KE Europe (English) » Privacy Policy
Last updated: October 26, 2025
What we collect and why
When you purchase something from us, or make a donation
When you buy from us a course, a service, merch or make a donation, we collect your name, contact details, and offline payment information to process your purchase or donation and send you receipts. We keep records of your orders and invoices.
We do not accept online payment or store credit card information.
For purchases, the legal basis for the processing of personal data consists of contractual necessity and compliance with legal obligations (in particular accounting and tax obligations), pursuant to Article 6(1)(b) and (c) of Regulation (EU) 2016/679 (GDPR).
When you study a course
When you study one of our online courses on Christian entrepreneurship and leadership, we track your learning progress through the course so you can pick up where you left off and we can see how you’re doing.
You can choose not to click “complete lesson” and still access all lessons.
When you participate in a group coaching
When you participate in a group coaching on Christian entrepreneurship and leadership via web conferencing, your personal data is being shared with the service provider, and with the other participants according to your settings when you join the meeting. The web conferencing sessions are not being recorded.
The accompaniment in small groups is intended to offer guided topic-based discussions, a coach-facilitated exchange of experiences, mentoring moments on common issues, accountability check-in, and prayer. Given the private nature and the confidential character of the small group of participants, you may choose to share special categories of personal data, as provided for in Article 9 of Regulation (EU) 2016/679 (GDPR).
You can find more information on the management of pastoral and professional confidentiality of our conversations in our Terms of service.
When you take individual coaching or pastoral care
When you make use of individual coaching or pastoral accompaniment via web conferencing, your personal data is being shared with the service provider, and with pastor Nicole Schaller according to your settings when you join the meeting. The web conferencing sessions are not being recorded.
When you engage in biblical counseling, spiritual direction or leadership coaching with pastor and coach Nicole Schaller, she will personally take care of confidential treatment of all you share. She is your personal conversation partner in private video calls and keeps minimal records offline to prepare for sessions, following GDPR and good professional practice.
In individual sessions of coaching or pastoral care, you may choose to share special categories of personal data, as provided for in Article 9 of Regulation (EU) 2016/679 (GDPR).
For training purposes, Nicole Schaller may wish to share parts of the conversations with a supervisor or with colleagues, in anonymized form. In such a case, you will be asked if you consent to this use. Your consent is voluntary and can be withdrawn at any time, pursuant to Article 7 of Regulation (EU) 2016/679 (GDPR).
You can find more information on the management of pastoral and professional confidentiality of our conversations in our Terms of service.
When you participate in our community
When you participate in our community, your profile information, posts, comments, and activity are stored and visible to other community members based on your privacy settings. Access to the learning community is an offer included in all the courses and services; you can freely choose not to participate in it.
The KE Community is exclusively for Christian entrepreneurs who are of legal age (18 years or older). The community is private, exclusively for clients/members, and on a first-name basis.
The sharing of the Christian faith and worldview, as well as pastoral care and leadership coaching on matters of sensitive nature, represent the core significance and main purpose of the community.
The community is hosted on a separate website, in order to strictly separate personally identifiable purchase data from special categories of personal data (Article 9 of Regulation (EU) 2016/679) that you may choose to share in the context of your participation.
Special categories of personal data
In the context of the online community, group coaching or individual coaching and pastoral care, you may choose to share information that falls under the special categories of personal data as defined in Article 9 of Regulation (EU) 2016/679, such as:
- religious or philosophical beliefs,
- data relating to physical or mental health,
- or personal or family situations of a sensitive nature.
The sharing of such information is entirely voluntary and takes place only on your own initiative.
Such data are not used for purposes other than those for which you share them and are processed securely and in compliance with the principles of lawfulness, fairness, and transparency established by the GDPR. The processing of special categories of personal data is carried out on the basis of Article 9, paragraph 2, point (a), of Regulation (EU) 2016/679, exclusively with the explicit consent of the data subject.
When you work for us or volunteer with us
When you work with us or volunteer with us, we apply Regulation (EU) 2016/679 (GDPR) in the human resources context (recruitment and employment), including the principles of privacy by design and data protection by default. The processing of personal data is carried out in accordance with Article 88 of the GDPR, which governs the processing of employees’ and collaborators’ data for purposes related to the management of the employment relationship and data security.
Beyond contractual necessity and compliance with legal obligations (such as payroll, tax, and social security processing), the legal basis for data processing may also derive from our legitimate interest as data controller or from your consent, depending on the circumstances.
When you apply for a position or offer to volunteer, we kindly ask you not to submit a CV, but instead to direct us to a publicly accessible profile, such as LinkedIn.
On one hand, this helps ensure that your personal data remain safe with us. On the other hand, we require a confidentiality agreement and specific training to ensure the protection of personal data belonging to community members whose information you may access while carrying out your role.
When you contact us
Form submissions are stored so we can respond to your questions and keep a record of our conversation. For form submissions, we need your explicit consent. You may alternatively contact us via email at office [at] kingdomentrepreneur [dot] eu.
Form submissions containing sensitive data, like the motivation to seek pastoral counseling, will be taken offline and stored safely in pastor Nicole Schaller’s office right after submission.
When you subscribe to our blog
Choose how you want to stay informed about new messages, courses and services. When you subscribe to our blog, your email address and language preference are stored with our email service provider, so we can send you updates. Legal basis is implied consent by signing up. Alternatively, you may visit our website regularly or subscribe to our RSS from a feed reader.
