📄 Privacy Policy

1. Person in charge

The entity responsible for data processing on this website is:

Burnout2Business
Stefanie Greiter c/o IP-Management #3763
Ludwig-Erhard-Str. 18
20459 Hamburg Deutschland

1a. Imprint service

We use the services of IMPRESSUM PRIVATSCHUTZ GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg, to manage the mail sent to us. This service provider offers a secure and reliable postal address for our project (e.g., legal notice, privacy policy, cancellation policy, and other areas as applicable). This also represents our legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. We have concluded a contract for order processing with Impressum-Privatschutz and fully implement the strict requirements of the German data protection authorities when using this service. Further information on data protection at Impressum-Privatschutz GmbH can be found here: https://impressum-privatschutz.de/datenschutzerklaerung/

2. General information on data processing

(1) We only process users' personal data to the extent necessary to provide a functional website and our content and services.

(2) Personal data is generally only processed with the consent of the users or if processing is permitted by law.

3. Collection of access data and log files

(1) When you visit our website, our hosting provider Hostinger International Ltd. automatically collects information in so-called server log files. This includes:

• Browser type and version

• Operating system used

• Referrer URL

• IP address (truncated, anonymized)

• Date and time of the server request

(2) This data is used exclusively to ensure trouble-free operation and to improve our offering. It is not combined with other data.

4. Cookies & Tracking

(1) We do not use cookies on this website ourselves.

(2) Our service providers (e.g., hosting providers, newsletter services, payment providers, spam protection) may set technically necessary cookies that are required for the operation of their services.

(3) These cookies do not require separate consent. Analysis or marketing cookies are not used.

5. Newsletter & email marketing

(1) We use the Brevo service (formerly Sendinblue, provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) to send newsletters, automated email series, and to use our contact form. The sending is based on your consent in accordance with Art. 6 (1) lit. a GDPR.

(2) The data entered during registration or via the contact form (e.g., name, email address, message) is stored on Brevo's servers in the EU for the purpose of sending.

Registration is done via a double opt-in procedure:

After registering, you will receive a confirmation email.

Only after confirmation will you be added to the distribution list.

(3) In addition, the following data is logged as part of the double opt-in procedure:

• Email address

• Time of registration & confirmation

• IP address at the time of registration

(4) Brevo uses this data exclusively for sending the requested information and for performing technical functions (e.g., sending, analysis, double opt-in).

(5) The data will not be passed on to third parties unless this is necessary for the fulfillment of the contract or required by law.

(6) We have concluded a data processing agreement (Art. 28 GDPR) with Brevo to ensure the security and confidentiality of the personal data processed via our website.

(7) Brevo is GDPR-compliant certified and is committed to protecting your data.

(8) To improve our newsletter service, we use Brevo's anonymized email tracking. Opening and click rates are recorded and statistically evaluated exclusively in anonymized form. There is no personal evaluation or assignment to individual recipients.

(9) You can unsubscribe at any time using the unsubscribe link in our emails.

(10) Further information can be found in Brevo's privacy policy: https://www.brevo.com/de/legal/privacypolicy/

6. Use of Pinterest
(1) Responsible party and data protection basis: We operate a Pinterest page (known as a “business account”) to present our content, products, and offers. The responsible parties within the meaning of the General Data Protection Regulation (GDPR) are both

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland,
and we as the site operator (see Legal Notice).

Data processing is carried out on the basis of Art. 6 (1) lit. f GDPR (legitimate interest in an informative and appealing presentation of our online offers) and – if you contact us via Pinterest – possibly on the basis of Art. 6 (1) lit. b GDPR (contract fulfillment or pre-contractual measures).

(2) Type of data processed:
When using our Pinterest page, Pinterest may collect personal data from users, such as:

- Information about your Pinterest profile (e.g., name, username, profile picture, language settings)
- Interactions (e.g., likes, comments, saved pins)
- Technical data (e.g., IP address, browser type, device information, location data—if activated)

We ourselves only receive anonymous statistical data (insights) from Pinterest, which does not allow any conclusions to be drawn about individual persons.

(3) No tracking, no advertising by us
We do not use Pinterest tags, conversion tracking functions, or advertisements (ads). We have also completely deactivated all analysis and personalization functions within our Pinterest account.
This means:

- Pinterest cannot track visitor activity via our site or link it to external websites.
- We do not engage in personalized advertising or profiling.
- We use Pinterest exclusively for the organic publication of content (pins).

This means that our Pinterest page can be used without additional consent or cookie banners.

(4) Data processing by Pinterest: Pinterest processes data on its own responsibility for the provision, optimization, and analysis of its services.
This may involve the transfer of data to third countries (e.g., the US). Pinterest bases such transfers on EU standard contractual clauses (Art. 46 GDPR).

Further information on data processing by Pinterest can be found at:
https://policy.pinterest.com/de/privacy-policy

(5) Your rights:
- Information about your data stored on Pinterest (Art. 15 GDPR)
- Correction of inaccurate data (Art. 16 GDPR)
- Deletion of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)

Since Pinterest processes data independently, you should contact Pinterest directly to exercise these rights: privacy-support@pinterest.com

(6) Storage period:
Pinterest stores personal data for as long as necessary to provide its services or as required by law.
We only store messages or inquiries received via Pinterest for as long as is necessary for processing.

