Privacy Policy

Effective April 2026

1. Data Controller

2. General Information

The protection of your personal data is important to me. This privacy policy explains how I handle your data when you visit my website.

This website is hosted as a static HTML site on IONOS web hosting. Data is processed in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

Data Collected When You Visit the Website

When you visit my website, the following technically necessary data is collected automatically:

• Your IP address
• Date and time of access
• Requested content (URL of the page accessed)
• Access status / HTTP status code
• Referrer (the page you came from)
• Browser and operating system information

3. Server Log Files

My web hosting provider (IONOS) automatically creates server log files containing the data listed above. These logs are technically necessary for:

• Security and error diagnosis
• Website performance optimization
• Abuse prevention

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR

Retention period: Server logs are typically deleted automatically after 7–30 days in accordance with the hosting provider’s policies.

4. Contact Form

My website includes a contact form through which you can reach me. When you fill out the form, the following data is collected:

• Your name
• Your email address
• Your message
• Any additional information you voluntarily provide

Currently Without Backend Functionality

The contact form is not yet fully functional and does not currently store any data. A backend system with appropriate data protection measures is planned for the future.

Once the Backend Is Implemented

Once the form is connected to a backend, the following policies will apply:

• Processing: Your data will only be used to respond to your inquiry
• Retention: After your message has been answered, your information will be deleted or archived
• Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (contract performance)
• Sharing: Your data will not be passed on to third parties

5. Google Fonts

This website uses Google Fonts for typography. The font files are loaded from Google’s servers.

Data Transfer to Google

When fonts are loaded, the following data may be transmitted to Google:

• Your IP address
• The URL of the page on which the fonts are loaded
• Timestamp of the request

Google Fonts Privacy

Google processes this data in accordance with its Privacy Policy. Google may use this data for analytics and security purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent presentation and performance)

Further information: Google Fonts FAQ

6. External Links

My website links to external platforms and content, in particular:

• Instagram: Links to my Instagram account and content
• External CDN: Images and media from external content delivery networks
• Other external sources: As required by content needs

Privacy on External Links

When you visit linked external pages, those platforms are governed by their own privacy policies. I am not responsible for the privacy practices of external websites.

Instagram Privacy Policy: Instagram Privacy Policy

External Images via CDN

Images loaded from external CDNs (e.g. Squarespace CDN) may be used to optimize load times. When loading these images, your IP address and page access may be transmitted to the CDN operator.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in optimized load times)

7. Payment Processing: Lemon Squeezy

For the purchase of digital products (Insider Tools) on this website, the service Lemon Squeezy is used. Lemon Squeezy is a product of Lemon Squeezy, LLC, 222 S Main St, Suite 500, Salt Lake City, UT 84101, USA. Lemon Squeezy acts as a Merchant of Record — meaning Lemon Squeezy is legally the seller of the products and handles all payment processing, invoicing, and tax compliance (including VAT).

What Happens When You Click “Buy Now”?

When you click a purchase button, you are redirected to a checkout page hosted by Lemon Squeezy. The following data may be transmitted to Lemon Squeezy:

• Your IP address
• Technical browser information
• The page you were redirected from (referrer)

In the checkout, you enter your payment and contact details directly with Lemon Squeezy. This data is processed exclusively by Lemon Squeezy — I have no access to your payment details.

What Data I Receive

After a successful purchase, I receive from Lemon Squeezy only the information necessary to deliver the product: your email address and proof of purchase. This data is used solely to provide the purchased product and, where applicable, product updates.

Lemon Squeezy as Independent Data Controller

Lemon Squeezy processes your data as an independent data controller under its own privacy policy. For more information:

• Lemon Squeezy Privacy Policy
• Lemon Squeezy Terms of Service

Legal basis: Art. 6(1)(b) GDPR (contract performance) and legitimate interest pursuant to Art. 6(1)(f) GDPR.

Transfer to third countries: Lemon Squeezy is based in the United States. Personal data may be transferred to the USA as part of payment processing. This transfer is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR.

8. SSL Encryption

This website uses SSL/TLS encryption (indicated by “https://” in the URL). This protects the transmission of your personal data from unauthorized access.

All data you enter or transmit on this website is encrypted. This applies in particular to sensitive information submitted via the contact form or other requests.

9. Newsletter and Email Marketing

When you sign up for our newsletter (e.g., via the “7 Pitch Killers” page), we process the following data:

• Email address (required)
• First name (optional)

We use Brevo (formerly Sendinblue), Brevo SAS, 106 Boulevard Haussmann, 75008 Paris, France, to send our emails. Brevo is a European provider and processes data on servers within the EU.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time with future effect by clicking the unsubscribe link in any email or by contacting us directly.

We use the double opt-in procedure: After signing up, you will receive a confirmation email. Your email address will only be added to our mailing list after clicking the confirmation link.

More information about Brevo’s privacy practices: brevo.com/legal/privacypolicy

10. Cookies and Similar Technologies

This website uses only technically necessary cookies, if any. No tracking cookies, analytics cookies, or advertising cookies are set.

If cookies are used, they serve solely to ensure the functionality of the website and do not require explicit consent.

11. Web Analytics (Plausible)

This website uses Plausible Analytics, a privacy-friendly web analytics service provided by Plausible Insights OÜ (Västriku tn 2, 50403 Tartu, Estonia).

Plausible does not collect any personal data, does not use cookies, and does not use fingerprinting. Only anonymized, aggregated data is collected, including:

• Page views and time on page
• Referrer (where you came from)
• Device type, browser, and operating system (without unique identifiers)
• Country (based on anonymized IP address, which is not stored)

In addition, anonymized events are tracked, such as button clicks or scroll depth, to improve the user experience. It is not possible to identify individual users from this data.

Plausible is fully GDPR-compliant and does not require a cookie banner. All data processing takes place on servers within the EU.

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR (anonymous reach measurement to improve the website).

More information: Plausible Data Policy

12. Your Rights

As a data subject, you have the following rights under the GDPR:

Right of Access (Art. 15 GDPR)

You have the right to request information about whether and what personal data I process about you.

Right to Erasure (Art. 17 GDPR)

You may request the deletion of your personal data if:

• The data is no longer necessary for the original purpose of collection
• You have withdrawn your consent
• You have objected to processing
• The data was processed unlawfully

Right to Rectification (Art. 16 GDPR)

You may request the correction of inaccurate data.

Right to Restriction of Processing (Art. 18 GDPR)

You may request a restriction on the processing of your data, e.g. if the data is disputed or no longer necessary.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out prior to withdrawal.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates the GDPR.

Competent supervisory authority (Bavaria, Germany): Bavarian State Office for Data Protection Supervision (BayLDA)

Exercising Your Rights

To exercise any of these rights, please send an email to:

Please include proof of your identity. I will respond to your request within 30 days.

13. Changes to This Privacy Policy

I reserve the right to update this privacy policy at any time, in particular if technical or legal requirements change.

The current version will always be published on my website. I will notify you of significant changes in advance where possible.

14. Further Notes

No automated decision-making: This website does not use fully automated decision-making processes or profiling that could have legal effects on you.

Data security: I use technical and organizational measures to protect your data from unauthorized access, loss, and damage. This includes SSL encryption and secure hosting practices.

This privacy policy was last updated in April 2026 and is effective immediately.