{"id":3,"date":"2025-07-25T16:37:20","date_gmt":"2025-07-25T15:37:20","guid":{"rendered":"https:\/\/xknpulemtz.wpdns.site\/?page_id=3"},"modified":"2026-10-26T22:57:52","modified_gmt":"2026-10-26T21:57:52","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/thorstenenderlin.com\/en\/privacy-policy\/","title":{"rendered":"Privacy"},"content":{"rendered":"<style>\n#tedse{--off:#FAF7F0;--ink:#5A4A3C;--soft:#7A6B5E;--gold:#CBA052;--bronze:#8A6524;--line:rgba(90,74,60,.16);background:var(--off);color:var(--ink);font-family:'Poppins',system-ui,sans-serif;}\n#tedse *{box-sizing:border-box;margin:0;padding:0;}\n#tedse h1,#tedse h2{font-family:'Poppins',system-ui,-apple-system,sans-serif;}\n#tedse p:empty{display:none !important;}\n#tedse .wn{max-width:760px;margin:0 auto;padding:76px 24px;}\n#tedse h1{font-size:44px;line-height:1.1;margin-bottom:6px;}\n#tedse h2{font-size:25px;line-height:1.2;margin:42px 0 12px 0;}\n#tedse .eyebrow{font-size:12px;font-weight:600;letter-spacing:.2em;text-transform:uppercase;color:var(--bronze);margin-bottom:16px;}\n#tedse .rule{width:58px;height:2px;background:var(--gold);border:0;margin:18px 0 28px 0;}\n#tedse p{font-size:16.5px;line-height:1.7;margin-bottom:14px;}\n#tedse ul{list-style:none;margin:0 0 16px 0;}\n#tedse li{font-size:16.5px;line-height:1.7;padding:7px 0 7px 24px;position:relative;border-top:1px solid var(--line);}\n#tedse li:first-child{border-top:none;}\n#tedse li:before{content:\"\";position:absolute;left:0;top:18px;width:11px;height:1px;background:var(--gold);}\n#tedse .daten{background:#fff;border:1px solid var(--line);border-radius:4px;padding:24px 26px;margin-bottom:8px;}\n#tedse .daten p:last-child{margin-bottom:0;}\n#tedse a{color:var(--bronze);}\n#tedse .klein{font-size:14.5px;color:var(--soft);line-height:1.65;}\n@media(max-width:900px){#tedse h1{font-size:28px!important;hyphens:none!important;-webkit-hyphens:none!important;word-break:normal!important;overflow-wrap:normal!important;}#tedse h2{font-size:21px;}#tedse .wn{padding:52px 24px;}}\n<\/style>\n<div id=\"tedse\">\n<div class=\"wn\">\n<div class=\"eyebrow\"><p>Legal<\/p><\/div>\n<h1 style=\"hyphens:auto;-webkit-hyphens:auto;overflow-wrap:break-word\">Privacy policy<\/h1>\n\n<hr class=\"rule\"><p>I take the protection of your personal data seriously. This page sets out which data I collect, what I use it for and which rights you have.<\/p><h2>Controller<\/h2>\n<div class=\"daten\">\n\n<strong>Thorsten Enderlin<\/strong><br>Beyond C, sole proprietorship<br>Ehrenmattenweg 6, 79280 Au, Germany<br>Phone: +49 176 20843402<br>Email:<a href=\"mailto:hello@thorstenenderlin.com\">hello@thorstenenderlin.com<\/a>\n\n<\/div>\n<h2>1. Which data I collect<\/h2><p>When you visit this website, write to me or use one of my offerings, the following data may arise:<\/p><ul>\n \t<li><strong>Name and email address<\/strong>, if you give them to me voluntarily, for example through the contact form, when booking an appointment or when signing up for the newsletter.<\/li>\n \t<li><strong>The content of your message<\/strong>, so that I can answer it.<\/li>\n \t<li><strong>Server log data<\/strong>, automatically transmitted by your browser when you access the site: IP address, date and time, page accessed, browser type and operating system. This data is necessary for the technical operation and security of the website.<\/li>\n<\/ul><p>I do not collect special categories of personal data within the meaning of Article 9 GDPR without reason. For retreats I voluntarily ask you for information that matters for safe delivery, for example intolerances or physical limitations. I process this information only on the basis of your explicit consent under Article 9(2)(a) GDPR and only as far as it is necessary for that purpose. You can withdraw your consent at any time with effect for the future. If you give me sensitive information of your own accord in a conversation or a message, I treat it confidentially and use it exclusively for the support in question.<\/p><h2>2. What I use it for<\/h2>\n<ul>\n \t<li>To reply to you and to arrange appointments.<\/li>\n \t<li>To provide and invoice agreed services.<\/li>\n \t<li>To send you the newsletter if you have signed up for it.<\/li>\n \t<li>To meet legal obligations, in particular tax retention requirements.<\/li>\n<\/ul>\n<strong>I do not sell your data and I do not pass it on for advertising purposes.<\/strong>\n<h2>3. Legal bases<\/h2>\n<ul>\n \t<li><strong>Consent<\/strong> pursuant to Article 6(1)(a) GDPR, for example for the newsletter. You can withdraw it at any time with effect for the future.<\/li>\n \t<li><strong>Contract or pre-contractual measures<\/strong> pursuant to Article 6(1)(b) GDPR, for example for an appointment request or ongoing work together.<\/li>\n \t<li><strong>Legal obligation<\/strong> pursuant to Article 6(1)(c) GDPR, for example for retention periods.<\/li>\n \t<li><strong>Legitimate interest<\/strong> pursuant to Article 6(1)(f) GDPR in the secure and trouble-free operation of the website.<\/li>\n<\/ul>\n<h2>4. Services I use<\/h2>\n<ul>\n \t<li><strong>Hosting and delivery.<\/strong> This website is operated on the platform of HighLevel, Inc. (LeadConnector), 400 North Saint Paul Street, Dallas, Texas, USA (Business Hub). HighLevel provides the server infrastructure and, on my behalf, processes the technical connection data that arises when you visit the website: IP address, date and time, page requested, browser type and operating system. A content delivery network from Cloudflare, Inc., USA, sits in front of it, which delivers the pages quickly and securely and protects them from attacks. Connection data is routed through Cloudflare servers in the process. For this, Cloudflare sets a technically necessary cookie named __cf_bm, which is used to detect malicious software and expires after about 30 minutes (Section 25(2) No. 2 TDDDG). Data may be transferred to the USA in the course of this; the transfer relies on the adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses. Data processing agreements are in place with both providers. The legal basis is Article 6(1)(f) GDPR (my legitimate interest in a secure, fast and trouble-free operation of the website).<\/li>\n \t<li><strong>Fonts.<\/strong> The fonts on this website are served from my own server. No connection to Google servers is made.<\/li>\n \t<li><strong>Newsletter window.<\/strong> On some pages a window with an invitation to my newsletter appears after a few seconds. At first this window shows only a button and does not connect to any external service. Only when you click \u201cYes, count me in\u201d is the sign-up form loaded from link.thorstenenderlin.com (HighLevel, USA), and your IP address is transmitted to HighLevel in the process. The legal basis is your consent through this active step under Article 6(1)(a) GDPR. If you close the window without clicking, nothing is transmitted to HighLevel. So that the window is not shown again on every page view, your browser stores an entry named te_pop_until in its local storage (localStorage). It contains only a point in time, applies for 14 days after you close the window and for 180 days after you open the form, and is not transmitted to me or to third parties. The entry is technically necessary to implement your decision (Section 25(2) No. 2 TDDDG, Article 6(1)(f) GDPR). You can delete it at any time in your browser settings. The same applies to the newsletter page and the sign-up on the home page: at first you only see a button (\u201cYes, count me in\u201d). Only when you click it are the sign-up form and the related script loaded from link.thorstenenderlin.com (HighLevel, USA), and your IP address is transmitted in the process. The legal basis is your consent through this active step under Article 6(1)(a) GDPR. How HighLevel processes data after you sign up is described under \u201cNewsletter\u201d.<\/li>\n \t<li><strong>Appointment booking.<\/strong> For appointments I use the booking page from HighLevel (LeadConnector). On my website you only see a button or link to book an appointment. Only when you click it does the booking page open on link.thorstenenderlin.com, and your IP address is transmitted to HighLevel in the process. The details you enter there (name, email address, chosen time) are processed for appointment management. The legal basis is Article 6(1)(b) GDPR.<\/li>\n \t<li><strong>Contact form.<\/strong> The details from the form are transmitted to my email address and stored there.<\/li>\n \t<li><strong>Newsletter.<\/strong> For the newsletter, forms and appointment booking I use HighLevel, Inc. (LeadConnector), 400 North Saint Paul Street, Dallas, Texas, USA, connected through Mastermind.com, as a processor. Data may be transferred to the USA in the course of this. If you sign up, the service stores your first name, email address and the time and IP address of the sign-up as evidence. You can unsubscribe at any time using the link in every email. If you sign up for the gift \u201cDay 1\u201d or the checklist \u201cTwelve quiet signs\u201d, after you confirm via double opt-in I send you the PDF, for the checklist two further emails within seven days, and then my newsletter. In these emails I measure whether you open them and which links you click; this helps me improve the content (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every email.