Privacy Policy

1. Who We Are

This website is operated by Marco Härter ("we", "us", "our"). We are the controller within the meaning of Art. 4(7) GDPR and process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law.

Controller:
Marco Härter, Klostergasse 23, 04523 Pegau, Germany
Email: marco@marcohaerter.com

2. What Data We Collect

Beyond the access data described in section 4, we collect personal data only when you voluntarily provide it through our website:

• Email address — when you subscribe to our newsletter, join the book waitlist, or complete an assessment
• Assessment responses — your answers to questionnaire questions (no personally identifiable information beyond email)
• Technical metadata — browser type and referring URL, collected automatically when submitting forms

We do not use analytics, tracking or advertising cookies, and we load no third-party content. The only information stored on your device is a language preference (NEXT_LOCALE), which is strictly necessary to deliver the site in the language you selected and therefore does not require consent under § 25(2) TDDDG.

3. Why We Collect Your Data

We process your personal data for the following purposes:

• Newsletter & book waitlist: To send you updates, articles, and launch notifications you subscribed to (Art. 6(1)(a) GDPR — consent)
• Assessment results: To deliver personalized results and recommendations based on your responses (Art. 6(1)(a) GDPR — consent)
• Service improvement: To understand how our assessments and content perform in aggregate, using anonymized data (Art. 6(1)(f) GDPR — our legitimate interest in improving the content and functionality we offer)

4. Hosting and Server Log Files

This website is hosted on a server operated by IONOS SE in Germany. Each time the site is accessed, data is automatically written to log files: IP address, date and time of the request, the page requested, volume of data transferred, referrer URL, browser type and operating system.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the site securely and without disruption, and in investigating faults and attacks. This data is not merged with other sources and is not used to identify you.

5. How We Store Your Data

Your data is stored on servers located in the European Union. Assessment responses are stored in a PostgreSQL database with encrypted connections. Email addresses for newsletters and waitlists are managed through our email service provider, Brevo.

Providing your data is neither legally nor contractually required. You are under no obligation to provide it; the only consequence of not doing so is that you cannot use the newsletter, waitlist or assessment.

6. How Long We Keep Your Data

We keep personal data only for as long as it is needed for the purpose it was collected for:

• Newsletter and waitlist data — until you withdraw your consent or unsubscribe; the record of your consent is kept afterwards for as long as needed to demonstrate it
• Assessment responses — until you ask us to delete them
• Enquiries by email — until your enquiry has been dealt with in full, unless statutory retention obligations require otherwise
• Server log files — deleted once they are no longer required for security and fault analysis

7. Who We Share Your Data With

We do not sell, trade, or rent your personal data. Your data may be shared with:

• Brevo (Sendinblue GmbH) — our email service provider, for sending the newsletter, book updates, and confirmation/welcome emails; based in the EU, processor under Art. 28 GDPR with a data processing agreement in place
• IONOS SE — hosting and infrastructure; processor under Art. 28 GDPR, servers located in Germany

We do not transfer data outside the European Economic Area (EEA).

8. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of your personal data (Art. 15)
• Rectification — correct inaccurate data (Art. 16)
• Erasure — request deletion of your data (Art. 17, "right to be forgotten")
• Restrict processing — limit how we use your data (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Withdraw consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3))
• Lodge a complaint — with a supervisory authority (Art. 77) — see section 10

To exercise any of these rights, contact us at marco@marcohaerter.com. We will respond within one month of receiving your request.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

10. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:

Die Sächsische Datenschutzbeauftragte
Devrientstraße 5
01067 Dresden, Germany

11. Newsletter & Email Communications

When you subscribe to our newsletter or join a waitlist, you consent to receive email communications from us. We use a double opt-in procedure: you will receive a confirmation email and your subscription only becomes active once you confirm it. Every email includes an unsubscribe link. You can withdraw your consent at any time by clicking "unsubscribe" or contacting us directly.

12. Assessment Data

When you complete an assessment, your answers and calculated score are stored to provide your results. If you provide your email, it is linked to your response so we can send you a detailed report. If you skip the email step, your response is stored anonymously.

You can request deletion of your assessment data at any time by contacting us with the email address you used.

13. Changes to This Policy

We may update this privacy policy from time to time, for example when we change how the site works or which service providers we use. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

14. Contact

If you have questions about this privacy policy or your data, contact us at:
marco@marcohaerter.com