This is an English translation provided for your convenience. Only the German version (Datenschutzerklärung) is legally binding.
1. Controller
Michael Geiger
Freelance trainer
Hindenburgstr. 1
72631 Aichtal
Germany
Contact:
2. Collection and processing of personal data
We collect personal data when you contact us via the contact form or the chat window: the name of the
contact person, the name and address of the facility, email address, phone number (optional) and the
content of your message. If you select one of the Google suggestions in the form, we additionally take the
facility’s address, phone number and website from its public Google listing (see section 7 for details).
The phone number taken over is shown in the form and can be changed or deleted by you; a number you have
already entered is never overwritten. To assign your request, we also store which page of our website and,
where applicable, which advertising campaign the request was made through. Only the campaign parameters of
the address you called up are recorded (utm_source, utm_medium, utm_campaign, utm_term, utm_content), as
well as the click identifiers assigned by advertising networks (gclid, gbraid, wbraid, msclkid, fbclid),
where present – never the complete address line. We also note what kind of source your visit came from
(e.g. search engine, social network, other website or direct access): for this purpose, the host of the
previously visited page is immediately condensed into such a category on our server; only the category is
stored, never the host and never the referrer URL. We use this information exclusively internally to
assign your request; it is not transmitted to Google, Microsoft, Meta or other advertising networks. This
data is used exclusively to process your request, to prepare a quote and for the related contact
management.
3. Legal basis
Processing is carried out in accordance with Art. 6(1)(b) GDPR (performance of a contract or
pre-contractual measures).
4. Disclosure of data
Your data will not be passed on to third parties unless we are legally obliged to do so. For the technical
operation of the website (hosting, email delivery) we use service providers who process personal data
exclusively on our behalf and in accordance with our instructions.
5. Storage period
We store your data only for as long as is necessary to process your request and for the subsequent
communication. If no contract is concluded, we delete the data once processing is complete; statutory
retention obligations (in particular under § 147 of the German Fiscal Code, AO) remain unaffected. If a
request temporarily cannot be delivered by email, it is buffered on the server and automatically deleted
after 30 days at the latest.
6. Your rights
You have the right at any time to access, rectification, erasure or restriction of processing of your
personal data as well as the right to data portability (Art. 15–20 GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. This concerns, for example, the audience measurement, the address suggestions and the server log files.
You can lodge complaints with the competent data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany (www.baden-wuerttemberg.datenschutz.de).
7. Use of Google Maps / Google Places
Our website uses the Google Maps Platform (Places API) for the address and contact
suggestions in the contact form. When you use this function, the search terms entered and location data
are transmitted to and processed on servers of Google (Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Ireland). Data may also be transferred to Google LLC in the USA; Google is certified under the
EU-US Data Privacy Framework, so that a level of data protection recognised by the EU Commission exists
(Art. 45 GDPR). Google may use its own cookies or similar storage technologies when the service is loaded.
This processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in offering you the
convenience of automatic address suggestions. The Google service is only loaded once you reach the contact
form; merely viewing the rest of the page does not transfer any data to Google.
If you select a suggestion, we retrieve the information on the facility publicly provided by Google for
this entry and add its address, phone number and website to your request. Address and phone number are
entered into the corresponding form fields, where they are visible to you and can be changed; a phone
number you have entered yourself remains untouched. If you do not select a suggestion, no such information
is taken over.
Google may process data about your use of this function. Further information can be found in Google’s
privacy policy at:
https://policies.google.com/privacy
.
We do not store the search terms you enter in the facility field. Only the information you subsequently
send to us when submitting your request is stored permanently (see sections 2 and 5).
8. Audience measurement (without cookies)
We do not set any cookies ourselves. To improve our offering, we record anonymous usage events (e.g.
viewing a page, time spent on the page and scroll depth, clicking the request button, submitting the
contact form) exclusively on our own server. No IP addresses, no browser identifiers (user agent) and no
other identifying characteristics are stored; we only roughly derive whether a mobile device or a desktop
is used. Likewise, we record the kind of source of your visit only in rough categories (e.g. search engine,
social network, referring website or direct access); for this purpose, the host of the previously visited
page is condensed into such a category on the server – the complete referring address (referrer URL) is
not stored. If your visit came via an advertisement, we additionally record the name of the advertising
source (utm_source), the advertising campaign (utm_campaign) and the advertising channel (utm_medium). The
click identifiers assigned by advertising networks (e.g. gclid) are expressly not included in the audience
measurement – they are only recorded with the respective request (see section 2). If an advertisement is
not specifically labelled, we merely derive the name of the advertising network (e.g. “googleads”) from
the mere presence of such a click identifier and record it in place of the advertising source; the
identifier itself is neither transmitted nor stored. No profiling or cross-site tracking takes place, and
no third-party providers are involved. The legal basis is our legitimate interest in the statistical
evaluation and improvement of our offering pursuant to Art. 6(1)(f) GDPR. The event data recorded in this
way is automatically deleted after 14 months.
For the page to function, we use your browser’s session-bound storage (sessionStorage): it holds the entry
page of your visit, any campaign data of your entry (see section 2), the host of the previously visited
page (for the source category mentioned above) and the interaction status of the contact form and chat
window. These entries are only transmitted as part of the audience measurement described here or your
request, do not allow recognition across devices or websites and are automatically deleted when you close
the browser tab (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). So that the assignment is retained when you move
to another page of our website, we add the same campaign parameters to internal links during your visit;
the data never leaves our website.
9. Email communication
If you contact us by email, the data transmitted will be processed exclusively for the purpose of handling
your request.
10. Contact via the chat widget and messenger (WhatsApp)
On our German-language pages, you can easily send us a request via the chat window (“Frage stellen”). The
information you enter there (your question, name, facility if applicable, and the contact method you have
chosen with the corresponding address or phone number) is transmitted to our server and – as with the
contact form – processed exclusively to handle your request and to prepare a quote (Art. 6(1)(b) GDPR).
This is not a live chat system; no automated decision-making takes place. Section 7 (Google Maps / Places)
applies accordingly to the optional address suggestions in the chat.
If you choose WhatsApp as your contact method and we reply to you via WhatsApp, your phone
number and the content of the communication are processed via the WhatsApp service. The provider is Meta
Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland); data may be transferred to third
countries (in particular the USA). The legal basis is Art. 6(1)(b) GDPR; the use of WhatsApp is voluntary –
email and telephone are available as alternatives. Further information can be found in the WhatsApp/Meta
privacy policy at:
https://www.whatsapp.com/legal/privacy-policy-eea
.
11. Hosting
This website is operated on a server managed by us in a data centre in the European Union. All pages and
form data are transmitted with TLS encryption. The legal basis is our legitimate interest in providing the
website securely and reliably (Art. 6(1)(f) GDPR).
12. Access data (server log files)
When you call up the website, your browser automatically transmits information to the server (e.g. IP
address, browser type, date/time of access). This data is processed to ensure secure and trouble-free
operation and – exclusively within the server and without the involvement of third-party providers – for
an aggregated statistical evaluation of access; it is not combined with the data from requests. The log
files are automatically deleted after two months at the latest. To protect against misuse (e.g. large
numbers of automated requests), we additionally store IP addresses in pseudonymised form (as salted hash
values) for a maximum of one hour. When a request is submitted, we also check via a DNS query whether the
domain of your email address is technically reachable, in order to detect typing errors. The legal basis
for this processing is our legitimate interest in secure, stable operation and in the statistical
evaluation of our offering (Art. 6(1)(f) GDPR).
Last updated: August 2026 (translation: October 2026)