Privacy Policy

German Version

General Information

Protecting your personal data is important to us. We treat all data confidentially and in accordance with applicable data protection laws. Below, we explain what data we collect, how we process it, and what rights you have regarding your information.

1. Data Collection and Processing

Log and Device Data

When you visit our website, technical data transmitted by your browser is automatically collected. This may include:

  • IP address

  • Browser type and version

  • Pages visited

  • Date and time of access

  • Device type and operating system

This information is used to ensure the technical functionality of the website, maintain security, and identify errors.

Personal Data

If you contact us via form, email, or phone, or if you book an appointment through our scheduling system, we collect and process the information you voluntarily provide, including:

  • Name

  • Email address

  • Phone number (if applicable)

  • Content of your inquiry

We use this data exclusively to respond to your request and to manage any appointments you book.

Business-Related Data

When using our platform, business-related data is also generated, including:

  • Booking and appointment details (including scheduling information)

  • Transaction data (in case of purchases via Digistore)

  • User profiles

  • Analytics data related to the use of our website

This data is necessary to provide our services and ensure smooth processing.

    2. Legal Basis for Data Processing

    We process personal data only where there is a legal basis to do so. This applies in particular when:

    • There is a legitimate interest (Art. 6(1)(f) GDPR), for example, to ensure the technical functionality of our website and services, to maintain security, or to improve our online offerings.

    • You have given consent (Art. 6(1)(a) GDPR), for example, for newsletters or marketing communications.

    • The processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR), for example, for services booked via Digistore.

    • We are subject to a legal obligation (Art. 6(1)(c) GDPR), such as the retention of invoices.

    You may withdraw your consent at any time. The withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

    We retain personal data only for as long as it is necessary for the stated purpose or as required by applicable legal retention obligations.

    3. Purpose of Data Use

    We use personal data exclusively for the following purposes:

    • Providing access to our website and services

    • Managing and coordinating appointment bookings

    • Conducting Zoom meetings and online or telephone coaching sessions

    • Responding to inquiries and communication

    • Improving and developing our offerings

    • Marketing and newsletters (with your prior consent)

    • Fulfilling legal obligations

    We do not use personal data for any other purposes and do not share it with unauthorized third parties.

    4. Data Disclosure

    Personal data is only shared where necessary, in particular with:

    • Service providers essential to delivering our offerings (e.g. IT hosting, payment processors, scheduling systems, video conferencing tools)

    • Team members, contractors, and affiliated partners

    • Public authorities or courts, where required by law

    Our website is hosted on servers located in Germany. If data is processed outside the EU, it is done exclusively in accordance with appropriate safeguards, such as the Standard Contractual Clauses under the GDPR.

    5. Your Rights and Control Over Your Data

    Access, Correction, and Objection

    You have the right to request information, at any time and free of charge, about the personal data we store about you — including its origin, recipients, and the purpose of processing. You also have the right, in accordance with data protection regulations, to:

    • Request correction of inaccurate data

    • Request deletion or restriction of data processing

    • Object to the processing of your data

    • Exercise your right to data portability

    If you believe that we have violated data protection laws, please contact us directly. We will review your request promptly and provide a written response. You also have the right to file a complaint with the relevant data protection authority.

    Withdrawal of Consent

    You may withdraw your consent to data processing at any time. This withdrawal does not affect the legality of any data processing carried out prior to the withdrawal.

    6. Cookies

    We use cookies and similar technologies to ensure the functionality of our website, deliver our services, analyze usage in an anonymized form, and improve the user experience. Cookies are small data files stored on your device and retrieved during future visits. They help us enable technical processes, remember preferences, and deliver content.

    You can manage or delete cookies at any time via your browser settings. Please note that disabling cookies may limit the functionality of our website.

    To manage your cookie preferences, we use the tool Real Cookie Banner.

    7. Cookie-Management

    Real Cookie Banner

    We use the Real Cookie Banner service to manage your consent for cookies and similar technologies on our website. The provider is devowl.io GmbH, Tannet 12, 94539 Grafling, Germany.

    Real Cookie Banner stores your consent decisions so that they do not need to be requested again on each visit. For this purpose, cookies are set to save your preferences and ensure that only the services you have approved are activated.

    Data processing is based on Article 6(1)(c) GDPR (legal obligation), as we are required to document your consent in a verifiable manner, and on Article 6(1)(f) GDPR (legitimate interest), as we have a legitimate interest in the legally compliant management of cookie consent.

    You can change or withdraw your consent at any time: Change privacy settings

     

    Du kannst deine Einwilligung jederzeit ändern oder widerrufen: Change privacy settings

    8. Online Appointment Scheduling

    Calendly

    We use Calendly, a scheduling service provided by Calendly LLC, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA, for appointment bookings. Since all appointments are booked through this system, its use is essential.

    When you book an appointment via Calendly, personal data is processed. This may include:

    • Name

    • Email address

    • Phone number (if applicable)

    • Date and time of the scheduled appointment

    • Additional information you may provide in the booking form

    Calendly uses cookies and similar technologies to facilitate the booking process, remember preferences, and recognize returning users. Calendly may also use this data for its own analytics and security purposes. We have no control over this processing.

