Privacy Policy

Effective April 2026

1. Data Controller

2. General Information

The protection of your personal data is important to me. This privacy policy explains how I handle your data when you visit my website.

This website is hosted as a static HTML site on IONOS web hosting. Data is processed in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

Data Collected When You Visit the Website

When you visit my website, the following technically necessary data is collected automatically:

• Your IP address
• Date and time of access
• Requested content (URL of the page accessed)
• Access status / HTTP status code
• Referrer (the page you came from)
• Browser and operating system information

3. Server Log Files

My web hosting provider (IONOS) automatically creates server log files containing the data listed above. These logs are technically necessary for:

• Security and error diagnosis
• Website performance optimization
• Abuse prevention

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR

Retention period: Server logs are typically deleted automatically after 7–30 days in accordance with the hosting provider’s policies.

4. Contact Form

My website includes a contact form through which you can reach me. When you fill out the form, the following data is collected:

• Your name
• Your email address
• Your message
• Any additional information you voluntarily provide

Currently Without Backend Functionality

The contact form is not yet fully functional and does not currently store any data. A backend system with appropriate data protection measures is planned for the future.

Once the Backend Is Implemented

Once the form is connected to a backend, the following policies will apply:

• Processing: Your data will only be used to respond to your inquiry
• Retention: After your message has been answered, your information will be deleted or archived
• Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (contract performance)
• Sharing: Your data will not be passed on to third parties

5. Google Fonts

This website uses Google Fonts for typography. The font files are loaded from Google’s servers.

Data Transfer to Google

When fonts are loaded, the following data may be transmitted to Google:

• Your IP address
• The URL of the page on which the fonts are loaded
• Timestamp of the request

Google Fonts Privacy

Google processes this data in accordance with its Privacy Policy. Google may use this data for analytics and security purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent presentation and performance)

Further information: Google Fonts FAQ

6. External Links

My website links to external platforms and content, in particular:

• Instagram: Links to my Instagram account and content
• External CDN: Images and media from external content delivery networks
• Other external sources: As required by content needs

Privacy on External Links

When you visit linked external pages, those platforms are governed by their own privacy policies. I am not responsible for the privacy practices of external websites.

Instagram Privacy Policy: Instagram Privacy Policy

External Images via CDN

Images loaded from external CDNs (e.g. Squarespace CDN) may be used to optimize load times. When loading these images, your IP address and page access may be transmitted to the CDN operator.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in optimized load times)

7. Payment Processing: LemonSqueezy

For the purchase of digital products (Insider Tools) on this website, the service LemonSqueezy is used. LemonSqueezy is a product of Lemon Squeezy, LLC, a US company acting as Merchant of Record — meaning LemonSqueezy is legally the seller of the products and handles all payment processing, invoicing, and tax compliance.

What Happens When You Click “Buy Now”?

When you click a purchase button, you are redirected to a checkout page hosted by LemonSqueezy. The following data may be transmitted to LemonSqueezy:

• Your IP address
• Technical browser information
• The page you were redirected from (referrer)

In the checkout, you enter your payment and contact details directly with LemonSqueezy. This data is processed exclusively by LemonSqueezy — I have no access to your payment details.

What Data I Receive

After a successful purchase, I receive from LemonSqueezy only the information necessary to deliver the product: your email address and proof of purchase. This data is used solely to provide the purchased product and, where applicable, product updates.

LemonSqueezy as Independent Data Controller

LemonSqueezy processes your data as an independent data controller under its own privacy policy. For more information:

• LemonSqueezy Privacy Policy
• LemonSqueezy Terms of Service

Legal basis: Art. 6(1)(b) GDPR (contract performance) and legitimate interest pursuant to Art. 6(1)(f) GDPR.

Transfer to third countries: LemonSqueezy is a US company. Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.

8. SSL Encryption

This website uses SSL/TLS encryption (indicated by “https://” in the URL). This protects the transmission of your personal data from unauthorized access.

All data you enter or transmit on this website is encrypted. This applies in particular to sensitive information submitted via the contact form or other requests.

9. Cookies and Similar Technologies

This website uses only technically necessary cookies, if any. No tracking cookies, analytics cookies, or advertising cookies are set.

If cookies are used, they serve solely to ensure the functionality of the website and do not require explicit consent.

10. Web Analytics

This website currently uses no web analytics tools such as Google Analytics or similar services.

No tracking data about you is collected beyond the technically necessary server logs.

11. Your Rights

As a data subject, you have the following rights under the GDPR:

Right of Access (Art. 15 GDPR)

You have the right to request information about whether and what personal data I process about you.

Right to Erasure (Art. 17 GDPR)

You may request the deletion of your personal data if:

• The data is no longer necessary for the original purpose of collection
• You have withdrawn your consent
• You have objected to processing
• The data was processed unlawfully

Right to Rectification (Art. 16 GDPR)

You may request the correction of inaccurate data.

Right to Restriction of Processing (Art. 18 GDPR)

You may request a restriction on the processing of your data, e.g. if the data is disputed or no longer necessary.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out prior to withdrawal.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates the GDPR.

Competent supervisory authority (Bavaria, Germany): Bavarian State Office for Data Protection Supervision (BayLDA)

Exercising Your Rights

To exercise any of these rights, please send an email to:

Please include proof of your identity. I will respond to your request within 30 days.

12. Changes to This Privacy Policy

I reserve the right to update this privacy policy at any time, in particular if technical or legal requirements change.

The current version will always be published on my website. I will notify you of significant changes in advance where possible.

13. Further Notes

No automated decision-making: This website does not use fully automated decision-making processes or profiling that could have legal effects on you.

Data security: I use technical and organizational measures to protect your data from unauthorized access, loss, and damage. This includes SSL encryption and secure hosting practices.

This privacy policy was last updated in April 2026 and is effective immediately.