Privacy Policy (GDPR)

There is no cookie banner on this website. Not one second of your lifetime should go into clicking banners away or, heaven forbid, setting them "individually." I do not collect data for the big tech companies: no Google Analytics, no Facebook pixel, no advertising cookies. Nor for the big AI companies. Whatever remains technically necessary, I disclose below.

Controller within the meaning of data protection law (Art. 4 No. 7 GDPR)

If you have questions about your personal data — access, rectification, blocking, erasure — please contact our data protection officer:

Data protection officer contact

Email:

Legal notice

The legally binding version of this privacy policy is the German one.

Server log data when you visit this website

When you use our website, our hosting provider die netztaucher GmbH (Am Gutshof 36, 16278 Angermünde, Germany) collects the usual server log data: IP address, date and time of the request, content of the request, access status/HTTP status code, amount of data transferred, referring website, browser type and version, operating system and language.

This data arises for technical reasons as the page is delivered. It is not collected via cookies, not evaluated for statistical purposes and not combined with any other data. It is stored for a maximum of 30 days and serves solely to provide, secure and stabilize the website. A data processing agreement is in place with the provider.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
netztaucher privacy policy: https://netztaucher.com/datenschutz

Routine erasure and blocking of personal data

Personal data is stored only as long as necessary for the respective purpose or as required by law. After that, it is routinely deleted or blocked.

Use of cookies

We set no cookies for analytics, advertising or statistical purposes. There is no tracking, no recognition across websites and no profiling.

On the sales pages, exactly one cookie is set (ds24c.v1), and it is set by the script of our reseller Digistore24. It is technically necessary for processing your purchase — details in the next section. On all other pages this script is not loaded and no cookie is set.

Digistore24: reseller, payment processing and affiliate program

Our digital products are not sold by us but by Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Digistore24 acts as an authorized reseller: Digistore24 is your contractual partner when you buy, handles the order, the payment and the invoice, and remits the applicable sales tax. In doing so, Digistore24 acts as an independent controller within the meaning of the GDPR.

For this sale to work technically, our sales page embeds a script from Digistore24. It prepares the purchase and attributes orders to the right partner (affiliate) and to any discount codes. To do so, it sets the cookie ds24c.v1. Since the entire purchase runs through Digistore24 as the reseller, this cookie is technically necessary for the service you asked for; it falls under the exception in Section 25(2) No. 2 TDDDG (the German data protection act for telecommunications and digital services, which implements the EU ePrivacy Directive) and is therefore loaded without prior consent. It does not serve advertising and does not analyze your behavior.

Further information on data processing by Digistore24: https://www.digistore24.com/page/privacy

Contact form (support)

We provide a form for support requests. It runs on our own server (timdaugs.com) — the form software is self-hosted, so what you type does not go to an outside form provider.

The form is protected against spam by reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA checks whether an entry comes from a human being or from a bot. In the process, data is transmitted to Google — in particular your IP address as well as information about your browser and your behavior on the form page; the processing may also take place on servers in the USA.

That is why we do not load the form automatically. At first you see nothing but a notice and a button. Only when you click it are the form and reCAPTCHA loaded — before that, not a single request goes to Google. Your consent covers this one loading process. You can avoid it by not loading the form and writing to us by email instead (address on the support page and in the legal notice).

Legal basis for loading reCAPTCHA: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG. Legal basis for handling your request: Art. 6(1)(b) GDPR.

Google's privacy policy: https://policies.google.com/privacy

Handling your request (Help Scout)

Requests you send arrive in our CRM system Help Scout Inc., 131 Tremont St, Boston, MA 02111, USA, so that we can answer them and follow the history. Help Scout sets no cookies on this website — the service only comes into play once you have submitted the form. A data processing agreement under Art. 28 GDPR is in place with Help Scout, and the transfer to the USA is safeguarded by EU Standard Contractual Clauses.

Artificial intelligence: The AI feature of Help Scout is switched off in our account. Your requests are not handed to Help Scout's AI services. Where we use AI to formulate replies, we do so exclusively with models running locally on our own machines. No content is transmitted to external AI providers or onto the internet in the process.

Legal basis: Art. 6(1)(b) GDPR. Help Scout privacy policy: https://www.helpscout.net/company/legal/privacy

If you would rather not use Help Scout, you can reach us by email or by post.

Passing on your purchase data (Zapier)

When you buy one of our products, your purchase data has to get from Digistore24 to our email system — otherwise you would not receive access to your product. Zapier (Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA) handles that step. What is passed on is your name, your email address and the product you bought — not your payment details. The transfer is encrypted.

No Zapier script runs on this website. The service works exclusively in the background and only after a purchase; your behavior on this website is not recorded in the process.

A data processing agreement under Art. 28 GDPR is in place with Zapier. Zapier processes data in the USA and is certified under the EU-US Data Privacy Framework — this transfer is therefore covered by an adequacy decision of the EU Commission; EU Standard Contractual Clauses apply in addition.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract — you are to receive your product) and Art. 6(1)(f) GDPR (legitimate interest in automated, error-free processing).
Zapier's privacy policy: https://zapier.com/privacy

Emails after your purchase (Drip)

When you buy one of our products, we add your email address to our email system Drip (Avenue 81, Inc., 100 S 5th St, Minneapolis, MN 55402, USA) in order to send you access to the product, support information and news about our products.

No Drip script runs on this website. There is no signup form here; all Drip receives from us is your purchase data. Your behavior on this website is not recorded.

Tracking pixel and link measurement in our emails: Our emails contain a small, invisible image (a tracking pixel) that tells us whether and when an email was opened. In addition, the links in our emails are rewritten: your click first passes through a server of our email system Drip, is counted there, and is then forwarded to the actual destination. We use both to see which information is getting through and what interests you.

You can prevent the tracking pixel by switching off the automatic loading of images in your email program — then it is not loaded and we learn nothing about the opening. The link measurement you can only avoid by not clicking the links in our emails; you can reach the destination pages directly via our website at any time instead.

Legal basis for measuring openings and clicks: Art. 6(1)(f) GDPR (legitimate interest in measuring how well our emails perform). You may object to this at any time — informally to us or via the unsubscribe link in every email.

We have agreed data processing with Drip under Art. 28 GDPR, and the transfer to the USA is safeguarded by EU Standard Contractual Clauses. Your data is used there solely to send emails to you — not for third-party advertising, not for analytics.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(f) GDPR (direct marketing to existing customers under Section 7(3) of the German Act against Unfair Competition, UWG). You may object to receiving these at any time — via the unsubscribe link in every email or informally to us.

Audio sample (Amazon Web Services)

The audio sample on our sales page is hosted at Amazon Web Services (AWS). It is not loaded until you click "Play" — before that, no connection to Amazon is made and none of your data is transmitted. When it plays, your IP address is transmitted to AWS for technical reasons; no cookie is set in the process.

A data processing agreement under Art. 28 GDPR is in place with AWS, supplemented by EU Standard Contractual Clauses.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, efficient audio delivery).
AWS privacy information: https://aws.amazon.com/compliance/germany-data-protection/

SSL encryption

Our website uses HTTPS with an SSL certificate from Let's Encrypt. This ensures that your data is transmitted encrypted and cannot be read or altered by third parties. You can recognize it by the "https://" address and the padlock icon in your browser's address bar.

Changes to this privacy policy

We reserve the right to adapt this policy in order to bring it in line with current legal requirements or technical changes.

Your rights as a data subject

You have the right to access, rectify, erase or restrict the processing of your personal data, as well as the right to data portability and the right to lodge a complaint with a supervisory authority.