    Data processing is based on Article 6(1)(f) GDPR (legitimate interest), as efficient and user-friendly appointment scheduling is integral to our business model and no alternative system is available. Where Calendly processes data for its own purposes, such processing is governed by Calendly’s privacy policy.

    9. Online-Meetings & Coaching Sessions

    Zoom

    We use the Zoom video conferencing platform, operated by Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA, to conduct online meetings and coaching sessions.

    Processing is based on our legitimate interest under Article 6(1)(f) GDPR, as online meetings and coaching are a core part of our services. If you voluntarily share personal data during a session, this processing is based on your consent in accordance with Article 6(1)(a) GDPR.

    Zoom may process the following types of data:

    • Name and email address (if registering or invited)

    • IP address and device-related technical information

    • Meeting metadata (e.g. duration, participants)

    Zoom may also process data for its own purposes, such as service improvement and security. We have no control over this. For further details, please refer to Zoom’s privacy policy.

    If personal data is transferred to the United States, this is done on the basis of Standard Contractual Clauses (SCCs) in accordance with Article 46 GDPR.

    10. Social Sharing

    Divi Social Sharing Buttons Maker

    We use a privacy-friendly social sharing plugin that is deactivated by default. It allows you to share content from our website on social media using a Shariff-based solution, which replaces traditional share buttons and prevents data from being sent automatically.

    When you click a social media button, you activate the plugin and consent to the possible transfer of your data (e.g., from your logged-in account) to the selected platform. We have no control over the extent, content, or use of data transferred — for details, please refer to the respective provider’s privacy policy.

    If you prefer not to use this functionality, simply do not click the sharing buttons.

    11. Web Analytics

    Matomo

    We use Matomo, a privacy-friendly open-source web analytics service, to collect usage statistics (e.g., page views, clicks). The provider is InnoCraft Limited, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand.

    Processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, as we have a legitimate interest in anonymized website usage analysis for the purpose of optimizing our services. If you consent to Matomo cookies via our cookie banner, the processing is additionally based on your consent under Article 6(1)(a) GDPR.

    All analytics data is processed on our own servers – no data is shared with third parties. Personal data is processed in a way that prevents direct identification.

    Matomo cookies are only set if you have given explicit consent via the cookie banner. However, privacy-compliant analysis is also possible without cookies. You may withdraw your consent at any time by adjusting your privacy settings.

    Opt-out: Change privacy settings

    12. Newsletter & Email Campaigns

    Brevo

    We use Brevo (formerly Sendinblue), operated by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send newsletters and email campaigns. Brevo offers a secure and GDPR-compliant mailing infrastructure.

    Emails are sent based solely on your explicit consent (Article 6(1)(a) GDPR). We use the double opt-in procedure to verify your consent: after signing up, you will receive a confirmation email. Only after confirming will your subscription be activated. The time of registration and confirmation as well as your IP address are stored to provide proof of compliance with legal requirements.

    Brevo uses recipient data solely to improve its services and for statistical analysis. No personal data is transferred or used for direct communication by Brevo. For more information, please refer to Brevo’s privacy policy.

    Our newsletters inform you about our services and may occasionally include anonymous surveys about your preferences.

    To subscribe, your email address is usually sufficient. For personalized messages, we may also ask for your name or other optional information relevant to the newsletter.

    You may withdraw your consent at any time via the unsubscribe link in each email. This does not affect the legality of processing carried out before the withdrawal.

    13. Online-Marketing & Tracking

     

    We use tracking technologies to evaluate the effectiveness of our advertising and to improve our online marketing efforts. The legal basis for this processing is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time.

    PixelYourSite

    Our website uses PixelYourSite, a tool for managing and controlling tracking services. The provider is Minimal Work SRL, Olteni 145, Bujoreni, Valcea, Romania.

    PixelYourSite sets cookies and similar technologies to track user interactions on our site. This data is used to manage services such as Meta Pixel and to measure ad performance. PixelYourSite processes your consent and ensures that tracking services are only activated if you have agreed.

    For more information, please refer to PixelYourSite’s privacy policy.

    Opt-out: Change privacy settings

    Meta Pixel

    Via PixelYourSite, we use Meta Pixel (formerly Facebook Pixel) to analyze user behavior on our website and to measure the effectiveness of our ads. The provider is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

    Meta Pixel collects information such as visited pages, interactions, and return visits. If you are logged into Facebook or Instagram, Meta may associate this data with your profile. For more information on data processing by Meta, please see Meta’s privacy policy.

    Opt-out: Change privacy settings Change privacy settings
    Alternatively: clear your browser data and adjust your selection again.

    YouTube

    Our website does not embed YouTube videos or content directly. However, due to technical integrations by third-party tools, personal data may still be processed by YouTube (Google LLC).

    YouTube may use cookies or similar technologies to collect certain information. This can include analysis of user behavior or the display of personalized advertising. For more information, refer to Google’s privacy policy.

    Opt-out: Change privacy settings

    14. Changes to This Policy

     

    We reserve the right to update this privacy policy at any time, particularly in response to changes to our website or the implementation of new technologies. Continued use of our site after such changes indicates your acceptance of our updated privacy and data protection practices.

    Data Controller:

    HYPspacedesign GmbH
    Winterhuder Weg 29
    22085 Hamburg, Germany
    privacy@humanreverseengineering.org

    This policy is effective as of April 8, 2024.
    Last updated: March 17, 2025.