XXX Agency
DEEN

Privacy Policy

English translation for your convenience. The German version (Datenschutzerklärung) is legally binding.

Overview

Protecting your data is a business principle for us — discretion here is not an extra but the foundation. This website is deliberately built to be data-minimal: no cookies are set, no tracking or analytics services are used, and no third-party content (such as maps, fonts or videos from external servers) is embedded. Personal data is only processed when you write to us via a form, order something, or when technically necessary server data is generated when the site is accessed. What that means in detail is set out below.

Controller

Christian Ranz
Schwabenstr. 43, 87616 Marktoberdorf, Germany
Email: phs@xxx-agency.com

Hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the site is accessed, technically necessary data (including IP address, date and time of access, page accessed, amount of data transferred, and browser and operating system information) is processed in server log files. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Cookies and tracking

This website does not use cookies and does not employ any analytics, tracking or advertising services. No usage profiles are created and no data is passed on for advertising purposes.

Contact form and Profile Audit light

If you use the contact form or the Profile Audit light, the details you enter (request, profile name or profile link, email address, message) are transmitted to our server (STRATO). There, a script processes the input solely to forward it to us as an email. No storage in a database takes place. A real name is not required; an anonymous email address is sufficient.

The processing is based on Art. 6 (1) (a) GDPR (consent by submitting), (b) (pre-contractual measures) and (f) GDPR (legitimate interest in handling the request). The transmitted data is stored for as long as necessary to handle your request and is then deleted unless statutory retention obligations prevent this. You may revoke consent you have given at any time with effect for the future.

Orders and payment

Purchases run through the sales platform Payhip (Payhip Ltd., 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom). You reach the checkout at kasse.xxx-agency.com — that is our own address for the Payhip store, but technically a service provided by Payhip. On our website itself, Payhip sets no cookies and loads no scripts; our buy buttons are plain links. Only when you switch to the checkout does Payhip process your details: email address, the product ordered, for analysis and building blocks your profile name or profile link, for physical goods (printed guide, shirts) your name and delivery address, and your consent to the immediate start of the service. Payhip provides your order confirmation, invoice and download and stores the order data on our behalf. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). For the United Kingdom, an adequacy decision of the EU Commission is in place (Art. 45 GDPR), so the transfer there is permitted. In addition, Payhip’s privacy policy applies: payhip.com/privacy.

Payment is processed by Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland). You enter your payment details directly with Stripe; we do not receive them, only the information that the payment has been made. Stripe may transfer data to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework and additionally uses the EU Commission’s standard contractual clauses. The legal basis is Art. 6 (1) (b) GDPR. In addition, Stripe’s privacy policy applies: stripe.com/privacy.

We retain invoice data in accordance with commercial and tax law requirements.

Shipping

Physical goods are sent by a shipping or printing service provider to the delivery address you provide. For this we pass on your name and delivery address to that provider, nothing more. The legal basis is Art. 6 (1) (b) GDPR.

Profile analysis, building blocks and coaching

For analysis, building blocks and coaching we process the profile link you provide, your answers and — if you wish — your own image material. We use this data exclusively for the commissioned service and do not pass it on to third parties. Chat coaching runs via the messenger Telegram (Telegram Messenger Inc., Road Town, Tortola, British Virgin Islands; EU representative pursuant to Art. 27 GDPR: European Data Protection Office, EDPO); Telegram’s privacy policy applies to the transmission there. Telegram processes data outside the European Economic Area. You do not need a real name for this and do not have to show us a phone number. You can delete the chat history in Telegram yourself at any time — on both sides if you wish.

Fonts and videos

Fonts, images and videos are delivered locally from our server. No connections to third-party servers (such as Google Fonts or video platforms) are established for this.

SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” in the address bar and the lock symbol in your browser. With encryption active, the data you transmit to us cannot be read by third parties.

Your rights

You have the right at any time to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority. Please contact the address given above.

Version

September 2026