Privacy Policy

This is an English translation for your convenience. The legally binding version is the German one at datenschutz.html.

1. Controller

Björn Windorf
Hardgraben 4
90579 Langenzenn, Germany
Email: info@bjoernwindorf.com

2. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, acting as a processor. When you open a page, the server records access data: referrer, the page or file requested, browser type and version, operating system, device type, time of access and your IP address. According to IONOS, the IP address is stored in the log files in shortened, anonymised form and is used only for a rough location estimate.

The purpose is the technical delivery and security of the site and anonymised access statistics, on the basis of Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning and comprehensible service). IONOS stores this log data for a maximum of eight weeks and deletes it afterwards. It is not passed to third parties or to countries outside the EU.

3. No cookies, no analytics, no external fonts

This site sets no cookies of its own, embeds no analytics or tracking services, and loads no external fonts. Every design asset is served from this server. No cookie banner is therefore required.

4. YouTube videos

The course pages give you access to videos hosted on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The videos do not load automatically. When you open a course page you see only a preview panel served entirely from this server — no connection to Google exists at that point. Only when you click a panel is the player loaded and a connection to YouTube established.

That click transmits data to Google, including your IP address and details about your device and browser. If you are signed in to a Google account at the same time, Google may associate the request with that account. The player is embedded via youtube-nocookie.com in privacy-enhanced mode.

The legal basis is Art. 6(1)(a) GDPR — your consent, given by actively clicking the preview panel. You can withdraw it by reloading the page and not starting a video.

Transfer to the USA cannot be excluded. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission covers the transfer. More: policies.google.com/privacy

5. Orders and payment

The products are sold through Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Clicking an order button takes you off this website and onto Digistore24's checkout.

Everything you enter there — name, email address, billing address and payment details — is collected and processed by Digistore24 as an independent controller. As the vendor I receive only what is needed to deliver and support the product, normally name and email address. I process those details to deliver and support your purchase on the basis of Art. 6(1)(b) GDPR and delete them once they are no longer needed; statutory retention periods under German tax law (§ 147 AO) remain unaffected. Digistore24's own policy: digistore24.com/page/privacy

6. Contact form and email

You can write to me on the contact page. I process what you enter there: your name, your email address and the text of your message.

These details are not stored on the server and go into no database. The form sends them straight to my mailbox as an email and discards them afterwards. To keep automated submissions out, the form contains a field invisible to humans and checks how much time passed between opening and sending; no additional data about you is collected and no cookies are set.

The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or steps prior to one, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). I delete your message once it is dealt with and no statutory retention period applies. The same holds if you email me directly.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Consent can be withdrawn at any time with future effect.

You also have the right to lodge a complaint with the data protection supervisory authority responsible for your place of residence or for my place of business.

8. Version

Last updated: 8. September 2026