(7) Legal basis for our use of Pinterest:
Art. 6 (1) (f) GDPR – legitimate interest (external image, brand communication)
Art. 6 (1) (b) GDPR – establishing contact and contract processing
Art. 6 (1) (a) GDPR – only if you expressly give us your consent (e.g., for competitions or messages via Pinterest Direct)

Our Pinterest page is operated for informational purposes only and is free of advertising.
We do not actively transfer data or integrate tracking.
Pinterest is solely responsible for the technical data processing when you visit our page.

7. Shipping of free content (Freebie)

(1) After registering for the newsletter, we will provide you with a free PDF document (“freebie”).

(2) The legal basis for the processing of your data is also your consent in accordance with Art. 6 (1) (a) GDPR.

8. Sale of digital product (e-book via Stripe)

(1) We use the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (“Stripe”) for the sale of our paid e-books.

Stripe processes personal data required for payment processing, including name, email address, payment information (e.g., credit card details, IBAN), billing address, transaction data (time, date, amount, currency), and technical information (IP address, browser, operating system) for fraud prevention.

(2) Processing is carried out in accordance with Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in secure payment processing). Stripe acts as an independent controller within the meaning of the GDPR.

(3) I have concluded an order processing agreement (Art. 28 GDPR) with Stripe. Stripe may transfer data to countries outside the EU (in particular the USA) and uses the EU standard contractual clauses (Art. 46 GDPR) to ensure an adequate level of data protection.

(4) Further information on data processing by Stripe can be found in the Stripe privacy policy: https://stripe.com/privacy

(5) When purchasing digital products (e.g., e-books or downloads), a special right of withdrawal applies in accordance with Section 356 (5) of the German Civil Code (BGB).

In principle, consumers have a statutory 14-day right of withdrawal.

However, this right of withdrawal expires prematurely as soon as the customer

1. expressly agrees that we may begin executing the contract immediately (e.g., by providing the download) and

2. confirms that they are aware that the right of withdrawal expires when the download begins.

We ensure this by means of an explicit consent checkbox before the purchase is completed: At checkout, the customer expressly agrees via a mandatory checkbox that the execution of the contract (provision of the download) will begin before the expiry of the withdrawal period and that they will lose their right of withdrawal once the execution has begun.

This consent is documented technically, and the notice also appears on the invoice.

(6) Without this consent, the purchase cannot be completed.

This consent is processed in accordance with Art. 6 (1) (c) GDPR (legal obligation to document) and Art. 6 (1) (b) GDPR (performance of a contract).

(7) Stripe meets the highest security standards for payment service providers (PCI DSS Level 1). Sensitive payment data (e.g., credit card numbers) is transmitted exclusively in encrypted form and is not stored on our servers.

(8) As a small business within the meaning of § 19 UStG (German Value Added Tax Act), Burnout2Business does not charge or show value added tax. All prices displayed on this website are therefore final prices. Invoicing is carried out directly by Stripe.com.

9. Affiliate links & partner programs (Fanbasis.com)

(1) On our website, we use affiliate links to offers from Fanbasis.com.

(2) When users click on such a link, cookies may be set by Fanbasis to track the origin of the purchase.

(3) Processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in economic operation).

(4) Fanbasis is solely responsible for data processing on its platform. For details, see its privacy policy: https://fanbasis.com/privacy

10. Hosting by Hostinger

(1) Our website is hosted by Hostinger International Ltd. (Cyprus/EU).

(2) All data collected on our website is stored on Hostinger's servers.

(3) We have entered into a data processing agreement (Art. 28 GDPR) with Hostinger to ensure the security and confidentiality of personal data processed via our website.

(4) For more information, please refer to Hostinger's privacy policy: https://www.hostinger.com/de/legal/datenschutz-bestimmungen

11. Use of Cloudflare Turnstile
(1) To protect our contact form from spam and misuse, we use the Cloudflare Turnstile service (provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA).

(2) Turnstile checks whether the input is made by a natural person and prevents automated access (bots). In doing so, technically necessary data (e.g., IP address, browser header, referrer URL, date and time of access, etc.) is transmitted to Cloudflare.

(3) This data is processed exclusively for the purpose of preventing spam and abuse and is not used for advertising purposes.

(4) The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in the security and functionality of our online services).

(5) We have entered into a data processing agreement (Art. 28 GDPR) with Cloudflare to ensure the security and confidentiality of the personal data processed via our website.

12. Legal basis for processing

• Art. 6 para. 1 lit. a GDPR – Consent

• Art. 6 para. 1 lit. b GDPR – Performance of a contract

• Art. 6 para. 1 lit. f GDPR – Legitimate interest

13. Storage period

We only store personal data for as long as is necessary to fulfill the respective purpose or as required by law.

14. Rights of affected persons

Under the GDPR, you have the following rights:

• Information about your stored data (Art. 15 GDPR)

• Correction of inaccurate data (Art. 16 GDPR)

• Deletion of your data (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing (Art. 21 GDPR)

• Withdrawal of consent (Art. 7(3) GDPR)

To exercise these rights, you can contact us at any time:
Burnout2Business, contact@burnout2business.com

15. Right of appeal to the supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

16. Changes to this privacy policy

We reserve the right to amend this privacy policy as necessary in order to ensure that it always complies with current legal requirements and our services.