Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides an overview of how your personal data is processed when you visit this website. Personal data is any information by which you can be personally identified. Detailed information on data protection is provided in the sections below.

Data Collection on This Website

Some personal data is collected when you voluntarily provide it to us, for example by submitting a contact request.

Other data is collected automatically or after your consent when you visit this website through our IT systems. This primarily includes technical data such as browser type, operating system, IP address, or time of access.

Purpose of Data Processing

Data is processed to ensure the secure and error-free operation of the website, to respond to inquiries, to analyze website usage where consent has been given, and to initiate or perform contractual relationships.

Your Rights

You have the right at any time to obtain information about your stored personal data, its origin, recipients, and purpose. You also have the right to rectification, erasure, restriction of processing, data portability, and to object to processing.

You may revoke consent at any time with effect for the future.

You also have the right to lodge a complaint with a competent supervisory authority.

2. Hosting and Content Delivery Networks

External Hosting

This website is hosted externally. Personal data collected on this website may be stored on the servers of the hosting provider. This may include IP addresses, access data, communication data, and other technical information generated when using the website.

External hosting is carried out for the purpose of fulfilling contractual obligations pursuant to Art. 6 para. 1 lit. b GDPR and based on our legitimate interest in a secure, fast, and reliable website pursuant to Art. 6 para. 1 lit. f GDPR.

Hosting Provider

This website is hosted by an external service provider based in the European Union. In the course of providing its services, the hosting provider may process technical access data such as IP addresses and server log data.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

3. General Legal Information

Controller

The controller responsible for data processing on this website is:

Storage Period

Personal data is stored only as long as necessary for the respective purpose or as required by statutory retention obligations. If you submit a legitimate deletion request or revoke consent, your data will be deleted unless we have other legally permissible grounds for storage (e.g. tax or commercial law retention periods of 6 or 8 years pursuant to § 257 HGB); in such cases, data will be blocked from further processing.

Legal Bases

Processing is carried out on the basis of:

• → Art. 6 para. 1 lit. a GDPR (consent)
• → Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures)
• → Art. 6 para. 1 lit. c GDPR (legal obligation)
• → Art. 6 para. 1 lit. f GDPR (legitimate interest)

Where consent for cookies or similar technologies is required, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent may be revoked at any time.

Data Transfers to Third Countries

We may use tools from companies based in countries outside the EU/EEA ("third countries"), including US companies not certified under the EU-US Data Privacy Framework (DPF). Where such tools are active, your personal data may be transferred to and processed in those countries. We note that the USA is generally considered a secure third country under the DPF. Data transfers are safeguarded via EU Standard Contractual Clauses and, where available, DPF certification.

Recipients of Personal Data

In the course of our business activities, we work with external service providers. Personal data is only shared with external parties where necessary for contract fulfilment, where legally required, based on legitimate interest (Art. 6 para. 1 lit. f GDPR), or where another legal basis permits disclosure. Where data processors are used, data is shared only on the basis of a valid data processing agreement.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security. An encrypted connection is indicated by "https://" in the browser address bar and the lock icon.

4. Data Collection on This Website

Server Log Files

The hosting provider automatically collects server log files including browser type, operating system, referrer URL, hostname, time of request, and IP address.

Processing is based on Art. 6 para. 1 lit. f GDPR to ensure technical stability and security.

Contact Requests

If you contact us via email, contact form, or other means, your inquiry including personal data will be processed for the purpose of handling your request.

Legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.

5. Cookies and Consent Management

This website uses cookies and similar technologies. Cookies are small data packets stored on your device. They may be session cookies (deleted after your visit) or persistent cookies (remaining until you delete them or they expire automatically).

Technically necessary cookies may be used to ensure basic website functionality and security (Art. 6 para. 1 lit. f GDPR).

Where consent is required for the use of cookies or similar technologies, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent may be revoked at any time.

You can configure your browser to notify you about cookies, allow cookies only in specific cases, or block them entirely. Disabling cookies may limit website functionality.

Consent Management

This website uses its own cookie consent banner to obtain and document user consent for cookies and tracking technologies.

Consent preferences are stored locally in your browser and are retained until revoked or deleted. You can reset your cookie preferences at any time by clearing your browser's local storage data.

6. Analytics and Marketing

Google Tag Manager

This website uses Google Tag Manager (GTM), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GTM is a tag management system that allows us to manage tracking and analytics tags on our website without modifying the website code directly.

GTM itself does not collect personal data and does not set cookies. However, GTM triggers other tags (such as Google Analytics and Meta Pixel) that may collect data and set cookies as described in their respective sections below.

Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient tag management). Tags that require consent are only activated after you have given your consent.

Privacy policy: https://policies.google.com/privacy

Google Analytics

This website uses Google Analytics, provided by Google Ireland Limited, Dublin, Ireland.

Google Analytics enables analysis of website usage. Cookies and similar technologies may be used for this purpose. Processing occurs only with your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.

IP anonymization is enabled.

Data transfers to the USA are safeguarded via EU Standard Contractual Clauses and EU-US Data Privacy Framework certification.

