Privacy policy
English translation for convenience; see the German version. Last updated: [PLACEHOLDER: date]
1. Controller
[PLACEHOLDER: Name / company of the provider, legal form]
[PLACEHOLDER: Street and number]
[PLACEHOLDER: Postcode, city]
[PLACEHOLDER: Country]
Email: [PLACEHOLDER: privacy@domain.com]
2. In short
- We use no tracking or marketing cookies and no analytics tools.
- We only collect what is needed for the free practice (email sign-up), your order and the member area.
- Your journal notes and progress are stored only in your browser and never sent to us.
3. Hosting
This website runs on infrastructure provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers, Cloudflare D1 database). Cloudflare processes technically necessary data such as IP address, time, requested page and browser information to deliver the website securely (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. [PLACEHOLDER: sign DPA with Cloudflare / state D1 data location]
4. Free practice and email sign-up
You can listen to the practice without signing up. If you ask us to email it to you, we store your email address, language, the time and wording of your consent and – if present – campaign parameters from the link you used (utm_*) and the referring page. Legal basis: your consent (Art. 6(1)(a) GDPR). We use double opt-in and you can withdraw your consent at any time via the unsubscribe link in every email. Email delivery: [PLACEHOLDER: email provider].
5. Orders and payment
For orders we process your first name, email address, order data and the time of your consent to immediate performance (Art. 6(1)(b) and (c) GDPR). Payments are handled by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands; we never receive your payment details. See mollie.com/en/privacy.
6. Member area and cookies
After purchase you receive a personal access link. When you open it, we set a strictly necessary cookie (hb_session, up to 60 days) to keep you signed in; during checkout we also set hb_order (2 days) so only your browser gets direct access after payment (§ 25(2) no. 2 TDDDG). Progress and journal notes are stored in your browser’s localStorage and never leave your device.
7. Questions to the team
If you ask a question in the member area, we store it together with your contact details in order to answer it (Art. 6(1)(b) GDPR). Only share what you want to share. Deletion: [PLACEHOLDER: period].
8. Links and ads
We do not embed videos; external links (e.g. YouTube) only open when you click them. We run ads on Facebook and Instagram, but no Meta Pixel is active on this website.
9. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), may withdraw consent at any time and may lodge a complaint with a supervisory authority.