Privacy Policy

General Information and Mandatory Information

Designation of the Responsible Party

The responsible party for data processing on this website is:

Info Running Plan

The responsible party decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, contact details, etc.).

Revocation of Your Consent to Data Processing

Some data processing operations are only possible with your express consent. You can revoke your consent that you have already given at any time. An informal email to us is sufficient for the revocation. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection violation. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The provision is made in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

Right to Information, Correction, Blocking, Deletion

You have the right at any time within the framework of the applicable legal provisions to free information about your stored personal data, the origin of the data, its recipients and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. In this regard and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and by the lock symbol in the browser line.

Data Transmission in Case of Contract Conclusion for Purchase and Shipping of Goods

If you want to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data that we need for the processing of your order. Personal data is only transmitted to third parties if there is a necessity within the framework of contract processing. Third parties can be, for example, payment service providers or logistics companies. Further transmission of data does not take place or only if you have expressly agreed to it.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective and secure.

Some cookies are “session cookies.” Such cookies are automatically deleted after the end of your browser session. Other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality of our website.

The setting of cookies that are necessary for the performance of electronic communication processes or the provision of certain functions you want (e.g., shopping cart) is based on Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. If other cookies (e.g., for analysis functions) are set, they are treated separately in this privacy policy.

Google Analytics

Type and Scope of Processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of calls to our online offer, visited sub-pages and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

The use of Google Analytics is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and § 25 Para. 1 TDDDG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfer to the USA is carried out according to Art. 45 Para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies that are not certified according to EU-U.S. DPF), we have agreed other appropriate guarantees within the meaning of Art. 44 ff. GDPR with the recipients of the data. These are - unless otherwise stated - standard contractual clauses of the EU Commission according to Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third-country transfer, we obtain your consent according to Art. 49 Para. 1 Sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We point out that third-country transfers may involve unknown risks in detail (e.g., data processing by security authorities of the third country, the exact extent and consequences of which we do not know, over which we have no influence and of which you may not become aware).

Storage Duration

The specific storage duration of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Type and Scope of Processing

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and Legal Basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and §25 Para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfer to the USA is carried out according to Art. 45 Para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage Duration

The specific storage duration of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Stripe (Payment Service Provider)

We offer the possibility to process the payment process via the payment service provider Stripe, ℅ Legal Process, 510, Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Para. 1 lit. f GDPR). In this context, we pass on the following data to Stripe insofar as it is required for contract fulfillment (Art. 6 Para. 1 lit b. GDPR):

  • Name of the cardholder
  • Email address
  • Customer number
  • Order number
  • Bank details
  • Credit card data
  • Validity period of the credit card
  • Check number of the credit card (CVC)
  • Date and time of the transaction
  • Transaction amount
  • Name of the provider
  • Location

The processing of the data specified in this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot carry out a payment via Stripe.

Stripe assumes a dual role as controller and processor in data processing activities. As a controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe's legitimate interest (according to Art. 6 Para. 1 lit. f GDPR) and serves contract performance (according to Art. 6 Para. 1 lit. b GDPR). We have no influence on this process.

Stripe acts as a processor to complete transactions within payment networks. Within the framework of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated within the meaning of Art. 28 GDPR to comply with data protection regulations.

Stripe has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU standard contractual clauses (SCCs).

Further information on objection and removal possibilities vis-à-vis Stripe can be found at: https://stripe.com/privacy-center/legal

Your data will be stored by us until the completion of payment processing. This also includes the period required for processing refunds, debt management and fraud prevention.

Vercel (Cloud Deployment Platform)

We use Vercel, a cloud deployment platform, on our website. The service provider is the American company Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789.

Vercel also processes data from you in the USA. We point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks for the lawfulness and security of data processing.

As a basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e., especially in the USA) or data transfer there, so-called standard contractual clauses (= Art. 46 Para. 2 and 3 GDPR) are used. Standard contractual clauses (Standard Contractual Clauses – SCC) are template forms provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when transferred to third countries (such as the USA) and stored there. Through these clauses, Vercel commits to comply with the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Data Processing Addendum, which corresponds to the standard contractual clauses, can be found at https://vercel.com/legal/dpa.

You can learn more about the data processed through the use of Vercel in the Privacy Policy at https://vercel.com/legal/privacy-policy.

Resend (Email Service)

We use the Resend tool for delivering your personalized training plans via email as well as for managing and optimizing our email communications. Resend enables us to efficiently send your requested training plans as PDF attachments and handle other service-related communications. In this process, personal data such as email addresses, IP addresses, and possibly other relevant usage data are processed. This data is used exclusively for delivering your training plans, responding to your inquiries, and improving our service processes.

Resend is headquartered in the United States, which means that your data may be transferred to and stored in a country outside the European Economic Area (EEA). We ensure that appropriate security measures are taken during this transfer to guarantee the protection of your data.

Further information on data processing by Resend can be found in their privacy policy: https://resend.com/legal/privacy-policy.


This privacy policy has been created and is regularly updated to comply with applicable data protection regulations.