Privacy.

1. Controller

2. Website access and hosting

When you access this website, technically necessary connection data is processed. This may include your IP address, time of access, requested page and browser, device and operating-system information. Processing serves the secure, stable and error-free delivery of the website and is based on Article 6(1)(f) GDPR.

The website is provided through ChatGPT Sites by OpenAI and technically delivered via Cloudflare. These providers process connection and usage data as part of the technical delivery. Processing may take place outside the European Economic Area; the applicable legal transfer mechanisms are used for such transfers.

OpenAI Privacy ↗Cloudflare Privacy ↗

3. Language preference

The website starts in German by default. If you select English, the language is included in the page URL so links within the site open in your selected language. We do not store the language preference in your browser’s local storage.

4. Membership enquiry and waitlist

When you enquire or join a waitlist, we process your selected plan, first name, last name and email address and, when provided voluntarily, your phone number, playing level, training frequency, qTTR rating and training objective. We also store the language, submission time, processing status and source. Plan, name and email address are required to handle your enquiry or waitlist registration. The separate homepage form requires only your email address and consent to project and opening information. It records your language, submission time, source and the scope of your consent. It creates neither a membership nor a reservation. We use Brevo for weekly project updates. After registration, we send a confirmation email; only clicking its link adds you to the active mailing list. Every newsletter includes an unsubscribe link. You can also unsubscribe by contacting us. Brevo processes your email address, language, confirmation, unsubscribe and technical delivery information to provide this service. The legal basis is your consent under Article 6(1)(a) GDPR. Existing leads are not added to the newsletter without confirmed registration.

Brevo privacy ↗

We use this information to handle your Founder or Pod Membership enquiry or your Standard or Performance waitlist registration, contact you and prepare a potential membership. The legal basis for membership enquiries is Article 6(1)(b) GDPR. For the requested project and opening information, the legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw it at any time with future effect through the contact page or by email. No automated decision-making takes place. The information is stored in the database associated with this website and is accessible only to the controller and technically necessary service providers.

Contact details for project updates are used until consent is withdrawn or this purpose no longer applies. Unsuccessful enquiries or enquiries not pursued further are generally deleted no later than 6 months after processing is concluded. If a membership is established, necessary data is transferred to the contractual relationship and retained in accordance with statutory retention periods.

5. Booking with an external provider

The Training page displays products and prices. Once the relevant booking or enquiry function is activated, it will take you to an external booking system. Depending on the product, you select a slot and participants or send a training enquiry. Following the link does not transfer form entries from this website to the booking provider. The provider’s privacy notice, available there before booking or enquiring, applies to data you enter in its system. Before activating the links, we will add the provider and specific data flows here.

6. Contact

If you contact us by email or phone, we process your contact details and the content of your enquiry to handle and answer it. The legal basis is Article 6(1)(b) GDPR for pre-contractual matters and otherwise Article 6(1)(f) GDPR.

7. Internal access log

When a page is opened, we record its path, date and time and the IP address supplied by the hosting provider in an internal access log. For landing-page views, we also record the source (campaign source or external referring domain), optional campaign name and whether the website or app was used. Landing views are stored without IP addresses or additional visitor identifiers. When you sign up, the source is saved with your enquiry so we can analyse sign-ups by source. Full referring URLs and advertising click identifiers are not stored. We use these details to understand page usage and detect misuse. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in operating and improving the website). Only the website owner can view this log. Entries are displayed for 30 days and deleted from the database on the next recorded visit after that period. To protect public forms from automated submissions, we also store a pseudonymous rate-limit key derived from the IP address. Keys older than 24 hours are periodically deleted during incoming API requests. We do not set analytics or advertising cookies or embed external analytics or social-media services for this purpose. Visits without JavaScript are not recorded.

8. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw it at any time with future effect. To exercise your rights, contact us using the email address above.

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. For private-sector entities in Bavaria, the Bavarian State Office for Data Protection Supervision is the relevant authority.

Bavarian State Office for Data Protection Supervision ↗

10. Security and updates

We take appropriate technical and organisational measures to protect personal data. This privacy notice will be updated when functions, service providers or legal requirements change.