Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:

2. Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you visit the website, server log files are automatically collected, including your IP address, browser type, operating system, and the date and time of access. This data is technically necessary to provide the website (Art. 6(1)(f) GDPR).

We have entered into a Data Processing Agreement (DPA) with Vercel. Data transfers to the USA are carried out on the basis of the EU Commission's Standard Contractual Clauses.

3. Contact Form

When you contact us via the contact form, we collect the following data: name, email address, company, website URL, and your message. This information is used solely to process your enquiry.

Data is stored in a database hosted by Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992, with data residing on servers in the European Union (AWS, Frankfurt, Germany). We have entered into a DPA with Supabase.

For sending reply emails we use Resend (Resend Inc., 2261 Market Street #5670, San Francisco, CA 94114, USA). The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Your data will be deleted once your enquiry has been fully processed and no statutory retention obligations apply.

4. Appointment Scheduling (Cal.com)

For online appointment scheduling we use Cal.com (Cal.com, Inc., 2261 Market Street #5765, San Francisco, CA 94114, USA). When you book an appointment, your name, email address, and chosen time slot are transmitted to and processed by Cal.com.

The legal basis is Art. 6(1)(b) GDPR. For Cal.com's privacy information please visit cal.com/privacy.

5. Analytics

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse how you use the website. The information generated (including your IP address) is transmitted to and stored on Google's servers, potentially in the USA.

We only use Google Analytics with your explicit consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. Data transfers to the USA are carried out on the basis of the EU Commission's Standard Contractual Clauses.

Datafast

We also use Datafast, a privacy-friendly analytics service that operates without cookies. No personal data is stored and no cross-device tracking takes place. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in optimising our offering).

PostHog

We use PostHog (PostHog Inc., 2810 N Church St PMB 119886, Wilmington, Delaware 19802, USA) for product analytics and to improve the user experience. PostHog collects interaction data such as page views, clicks, and — where enabled — session recordings. Processing takes place only with your explicit consent (Art. 6(1)(a) GDPR). Data transfers to the USA are carried out on the basis of the EU Commission's Standard Contractual Clauses. For more information, visit posthog.com/privacy.

6. Facebook Pixel

This website uses the Facebook Pixel, an analytics tool provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Pixel allows us to measure conversions, build audiences for advertisements (retargeting), and analyse the effectiveness of our Facebook advertising. In doing so, your browsing behaviour and, where applicable, your IP address are transmitted to Meta and may be linked to your Facebook account.

Data may be transferred to servers of Meta Platforms, Inc. in the USA on the basis of the EU Commission's Standard Contractual Clauses.

The Facebook Pixel is only used with your explicit consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. You can also disable personalised advertising in your Facebook ad preferences.

7. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact: luca@yourstrength.com

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia is: