Privacy Policy

1. Data Controller

For questions about data protection, contact the email address above.

2. What Data We Collect

We collect data in two ways:

Data You Give Us Directly

• Name (from contact form or coaching inquiry)
• Email address (from contact form, coaching inquiry)
• Phone number (optional, from coaching inquiry)
• Message content (from contact form)
• Coaching goals and information (from coaching intake form)

Data Collected Automatically

• Pages you visit on our website
• Time spent on each page
• Device type (phone, tablet, computer)
• Browser type
• Approximate country (derived from the IP address, which is not stored)
• Page load time
• How you found our website (referrer)

This automatic data comes from Cloudflare Web Analytics (cookie-free visitor statistics) and web server logs. We do not use cookies for tracking. Fonts are hosted on our own server; no connection to Google Fonts is made.

3. Why We Collect This Data (Legal Basis)

Contact Form Submission

Why: To answer your question
Legal reason: Legitimate interest (responding to your message)

Coaching Inquiry Details

Why: To assess if we can help
Legal reason: Legitimate interest

Website Analytics (Cloudflare Web Analytics)

Why: To improve our website
Legal reason: Legitimate interest (Art. 6(1)(f) GDPR) in understanding how visitors find and use the website. No cookies are set and no visitor profiles are created.

4. Who We Share Your Data With

Cloudflare Web Analytics

What they do: Cookie-free, aggregated website statistics (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA)
Their privacy policy: https://www.cloudflare.com/privacypolicy/
Data they receive: Page visited, referrer, load time, browser and device type, approximate country; the IP address is transmitted technically but not stored to recognise you
Legally protected by: EU-US Data Privacy Framework and EU Standard Contractual Clauses

Hosting Provider (Hostinger)

What they do: Host our website
Their privacy policy: https://www.hostinger.com/privacy-policy
Data they receive: Server logs with IP addresses

5. How Long We Keep Your Data

• Contact form message: 30 days after we reply
• Coaching client data: 2 years
• Website statistics (Cloudflare): aggregated only, no personal profiles
• Website logs: 30 days

6. Your Rights

You have the following rights under German and EU law:

Right to Access

You can ask for a copy of all data we hold about you. Email contact@heikostribl.com. Response within 30 days. Free for the first request per year.

Right to Correction

You can ask us to fix incorrect data about you. Response within 30 days.

Right to Deletion (Right to Be Forgotten)

You can ask us to delete your data. Email contact@heikostribl.com with subject "Please delete my data". Response within 30 days. Exceptions: If we are required by law to keep it (e.g., tax records for 7 years).

Right to Object

You can ask us to stop processing your data for certain purposes. Email contact@heikostribl.com with subject "Opt-out Request".

How to opt-out of specific things:

• Analytics: email us (Art. 21 GDPR) or use a tracking blocker in your browser, which prevents the Cloudflare script from loading

Right to Portability

You can ask for your data in a portable format (CSV or JSON file). Email with subject "Data Portability Request". Response within 30 days.

Right to Lodge a Complaint

If you believe we have violated your data protection rights, you can complain to the German Data Protection Authority:

Landesbeauftragte für Datenschutz Baden-Württemberg
Website: https://www.baden-wuerttemberg.datenschutz.de/

7. International Data Transfers

Some of our service providers (Cloudflare, etc.) may process your data in the United States. This is permitted under the EU-US Data Privacy Framework, which provides adequate data protection safeguards. We have signed Standard Contractual Clauses (SCCs) with all service providers to ensure your data is protected.

8. Data Breach

If your personal data is compromised, we will:

• Notify you within 72 hours (by email)
• Explain what happened
• Tell you what steps we are taking
• Explain your rights

9. Changes to This Policy

We may update this privacy policy. We will notify you of significant changes by email or by posting notice on our website.

Last updated: 1 November 2026