@humancentricleaders.com
2. What data we collect
When you use this website or contact us, we may collect the following data:
-
First and last name
-
Email address
-
Name of the internet service provider
-
IP address
-
Technical information such as browser, operating system or screen resolution
-
the date and time of access
-
Referrer URL
3. How and why we collect your data
We collect your data to:
-
Respond to your inquiries;
-
Provide and operate our coaching and consulting service;
-
Be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages;
-
Create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services;
-
Guarantee the functionality of the website and to ensure the security of our information technology systems.
-
Comply with any applicable laws and regulations.
Data is collected directly from you when you use the contact form or communicate with us by email. And some data are transmitted by your browser automatically and is collected by our server.
The legal basis for this data processing under the GDPR is:
• Art. 6(1)(f) GDPR – legitimate interests in maintaining website functionality, improving our services, and ensuring secure communication
• Art. 6(1)(a) GDPR – where you have given explicit consent (e.g., form submission)
We only retain your personal data for as long as necessary to fulfill the purposes described above or as required by applicable law.
4. Storage and protection of your data
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
In addition, if we engage in a coaching relationship, coaching-related notes are stored in encrypted local folders and deleted after the coaching engagement ends.
5. Sharing of data
Your personal data will not be shared with third parties except in the following cases:
-
With CTI (Co-Active Training Institute) coaching faculty for learning or supervision purposes — only with your prior explicit consent
-
With service providers used to operate the business (e.g. Wix, Google, Calendly, payment service providers, accounting company) who may process data on our behalf
-
If a legal requirement obliges us to pass on your data to an authority, for example if an outstanding debt is transferred to a collection agency, or in case of fraudulent activity.
All third-party service providers (e.g. Wix, Google, Calendly) are contractually bound to protect your data in accordance with applicable data protection law.
6. Cookies and website analytics
This website uses cookies to ensure basic functionality and performance.
A cookie banner allows users to accept or manage their preferences.
No behavioural analytics tools (like Google Analytics) are currently in use.
Find more information here on which cookies Wix is storing.
7. Your rights under Swiss law (revDSG)
You have the right to:
-
Access your personal data
-
Request correction or deletion
-
Withdraw consent at any time
-
File a complaint with the Federal Data Protection and Information Commissioner (FDPIC) if you believe your data is being misused
8. International users (EU GDPR)
If you are located in the EU, we respect your rights under the General Data Protection Regulation (GDPR). This includes your right to data access, correction, erasure, restriction of processing, and data portability.
We process your data in accordance with the applicable data protection laws, in particular the GDPR. The processing is carried out for the purposes specified in this privacy policy. We pay attention to transparency and proportionality.
The processing of your data is lawful as long as a GDPR authorization is fulfilled. The following are possible grounds for authorization:
-
Your consent (Art. 6 para. 1 lit. a GDPR);
-
The fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR);
-
The fulfillment of legal obligations to which we are subject (Art. 6 para. 1 lit. c GDPR);
-
The protection of vital interests of the data subject or another natural person (Art. 6 para. 1 lit. d GDPR);
-
The performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art. 6 para. 1 lit. e GDPR);
-
Our legitimate interests, provided that your interests do not outweigh ours (Art. 6 para. 1 lit. f GDPR).
It may be necessary for you to provide us with certain personal data so that we can fulfil our contractual obligations. Without such data, we are normally unable to fulfil a contract.
9. Changes to this policy
We may update this privacy policy to reflect changes in legal requirements or services. Any material changes will be communicated via our website or, where appropriate, by email.
The latest version will always be available on this website.