Privacy policy: https://support.google.com/analytics/answer/6004245

Opt-out plugin: https://tools.google.com/dlpage/gaoptout

DPF listing: https://www.dataprivacyframework.gov/participant/5780

Meta Pixel

This website uses the Meta Pixel (formerly Facebook Pixel), provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

The Meta Pixel allows us to track user interactions on our website after they have viewed or clicked on a Meta (Facebook/Instagram) advertisement. This helps us measure the effectiveness of our advertising campaigns.

The Meta Pixel is activated only with your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We track PageView events (when you visit a page) and Schedule events (when you book a call).

Data transfers to the USA are safeguarded via EU Standard Contractual Clauses and EU-US Data Privacy Framework certification.

Privacy policy: https://www.facebook.com/privacy/policy/

DPF listing: https://www.dataprivacyframework.gov/participant/4452

7. Third-Party Services

Calendly

We use Calendly LLC, USA, to schedule appointments.

Processing is based on Art. 6 para. 1 lit. f GDPR or consent where applicable. A data processing agreement (AVV) pursuant to Art. 28 GDPR has been concluded with Calendly.

Calendly is certified under the EU-US Data Privacy Framework.

Privacy policy: https://calendly.com/privacy

DPF listing: https://www.dataprivacyframework.gov/participant/6050

Stripe

Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

When you make a purchase, your payment data (e.g. name, payment amount, account details, credit card number) is processed by Stripe for the purpose of payment processing. The use of Stripe is based on Art. 6 para. 1 lit. b GDPR (contract fulfilment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in a smooth, secure payment process).

Data transfers to the USA are safeguarded via EU Standard Contractual Clauses.

Privacy policy: https://stripe.com/privacy · GDPR guide

Kit (formerly ConvertKit)

We use Kit (Kit Technologies Inc., 113 Cherry St #92768, Seattle, WA 98104, USA) for email marketing automation and subscriber management.

When you subscribe to our newsletter or give marketing consent, your email address, name, IP address, and signup timestamp are transmitted to Kit. Kit may also collect data on your interaction with emails (e.g. opens and clicks).

Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future.

Data transfers to the USA are safeguarded via EU Standard Contractual Clauses.

Privacy policy: https://kit.com/privacy

Wistia

We use Wistia (Wistia, Inc., 17 Tudor Street, Cambridge, MA 02139, USA) for hosting and delivering video content within our online courses.

When you watch a video, Wistia may set technically necessary cookies to ensure proper playback functionality and may collect usage data such as play progress and device information. Video content is loaded from Wistia's servers, and your IP address is transmitted in the process.

Processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfilment for purchased course content) and Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable video delivery).

Data transfers to the USA are safeguarded via EU Standard Contractual Clauses.

Privacy policy: https://wistia.com/privacy

8. eCommerce and Contract Data

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data for the purpose of establishing, fulfilling, and modifying our contractual relationships. Usage data is processed only insofar as necessary to enable or bill for use of the service. Legal basis: Art. 6 para. 1 lit. b GDPR.

Collected customer data is deleted after completion of the order or termination of the business relationship, subject to applicable statutory retention periods.

Data Transmission upon Contract Conclusion

Personal data is transmitted to third parties only where necessary for contract fulfilment, such as to the payment service provider. No further disclosure occurs unless you have expressly consented. Your data will not be shared with third parties for advertising purposes without your express consent.

9. Newsletter

Double Opt-In (DOI)

Our newsletter subscription uses a Double Opt-In process. After you sign up, you will receive a confirmation email asking you to verify your email address. Only after clicking the confirmation link will you be added to our mailing list. This ensures that only the rightful owner of the email address can subscribe.

Content and Purpose

Our newsletter contains information about our coaching programs, events, free resources, and related content. Processing is based exclusively on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 7 para. 2 no. 3 UWG.

Performance Tracking

Our newsletters may contain tracking pixels and tracked links to measure open rates and click-through rates. This data is used to improve the relevance and quality of our communications. If you do not wish to be tracked, you can unsubscribe from the newsletter entirely.

Unsubscribe

You may unsubscribe from the newsletter at any time by clicking the unsubscribe link contained in every email, or by contacting us directly at fabian@fvmm-group.com. Upon unsubscription, your data will be deleted from the mailing list unless retention is required for legal or evidentiary purposes.

10. Your Rights in Detail

Under the GDPR, you have the following rights:

Right of Access

You have the right to obtain information about your stored personal data at any time, free of charge.

Right to Rectification

You have the right to demand correction of inaccurate personal data concerning you.

Right to Erasure

You may demand the deletion of your personal data, for example where the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to demand the restriction of processing of your personal data. This right exists in particular where the accuracy of your data is disputed, where processing is unlawful, or where we no longer need the data but you require it for the establishment, exercise, or defence of legal claims.

Right to Data Portability

Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used and machine-readable format, insofar as you have provided the data to us.

Right to Withdraw Consent

Where you have given us consent to process your personal data, you may withdraw it at any time. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

Right to Object (Art. 21 GDPR)

Where data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time. If you object, your data will no longer be used for direct marketing purposes.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.