Privacy Policy
English translation for your convenience. The German version (Datenschutzerklärung) is legally binding.
Overview
Protecting your data is a business principle for us — discretion here is not an extra but the foundation. This website is deliberately designed to collect as little data as possible: no cookies are set, no tracking or analytics services are used, and no third-party content (such as maps, fonts or videos from external servers) is embedded. Personal data is only processed when you write to us via a form, order something, or when technically necessary server data is generated as the site is accessed. What that means in detail is set out below.
Controller
Christian Ranz
c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany
Email: phs@xxx-agency.com
Hosting
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the site is accessed, technically necessary data (including IP address, date and time of access, page accessed, amount of data transferred, and browser and operating system information) is processed in server log files. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
Cookies and tracking
This website does not use cookies and does not employ any analytics, tracking or advertising services. No usage profiles are created and no data is passed on for advertising purposes.
Contact form and Profile-Audit light
If you use the contact form, your details (request, profile name or profile link, email address, message) are transmitted to our server at STRATO. A script forwards them to us as an email and sends you a confirmation of receipt. Beyond that, they are not stored on the server. A real name is not required; an anonymous email address is sufficient.
The Profile-Audit light goes one step further: our server retrieves the public profile page behind the link you give us and reads the details visible there (name, picture, header, bio, profile details, subscribers, views, rank). From this, it creates an automatic preliminary assessment and a draft of your overview. We review and edit this draft personally before it goes to you; what you receive is decided by a human, not by the script. To handle your request, we store it on our server with a case number (time, language of the form, email address, profile link, profile name read from the page, automatic preliminary assessment, draft and the overview sent, if applicable the reason why no automatic draft was possible, as well as the time of sending, the sending status and, if applicable, the time of a sending attempt whose outcome could not be recorded). This area cannot be accessed from outside. We delete the request no later than 90 days after your overview has been sent. If no overview is sent, we delete the request no later than 90 days after it was received.
To protect against misuse, each time you submit the form we store a non-reversible check value of your IP address for one hour in order to limit the number of requests. The IP address itself is not stored for this purpose.
The processing is based on Art. 6 (1) (a) GDPR (consent by submitting), (b) (pre-contractual measures) and (f) GDPR (legitimate interest in handling the request and in protecting the form). You may withdraw your consent at any time with effect for the future.
Orders and payment
Purchases are processed through the sales platform Payhip (Payhip Ltd., 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom). You’ll find the checkout at kasse.xxx-agency.com (German shop) and checkout.xxx-agency.com (English shop) — these are our own addresses for the Payhip stores, but technically a service provided by Payhip. On our website itself, Payhip sets no cookies and loads no scripts; our buy buttons are plain links. Only when you switch to the checkout does Payhip process your details: email address, the product ordered, for analysis and building blocks your profile name or profile link, for physical goods (printed guide, shirts) your name and delivery address, and your consent to the immediate start of the service. Payhip provides your order confirmation, invoice and download and stores the order data on our behalf. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). For the United Kingdom, an adequacy decision of the European Commission is in place (Art. 45 GDPR), so the transfer there is permitted. In addition, Payhip’s privacy policy applies: payhip.com/privacy.
Payment is processed by Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland). You enter your payment details directly with Stripe; we do not receive them, only the information that the payment has been made. Stripe may transfer data to Stripe, Inc. in the USA; Stripe is certified under the EU-U.S. Data Privacy Framework and additionally uses the European Commission’s standard contractual clauses. The legal basis is Art. 6 (1) (b) GDPR. In addition, Stripe’s privacy policy applies: stripe.com/privacy.
We retain invoice data in accordance with commercial and tax law requirements.
Withdrawal form
If you withdraw from a contract using the withdrawal form, you send us your name as used in the order, the order number or the product, the order date, your email address and, voluntarily, a reason. The withdrawal receives a case number and is stored in a case list on our server; you receive a confirmation of receipt by email with the date, time and content (§ 356a BGB). The legal basis is Art. 6 (1) (b) and (c) GDPR. We keep the case for as long as we need it as proof that it was handled, but no longer than the statutory retention periods.
Shipping
We ship physical goods with DHL to the delivery address you provide. For this we pass on your name and delivery address to DHL, nothing more. The legal basis is Art. 6 (1) (b) GDPR.
Profile analysis, building blocks and coaching
For analysis, building blocks and coaching we process the profile link you provide, your answers and — if you wish — your own images. We use this data exclusively for the commissioned service and do not pass it on to third parties. Chat coaching runs via the messenger Telegram (Telegram Messenger Inc., Road Town, Tortola, British Virgin Islands; EU representative pursuant to Art. 27 GDPR: European Data Protection Office, EDPO); Telegram’s privacy policy applies to the transmission there. Telegram processes data outside the European Economic Area. You do not need a real name for this and do not have to show us a phone number. You can delete the chat history in Telegram yourself at any time — on both sides if you wish.
Fonts and videos
Fonts, images and videos are delivered locally from our server. No connections to third-party servers (such as Google Fonts or video platforms) are established for this.
SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” in the address bar and the lock symbol in your browser. With encryption active, the data you transmit to us cannot be read by third parties.
Your rights
At any time, you have the right of access, the right to rectification and erasure, the right to restriction of processing, the right to data portability, and the right to object. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise these rights, contact us at the address given above.
Version
September 2026