When you interact via Fediverse
If you respond to our posts from federated platforms, those responses may appear on our site. This content follows the privacy settings of your home server.
Automatically collected information
We use privacy-focused analytics to understand how people use our site—things like page views and navigation patterns. This data is anonymized and stays on our server. A firewall blocks and logs cyberattacks. All contact forms are protected by an automated spam filter.
Monitoring website visits, together with firewall logs, helps us to distinguish legitimate visitors from hackers, content scrapers, and automated bots. The collection and temporary storage of technical data such as IP address, date, time, and pages visited serve the legitimate purpose of ensuring the security and integrity of our website for the protection of your personal data and of establishing or defending legal claims in the event of misuse or cyberattacks.
These measures are implemented with due regard for the principle of proportionality, balancing our legitimate interest in maintaining a secure online environment with your right to privacy. Processing is therefore based on legitimate interest in accordance with Article 6, paragraph 1, letter (f) of Regulation (EU) 2016/679 (GDPR).
What we don’t do:
- We do not use invasive tracking.
- We are not part of any advertising networks.
- We do not use Google Analytics or any tracking that follows you around the web.
- We do not sell your information to anyone.
As a result, your personal data are not shared with third parties for advertising or profiling purposes. This approach is in accordance with the principles of lawfulness, fairness, and transparency established by Regulation (EU) 2016/679 (GDPR).
Who we share your data with
We use trusted service providers to run our website and handle specific tasks. They have access only to the information necessary to perform their work. For major service providers, we ensure that they are GDPR-compliant or equivalent; for smaller providers, such as freelancers, we require at least a code of conduct or a certification.
Based on European Commission adequacy decisions, we transfer personal data without further authorization to third countries outside the European Economic Area (EEA) that have been assessed and considered to provide a comparable level of personal data protection, like Switzerland and the United States. This includes companies in the United States that are GDPR-compliant and/or compliant with the EU-U.S. Data Privacy Framework.
- Our website is hosted on an Internetwerk server in Frankfurt am Main, Germany.
- We use plugins by WordPress.com/Automattic, United States, for web security, e-commerce, learning management system, community and forums, blog subscription, forms, and spam protection, which may transmit selected data to the United States.
- We perform backups to Dropbox, United States, and Proton, Switzerland.
- We use Zoom, United States, for web conferencing.
These transfers and data sharing are carried out based on European Commission adequacy decisions or through equivalent contractual measures such as standard contractual clauses, in accordance with Articles 44–46 of Regulation (EU) 2016/679 (GDPR).
How long we keep your data
We keep purchase and course data for as long as you have an account with us, plus a reasonable period afterward required to comply with legal and tax obligations, such as the retention of accounting and fiscal documents (for example, invoices, receipts, and payment records) in accordance with the Civil Code and applicable tax laws.
As a pastor and coach, Nicole Schaller maintains facilitator notes from biblical counseling, spiritual direction, leadership coaching, as well as group coaching in anonymized form from the outset. Personal identifiers are not recorded in session notes, which focus solely on themes, insights, and guidance provided. These anonymized records are stored securely offline for professional reference and continuity of the helping relationship. Since the notes contain no personally identifiable information, they fall outside the scope of personal data under GDPR and may be retained as long as professionally useful.
We retain employee data for the duration of employment and thereafter for the period necessary to comply with legal obligations, including tax, employment law, and pension requirements. Retention periods generally range from three to ten years after the end of employment, depending on the type of records and applicable national law. Data are securely deleted once retention periods expire and no legal or operational need remains, in accordance with Article 5(1)(e) GDPR (storage limitation principle) and applicable national retention requirements. The same principles are applied proportionally to external collaborators and volunteers.
Your profile and your content in the community remain visible unless you delete them or close your account.
You can request the deletion of your personal data at any time by contacting us directly. The request will be handled in accordance with the principles of lawfulness, fairness, and transparency established by Regulation (EU) 2016/679 (GDPR).
Cookies
This site uses cookies. Some are necessary for the proper functioning of the site; others help us improve your experience. We do not use tracking cookies that follow you to other websites.
Necessary cookies include those that keep you logged in, remember items added to your cart, and ensure the correct functioning of the site. In addition, we collect site analytics in an anonymous and privacy-friendly. These data do not allow you to be personally identified.
The banner displays a single button, “Accept essential cookies.” Essential cookies are set automatically to ensure proper navigation and site functionality. At present, we do not collect consent for any other optional cookies and do not use tracking cookies for analytics or marketing that could identify users.
In accordance with Regulation (EU) 2016/679 (GDPR), the processing of essential cookies and anonymized analytics data does not require your consent.
Security
We take security and privacy seriously in the religious belief and pastoral care context of our ministry. We undertake reasonable steps in good faith to protect your data, and we treat your information with confidentiality. No website is 100% secure though. This is why we recommend to share highly sensitive information in video calls and in-person.
Your rights (GDPR)
Under EU data protection law, you have the right to access your personal data, correct inaccurate information, delete your data (right to be forgotten), export your data in a portable format, restrict how we process your data, object to processing, and withdraw consent at any time. To exercise any of these rights, please contact us at office [at] kingdomentrepreneur [dot] eu.
Contact us if you have any questions about your privacy. If you’re not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.
Responsible Controller (GDPR)
Responsible data controller (GDPR) is Nicole Schaller (About).
Nicole Schaller
Donaustr. 30, 63452 Hanau, Germany
Tel.: 0151 – 20270072
Email: office [at] kingdomentrepreneur [dot] eu