Privacy Policy

1. Controller

Responsible for data processing on this website is:

RITZI GmbH
Kreuzweidenstraße 20A
53604 Bad Honnef
Germany

Represented by: Kai Stubbe
Email: [email protected]

2. General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Data Collection on this Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator mentioned above.

How do we collect your data?
Your data is collected when you provide it to us (e.g., during orders, booking sessions, or contacting us). Other data is collected automatically by our IT systems when you visit the website (e.g., technical data such as browser, operating system).

What do we use your data for?

Processing orders (e-books, video courses)
Conducting booked 1-on-1 sessions
Communicating with you
Improving our offers
Marketing purposes (with your consent)

What rights do you have regarding your data?
You have the right to access, rectify, delete, restrict processing, data portability, and object to the processing of your stored personal data at any time, as well as the right to lodge a complaint with a supervisory authority.

3. Hosting and Content Delivery

GoHighLevel

We use GoHighLevel as a hosting and CRM platform. The provider is HighLevel Inc., 3820 Mansfield Hwy, Forest Hill, TX 76140, USA.

Processed Data: Contact details (name, email, phone number if applicable), usage data, customer information, email communication.
Purpose: Website hosting, customer management, email marketing.
Legal Basis: Art. 6 (1) (b) GDPR (Performance of Contract), Art. 6 (1) (f) GDPR (Legitimate Interest).
Data Transfer to Third Countries: Data is processed in the USA. The transfer is based on Standard Contractual Clauses (SCC).
More Information: https://www.gohighlevel.com/privacy-policy

4. Payment Processing

Stripe

We use Stripe for payment processing. The provider is Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Processed Data: Name and address, email address, payment data (credit card number, account number), transaction data.
Purpose: Secure processing of payment transactions.
Legal Basis: Art. 6 (1) (b) GDPR (Performance of Contract).
Storage Duration: Stripe stores data as long as necessary for payment processing and legal retention periods.
More Information: https://stripe.com/de/privacy

5. Communication and Sessions

Zoom

We use Zoom for online sessions. The provider is Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.

Processed Data: Name and email address, video and audio data during the session, metadata (time, duration).
Purpose: Conducting 1-on-1 sessions.
Legal Basis: Art. 6 (1) (b) GDPR (Performance of Contract).
Recording: Sessions are not recorded unless you explicitly consent.
Data Transfer to Third Countries: Data may be processed in the USA.
More Information: https://zoom.us/de/privacy.html

Motion

We use Motion for appointment booking.

Processed Data: Name and email address, appointment preferences, calendar information.
Purpose: Scheduling 1-on-1 sessions.
Legal Basis: Art. 6 (1) (b) GDPR (Performance of Contract).
More Information: https://www.usemotion.com/legal/privacy

Google Mail

We use Google Mail for business email communication. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processed Data: Email addresses, email content, attachments.
Purpose: Business communication.
Legal Basis: Art. 6 (1) (f) GDPR (Legitimate interest in efficient communication).
More Information: https://policies.google.com/privacy

6. Course Platform

Memberspot

We use Memberspot to provide our e-books and video courses. The provider is Memberspot GmbH, Lise-Meitner-Straße 30, 85716 Unterschleißheim, Germany.

Processed Data: Name and email address, login data (encrypted), course progress, usage behavior.
Purpose: Access to purchased digital content.
Legal Basis: Art. 6 (1) (b) GDPR (Performance of Contract).
More Information: https://www.memberspot.de/datenschutz

7. Marketing and Tracking

Meta Pixel (Facebook Pixel)

We use the Meta Pixel for measuring success and delivering advertisements. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Processed Data: IP address (anonymized), browser information, page views, interactions on the website, cookie data.
Purpose: Measuring the success of advertising campaigns, creating target audiences, optimizing ads.
Legal Basis: Art. 6 (1) (a) GDPR (Consent via Cookie Banner).
Revocation: You can revoke your consent at any time by adjusting the cookie settings on our website.
Data Transfer to Third Countries: Meta also processes data in the USA.
More Information: https://www.facebook.com/privacy/explanation

TikTok Pixel

We use the TikTok Pixel for measuring success and delivering advertisements. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

Processed Data: IP address, browser information, page views, user interactions, cookie data.
Purpose: Measuring the success of TikTok advertising campaigns, target audience targeting, conversion tracking.
Legal Basis: Art. 6 (1) (a) GDPR (Consent via Cookie Banner).
Revocation: You can revoke your consent at any time via the cookie settings.
Data Transfer to Third Countries: TikTok also processes data outside the EU.
More Information: https://www.tiktok.com/legal/privacy-policy-eea

8. Cookies

Our website uses cookies. These are small text files that are stored on your device.

Functional Cookies: These cookies are necessary for the operation of the website (e.g., login status, shopping cart).
Legal Basis: Art. 6 (1) (f) GDPR (Legitimate Interest).
Marketing Cookies: Marketing cookies (Meta Pixel, TikTok Pixel) are only set with your explicit consent.
Legal Basis: Art. 6 (1) (a) GDPR (Consent).

Cookie Settings: You can change your cookie preferences at any time in the settings.

9. Your Rights as a Data Subject

You have the following rights:

Right of Access (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
Right to Rectification (Art. 16 GDPR): You have the right to request the correction of incorrect data.
Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your data, provided there are no legal retention obligations.
Right to Restriction (Art. 18 GDPR): You have the right to request the restriction of processing.
Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used format.
Right to Object (Art. 21 GDPR): You have the right to object to the processing of your data.
Revocation of Consent: If processing is based on your consent, you can revoke it at any time.
Right to Complain: You have the right to complain to a supervisory authority.

Competent Supervisory Authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: 0211/38424-0
Email: [email protected]

10. Storage Duration

We store personal data only as long as necessary for the respective purposes or as required by legal retention periods:

Contract Data: 10 years (according to HGB/AO)
Communication Data: Until the inquiry is resolved
Marketing Data: Until revocation of consent
Usage Data: Generally after 6 months

11. Data Security

We use technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons, in particular:

SSL/TLS encryption of the website
Encrypted data transmission
Regular security updates
Access restrictions
Secure passwords

12. Note on Health Data

Our content on anxiety management is for information and self-help purposes only. It does not replace professional medical or therapeutic treatment. We do not process health data within the meaning of Art. 9 GDPR unless you voluntarily provide it to us during 1-on-1 sessions. In this case, processing is based on your explicit consent (Art. 9 (2) (a) GDPR).