Privacy Policy

1. Controller

Florian Ripp, Oberhöchstadter Str. 28a, 61440 Oberursel, Germany
Email: coach.florian.ripp@gmail.com

2. Provision of the website

When you access this website, connection data required for technical operation is processed, in particular your IP address, the time of access, the requested page, referrer, status code, and browser and device information. This is necessary to deliver the website, analyze errors, maintain system security and defend against attacks.

The website is provided through ChatGPT Sites. OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, processes data as a technical service provider. OpenAI uses Cloudflare, Ltd., or affiliated Cloudflare companies, among others, as subprocessors for content delivery, web hosting and the website database. Further information is available in OpenAI’s Data Processing Addendum and OpenAI’s Subprocessor List.

The legal basis is Article 6(1)(f) GDPR (General Data Protection Regulation). My legitimate interest is the secure and functional operation of this website. Where data is processed outside the European Economic Area, depending on the recipient, the service providers rely on an adequacy decision or the European Commission’s standard contractual clauses for the transfer.

3. Contact form and email

When you submit the contact form, your name, email address and the content of the message you enter are processed so that I can respond to your inquiry and, where relevant, clarify steps prior to entering into a contract. Required fields are marked as such in the form.

For technical email delivery, I use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. At a minimum, email addresses, delivery metadata and the content of the message are transmitted to Resend. The plan currently in use specifies a data retention period of 30 days. Processing may take place in the United States. Depending on the circumstances, Resend relies on an adequacy decision or the European Commission’s standard contractual clauses for international transfers. Further information is available in Resend’s Data Processing Addendum.

The message is then delivered to my Gmail mailbox. For this purpose, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, processes the necessary address, content and metadata. Processing on servers outside the European Economic Area is possible; Google provides information about the transfer mechanisms used in its Privacy Policy.

The legal basis for processing contact inquiries is Article 6(1)(b) GDPR where the inquiry relates to steps prior to entering into a contract, and Article 6(1)(f) GDPR for other inquiries. My legitimate interest is the reliable handling of incoming messages.

The form contains a technically hidden field to prevent spam and applies a rate limit to requests. If the field, which is invisible to ordinary visitors, is completed automatically, no email is sent. This does not involve profiling or analysis for advertising purposes.

The contact form is not intended for diagnoses, information about mental or physical health, or other special categories of personal data. Please do not transmit such data when first making contact.

4. Newsletter

When you subscribe to the newsletter, I process your email address, selected language, source page, the time of subscription, confirmation and, where applicable, unsubscription, as well as the version of the consent wording. No free text, name, health data, individual opens or clicks are collected for this purpose. Providing your email address is voluntary; without it, the newsletter cannot be sent.

The newsletter contains a personal reflection approximately once every three months and occasional information about workshops or events in which I take part personally. The legal basis for subscriber administration and delivery is your consent under Article 6(1)(a) GDPR in conjunction with section 7(2) no. 2 UWG (German Act Against Unfair Competition).

I use a double opt-in procedure for verification: after submitting the form, you receive a neutral confirmation email. Your address is added to the active mailing list only when you open the link in that email and consciously confirm your subscription once more on the website. The confirmation link is time-limited and can be used only for the relevant subscription.

Subscriber data and consent events are stored in the Cloudflare D1 database associated with ChatGPT Sites. Confirmation emails and later newsletters are sent through Resend. After successful confirmation, an internal notification is sent to my Gmail mailbox. The providers described in section 3 process the address and metadata necessary for delivery and notification.

The confirmation link remains valid for 72 hours. Unconfirmed subscriptions are checked for deletion daily and are normally deleted within no more than seven days; if the website processes no request during that period, the technical cleanup takes place with the next request. An active subscription is retained until consent is withdrawn. Following unsubscription, the address is removed from active delivery immediately. A minimal, restricted record of consent and delivery may be retained until the end of the third calendar year following the last mailing or unsubscription, unless a dispute requires longer preservation. The address in that record is then technically anonymized. The record is not used for advertising.

You may withdraw your consent at any time with effect for the future by using the unsubscribe link in every newsletter email or by emailing coach.florian.ripp@gmail.com. There is no automated decision-making, profiling or individual open and click tracking.

5. External music platforms

Spotify, Apple Music, Amazon Music, YouTube and Instagram are linked only. Content from these providers is not loaded automatically on this website. Their respective privacy policies additionally apply only when you consciously open a link.

The historical SoundCloud players are likewise not loaded automatically. A connection to SoundCloud is established and the official player embedded only when you select “Load player” for a song. SoundCloud may then process, in particular, your IP address, browser and device information, and information about your use of the player, and may use cookies or similar technologies. Further information is available in SoundCloud’s Privacy Policy.

6. Cookies and audience measurement

This website does not use its own advertising, profiling or marketing cookies and does not embed advertising trackers. This does not affect storage that is technically necessary for the hosting infrastructure.

7. Locally provided music

The song “Kopf und Herz” can be started only on the Music page, through a visible audio player and after you consciously choose to play it. The audio file is provided directly through this website; no external music service is contacted.

8. Retention period

Technical log data is processed only for as long as necessary for operation, security, error analysis and the prevention of misuse; the deletion rules of the hosting service providers used also apply. Under the plan currently in use, Resend retains delivery data for up to 30 days. Contact messages stored by me are deleted once the inquiry has been fully handled and no statutory retention or evidentiary obligations remain. The additional periods in section 4 apply to newsletter data.

9. Your rights

Within the scope provided by law, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent you have given with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. In particular, the competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Wilhelmstraße 7, 65185 Wiesbaden.

10. Security

An encrypted HTTPS connection is used for transmission. Technical and organizational measures are applied in accordance with the risks of the respective processing.