← Back to website
Privacy Policy
Last updated: August 2026
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
For details about us, please also see our Imprint.
2. General Information
Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR, German Federal Data Protection Act - BDSG) as well as this privacy policy. Personal data is any data that can be used to personally identify you.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the lock icon in your browser's address bar and by the fact that the address bar changes from "http://" to "https://".
3. Hosting
This website is hosted by an external service provider:
Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA.
The hosting provider processes data collected in connection with the use of this website on our behalf, including IP address, date and time of access, pages accessed, and browser/device information (server log files). Processing is based on Art. 6(1)(f) GDPR (legitimate interest in a stable, secure, and fast provision of our services). We have entered into a data processing agreement with Netlify pursuant to Art. 28 GDPR.
4. Google Fonts
This website uses so-called Google Fonts for the uniform display of typefaces, which are loaded from a server operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you visit a page, your browser loads the required fonts directly from Google's servers, which technically transmits your IP address to Google. We are not aware of Google storing IP addresses in this context.
This use is based on Art. 6(1)(f) GDPR (legitimate interest in a technically secure, maintenance-free, and consistent display of typefaces). Further information can be found in Google's privacy policy: policies.google.com/privacy.
5. Newsletter & Freebie Sign-up
On this website you can sign up for our free "Content Ideas Starter Kit" freebie as well as our email newsletter. We use the service Kit (Kit Ltd., formerly ConvertKit LLC, 200 Bishopsgate, London EC2M 4NR, United Kingdom, with data processing partly taking place in the USA) for this purpose.
When you sign up, you provide your email address. We use a so-called double opt-in procedure: after signing up, you will receive a confirmation email in which you must confirm your registration with a click. Only after this confirmation is your data actively added to our list and you gain access to the freebie and further emails.
The following is stored:
- Your email address
- The time of sign-up and confirmation
- The IP address from which the sign-up was made (for evidentiary purposes)
The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by using the "unsubscribe" link at the bottom of every email or by contacting us informally by email. The lawfulness of the processing carried out until the withdrawal remains unaffected.
6. Payment Processing
To purchase the Task Flow template, you will be redirected to our payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; parent company Stripe, Inc., USA). The payment data entered there (e.g. name, email address, payment method information) is processed exclusively for the purpose of completing the purchase.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). Stripe's privacy policy applies in addition: stripe.com/privacy.
7. Contact via Email
If you contact us by email, we store your details (email address, and, if applicable, name and message) for the purpose of processing your inquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) or (f) GDPR.
8. Your Rights
Under applicable statutory provisions, you have the right at any time to:
- Access your personal data stored by us (Art. 15 GDPR)
- Rectification of inaccurate personal data (Art. 16 GDPR)
- Erasure of data stored by us (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to our processing of your data (Art. 21 GDPR)
- Withdraw any consent given, with effect for the future
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR). The competent authority is:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
datenschutz.hessen.de
9. Storage Period
Unless a more specific storage period is stated in this policy, your personal data will remain with us until the purpose for processing no longer applies. If you request lawful erasure, withdraw your consent, or the purpose ceases to apply, your data will be deleted - unless statutory retention obligations (e.g. commercial and tax law retention periods of up to 10 years for purchase records) prevent this.
10. Data Transfer to Third Countries
Some of the service providers listed above (e.g. Google, Stripe's parent company) process data partly in the USA. Where data is transferred to countries outside the EU/EEA, we rely on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the EU Standard Contractual Clauses issued by the European Commission or the provider's participation in the EU-U.S. Data Privacy Framework, where applicable.