<\/li><li><strong>Forms on individual pages (waitlist, enquiries, email sign-up).<\/strong> For sign-ups and enquiries I use forms from HighLevel (link.thorstenenderlin.com, HighLevel, USA; provider and data transfer as described under \u201cNewsletter\u201d). This covers the waitlist of the Leadership 2030 Community, the email sign-up for the Leadership 2030 live sessions, the confidential enquiry for Space to Clarity, the gift \u201cDay 1\u201d from the workbook \u201cLebst du schon?\u201d the free checklist \u201cZw\u00f6lf leise Anzeichen\u201d (Twelve quiet signs) and the companion material for the book. These forms are not loaded automatically on my website. Either the page first shows only a button and the form is loaded only when you click it (community waitlist, Space to Clarity, gift \u201cDay 1\u201d, checklist \u201cTwelve quiet signs\u201d, book companion material), or the button is a link that opens the form in a new window on link.thorstenenderlin.com (Leadership 2030). In both cases your IP address is transmitted to HighLevel only after your click. The waitlist for the book, by contrast, is my own form on my website: nothing is transmitted to HighLevel when the page loads. Only when you submit the form do I forward your first name, your email address and, if present, the campaign details from the link (UTM parameters) to HighLevel via my server. HighLevel does not receive your IP address in this process. The legal basis for loading the form is your consent through this active step under Article 6(1)(a) GDPR. What you enter in the form is voluntary; required fields are marked. I use the details only for the respective purpose: the waitlist and the prize draw (see \u201cBook waitlist and prize draw\u201d), notification about the live sessions or the start of the community, or answering your enquiry. For Space to Clarity enquiries the legal basis is Article 6(1)(b) GDPR (pre-contractual measures), otherwise point (a). If you sign up to an email list, you can unsubscribe at any time with one click. Please do not include sensitive information in enquiries that I do not need to answer them.<\/li>\n<li><strong>Book waitlist and prize draw.<\/strong> On the page for the book \u201cWie geht\u2019s? Alles gut. Eigentlich.\u201d you can sign up for a waitlist. For this I process the details from the form (at least your email address) in order to send you an email on the publication day, 20 November 2026, when the book is out. This email also mentions my free clarity call and asks you for a review. By signing up you also take part in a prize draw: among all entries received by 19 November 2026, 23:59, I give away ten signed hardcover copies. The draw takes place on 20 November 2026; winners are notified by email on 20 November 2026. The terms of participation are on the book page. I ask winners by email for their delivery address. I pass on name and address only to the shipping company for delivery. Winners are not published. The legal basis for taking part in the prize draw and handling the prize is Article 6(1)(b) GDPR; for the email on the publication day with the note on the clarity call and the review request it is Article 6(1)(a) GDPR (consent by submitting the form). Taking part in the prize draw does not depend on signing up for the newsletter. You can withdraw your consent at any time with effect for the future; an informal message to hello@thorstenenderlin.com is enough. You will then be removed from the waitlist. Storage period: I delete the waitlist and prize draw data once the reminder has been sent, the draw has been held and the prizes have been handled, at the latest four weeks after the draw (period for winners to respond: 14 days, a further 14 days if a new draw is needed). Statutory retention obligations remain unaffected. If you also sign up for the newsletter, the section \u201cNewsletter\u201d applies to that.<\/li><li><strong>Book companion material.<\/strong> On the book page you can request the companion material for the German book \u201cWie geht\u2019s? Alles gut. Eigentlich.\u201d. For this I process your first name and email address in order to send you an email to confirm your address and, after you confirm, the link to the material (Art. 6(1)(b) GDPR). As proof I store the time and IP address of your registration and confirmation (Art. 6(1)(f) GDPR, my legitimate interest in being able to show your consent). The form is processed via HighLevel (see section \u201cNewsletter\u201d). If you tick the box for the newsletter, then after your confirmation I will send you my newsletter every 14 days on Mondays, plus two short welcome emails in the first week. In these emails I measure whether you open them and which links you click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw this consent at any time with effect for the future, for example via the unsubscribe link in every email. Without the tick you only receive the link to the material and no further emails. The material does not depend on the newsletter. If you do not click the confirmation, I delete your data after seven days. If you confirmed but did not choose the newsletter, I delete it after 90 days. If you reply to my email, I store your reply in order to answer you.