Privacy policy

The data controller is the website operator named in the Impressum. For any data protection questions you can write to the contact email address.

We process only the data necessary to operate the website and the services:

• Newsletter and free checklist: email address, optional name, consent, date and language (legal basis: Article 6(1)(a) GDPR).
• Purchases: email address and order data, processed through our payment provider (Mollie) (legal basis: Article 6(1)(b) GDPR, performance of a contract).
• Server log data: IP address, date and time, browser type — for security and operation (legal basis: Article 6(1)(f) GDPR).
• Statistics: privacy-friendly analytics, without personal profiling.
• Cookies and preferences: we store your chosen language (NEXT_LOCALE cookie) so that you see the site in the right language.

We use providers that process data on our behalf: hosting (Vercel), payments (Mollie), email (Resend), file storage (Cloudflare R2), database (managed PostgreSQL), community (Telegram). Where necessary we conclude data processing agreements with these providers.

Some providers may also process data outside the EU. In those cases transfers take place on the basis of appropriate safeguards (for example standard contractual clauses).

Newsletter data is retained until you withdraw your consent. Order data is retained for the statutory periods (usually 6–10 years for tax and accounting obligations).

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. You can withdraw consent at any time with effect for the future. You can lodge a complaint with a supervisory authority, for example the authority in your place of residence.

Every newsletter contains an unsubscribe link. If you prefer, you can also write to us and we will delete your data.

We do not make automated decisions that have legal effects for you, and we do not carry out profiling within the meaning of Article 22 GDPR.