Privacypolicy
This is a courtesy translation. Only the German version is legally binding.
1. Controller
The controller for data processing on this website is:
APEX Performance, Tayfun Ertural
Grabenfeld 12a, 85077 Manching
Email: apex.performance.official@gmail.com
2. General information on data processing
This website is purely informational. We process personal data only to the extent necessary to provide the website and deliver it technically. No tracking and no advertising profiling takes place on the website itself. We do not use cookies for analytics or marketing. One exception is the analysis of the webinar emails, described in section 7 and based on your consent.
3. Hosting (GitHub Pages)
This website is hosted on GitHub Pages, a service of GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When the website is accessed, technically necessary data (for example IP address, date and time of access, page accessed, browser used) is processed in server log files. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). For the transfer of data to the USA, GitHub relies on standard contractual clauses.
4. Fonts (Google Fonts)
For consistent presentation, this website uses fonts from Google Fonts, a service of Google Ireland Limited. When the fonts are loaded, a connection to Google servers is established and the IP address may be transmitted. The legal basis is Art. 6 (1) (f) GDPR. Serving the fonts directly from our own server (local hosting) is planned in order to avoid this transfer.
5. Appointment booking (Calendly)
To book an intro call we link to the external service Calendly (Calendly LLC, USA). Only once you click the button and are forwarded to Calendly is your information (for example name, email, preferred appointment) processed there. The booking additionally asks about your enquiry, such as the type of request, timeframe, current limitations or goals, previous attempts and available training time. Diagnoses or medical findings are not requested. No data is transmitted to Calendly from our website itself. Calendly’s privacy terms apply.
6. Videos (YouTube)
On the Back Reset page and on the webinar page you reach after signing up, we embed videos via YouTube (Google Ireland Limited, Ireland). We use a two-click solution for this: when the page is loaded, only a locally stored preview image is shown, there is no connection to YouTube and no data is transferred.
Only when you actively click the play button is the video loaded in extended privacy mode (youtube-nocookie.com). This establishes a connection to Google servers and transmits your IP address as well as technical information about your device. A transfer to the USA cannot be ruled out. The legal basis is your consent given by clicking the play button under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Google’s privacy terms apply.
7. Webinar and emails (MailerLite)
For sign-ups to my free back pain webinar and for sending the related emails I use MailerLite, a service of MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. According to MailerLite, the data is stored in a data centre in the European Union. Where its affiliate MailerLite, Inc. in the USA is involved, it is certified under the EU-US Data Privacy Framework. A data processing agreement under Art. 28 GDPR is in place with MailerLite.
Sign-up and double opt-in: When you sign up on the webinar page, your email address and, if provided, your first name are sent to MailerLite. You then receive an email in which you confirm your sign-up. Only after that do you get access to the webinar and the further emails. To prove your sign-up, the time and IP address of the sign-up and of the confirmation are stored. The legal basis is your consent under Art. 6 (1) (a) GDPR.
Content: After confirming, you receive the link to the webinar and, over the following days, four more emails about back pain, including information about my coaching offers.
Analysis: The emails measure whether they are opened and which links are clicked. For this they contain a small tracking pixel, and links run via MailerLite. This shows me which content is helpful. This analysis is part of your consent.
Form on the website: For the sign-up form to work, the webinar page loads scripts from MailerLite servers when you open it. This transmits your IP address to MailerLite, and MailerLite counts views of the form. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in a working sign-up form.
Unsubscribing and storage period: You can withdraw your consent at any time, via the unsubscribe link at the end of every email or by emailing me. After that you will not receive any more emails. Your data is deleted as soon as it is no longer needed for sending. We may keep the proof of your sign-up for up to three years in order to demonstrate the earlier consent.
8. External links (Instagram)
Our website contains links to our Instagram profile. When you click them you are forwarded to Instagram (Meta Platforms Ireland Ltd.). We have no influence on the data processing that takes place there.
9. Contact by email
If you contact us by email, we process your information in order to handle your enquiry. The legal basis is Art. 6 (1) (b) or (f) GDPR. The data is deleted as soon as it is no longer required.
10. Your rights
Within the statutory provisions you have the right to:
- access to the data processed about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).
11. SSL encryption
For security reasons this site uses SSL or TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser address bar.