<\/li>\n<li><strong>Payment processing (Stripe).<\/strong> For payments in the order process I use Stripe. The provider for the European area is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland; the parent company is Stripe, Inc., USA. When you pay, your payment details (for example card details or bank account), your name, your email address, billing details and the amount are transmitted directly to Stripe; card details do not reach me. Stripe also processes data to prevent fraud and to meet its own legal obligations. Data may be transferred to the USA in the process; the transfer relies on the adequacy decision on the EU-US Data Privacy Framework or on standard contractual clauses. The legal basis is Article 6(1)(b) GDPR (performance of the contract). You can find Stripe\u2019s privacy policy at <a href=\"https:\/\/stripe.com\/de\/privacy\" target=\"_blank\" rel=\"noopener\" style=\"overflow-wrap:anywhere;word-break:break-word\">https:\/\/stripe.com\/de\/privacy<\/a>.<\/li>\n<li><strong>Video sessions (Zoom).<\/strong> Live sessions, group programmes and one-to-one conversations take place via Zoom unless agreed otherwise. The provider is Zoom Communications, Inc., 55 Almaden Boulevard, San Jose, CA 95113, USA. On my behalf, Zoom processes technical connection data such as your IP address and device information, the details you give to take part (for example name and email address), and picture and sound during the session. Sessions are not recorded unless I expressly mark a format as recorded in advance. Data may be transferred to the USA in the process; the transfer relies on the adequacy decision on the EU-US Data Privacy Framework or on standard contractual clauses. The legal basis is Article 6(1)(b) GDPR (performance of the agreed service or pre-contractual measures). You can find Zoom\u2019s privacy policy at <a href=\"https:\/\/zoom.us\/privacy\" target=\"_blank\" rel=\"noopener\" style=\"overflow-wrap:anywhere;word-break:break-word\">https:\/\/zoom.us\/privacy<\/a>.<\/li>\n<li><strong>Self-assessment Discovery Wheel (Coachpodium).<\/strong> You take the \u201cDiscovery Wheel\u201d self-assessment and other assessments I offer on the Coachpodium platform (app.coachpodium.com). When you click the respective button, you leave my website and arrive at Coachpodium. Only then is data transmitted to Coachpodium, for example your answers, your name and email address, and technical connection data such as the IP address. Coachpodium processes it so that you receive your result. Which details I can see depends on the respective assessment; I use them only to support you. Data may be transferred to countries outside the EU and the EEA in the process; details are in Coachpodium\u2019s privacy policy. The legal basis is Article 6(1)(b) GDPR (carrying out the assessment you requested); where you give consent, point (a).<\/li>\n<li><strong>Members area and personal client area.<\/strong> For courses, materials and your personal client area (for example with plan, exercises and notes) I use the members area at members.thorstenenderlin.com. It is operated through HighLevel (LeadConnector); the provider and the transfer of data to the USA are described under \u201cNewsletter\u201d. Your name, your email address, your access credentials, your learning progress and the content that you or I place there are processed. Access is personal and password-protected. When you log in, your browser stores a session identifier that is technically necessary for logging in (Section 25(2) No. 2 TDDDG). The legal basis is Article 6(1)(b) GDPR. I delete your access and the content no later than six months after the respective offer ends, unless a statutory retention obligation applies.<\/li>\n<li><strong>Community on Skool.<\/strong> On my website I link to a community on Skool (skool.com). The link opens only when you click it; until then nothing from Skool is loaded on my website. If you join the community, you create an account there and give your data to Skool. Skool is responsible for this processing, the service is operated by a provider based in the USA, and Skool\u2019s terms of use and privacy terms apply, which you can find on skool.com.