Privacy Policy

Draft — have this reviewed by a lawyer before going live. Must exactly match which tools are actually live (Stripe, Cal.com, Kit, GA4, Meta Pixel, Clarity). As a German-based business, this must satisfy GDPR regardless of the site's language.

1. Data controller

TODO: name, address, email (same as Legal Notice).

2. Hosting

TODO: name the hosting provider (e.g. Cloudflare Pages / Netlify) incl. a note on the data processing agreement.

3. Payment processing

TODO: Stripe Payments Europe, Ltd. — processes payment data, including Stripe Tax for automatic tax calculation. Add a link to Stripe's privacy policy.

4. Booking

TODO: Cal.com — what data is processed when booking Room Ready / Deep-Dive / the free intro call.

5. Email marketing / newsletter

TODO: Kit — double opt-in, unsubscribe option, purpose of processing.

6. Analytics & tracking (consent-based only)

This site uses Google Analytics 4, Meta Pixel and Microsoft Clarity for usage analysis and marketing purposes, but only after you actively consent via the cookie banner. Processing only starts once consent is given. TODO: add data processing agreements / third-country data transfer details.

7. Your rights

TODO: standard language on access, rectification, deletion, objection, and the right to complain to a supervisory authority.