<\/li>\n<li><strong>Videos (YouTube).<\/strong> A video explaining the Leadership Circle Profile is embedded on the page \u201cLeadership Circle Profile\u201d (\/lcp\/). On the page you first see only a button (\u201cPlay the video\u201d). Only when you click it is the video loaded from YouTube\u2019s enhanced privacy mode (youtube-nocookie.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA, is certified under the EU-US Data Privacy Framework. When the video loads your IP address is transmitted to YouTube, and YouTube may store or read information on your device. The enhanced privacy mode is a YouTube setting; I cannot rule out that YouTube sets identifiers when you play the video. The video starts automatically after the click. The legal basis is your consent through the click under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Without a click nothing is loaded from YouTube. The page \u201cLeadership 2030\u201d has no embedded videos, only links to episodes and to the channel on YouTube. These links open the YouTube page only after you click them; the privacy terms of Google then apply.<\/li>\n<li><strong>Podcast audio.<\/strong> On the \u201cLeadership 2030\u201d page, podcast episodes are embedded as an audio player. The audio files are loaded only when you click \u201cPlay\u201d. Your browser then retrieves the file directly from a server of the Amazon CloudFront delivery network (Amazon Web Services), through which the podcast service Spotify (formerly Anchor) provides the episodes. Your IP address is transmitted to that server and processed technically so that the file can be delivered. The legal basis is Article 6(1)(f) GDPR (providing the playback you trigger). In addition I link to the episodes and to the show on Spotify (open.spotify.com and podcasters.spotify.com; Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden); these links open only when you click them, and Spotify\u2019s privacy terms apply from then on.<\/li>\n \t<li><strong>Language selection.<\/strong> A technically necessary setting is stored in your browser for the German and English versions of the site.<\/li>\n \t<li><strong>Audience measurement<\/strong>. Only if you consent to the \"Statistics\" category in the cookie banner do I use two services to understand how this website is used: Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Metricool by Metricool Software, S.L., C\/ T\u00e9llez 12, 28007 Madrid, Spain. This involves processing the pages you visit, time spent, where your visit came from, approximate location, device, browser and your IP address, and storing cookies or similar identifiers in your browser. With Google Analytics, data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Neither service is loaded without your consent. You can withdraw your consent at any time via the cookie settings of this website.<\/li>\n\t<li><strong>Contact via WhatsApp Business.<\/strong> You can contact me via WhatsApp Business. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (for users outside the US and Canada). If you contact me via WhatsApp, your phone number and the content of your messages are processed on Meta\u2019s servers, including outside the EU\/EEA, in particular in the United States. WhatsApp\u2019s privacy policy applies: <a href=\"https:\/\/www.whatsapp.com\/legal\/privacy-policy\" target=\"_blank\" rel=\"noopener\" style=\"overflow-wrap:anywhere;word-break:break-word\">https:\/\/www.whatsapp.com\/legal\/privacy-policy<\/a>. Contacting me via WhatsApp is voluntary; you are free to reach me by email or via the contact form instead. The legal basis is Article 6(1)(b) GDPR where your enquiry or ongoing support is concerned, otherwise point (f). During ongoing support I use WhatsApp only for short coordination and scheduling; please do not share sensitive information there.<\/li>\n<\/ul>\n<p class=\"klein\"><strong>External links and social media profiles.<\/strong> On this website I link to my profiles and offers on LinkedIn, Instagram, Threads, TikTok, Facebook, YouTube, Spotify and Skool as well as to the LinkedIn event \u201cLeadership 2030 Live\u201d. These are plain links, not embedded content and not plugins of these services. Opening my website therefore does not transmit anything to these providers. Only when you click a link do you leave my website, and your IP address is then transmitted to the respective provider; its privacy terms then apply. Providers include LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland), Meta Platforms Ireland Limited (Instagram, Threads, Facebook; address as given under WhatsApp), TikTok Technology Limited (Ireland) and Google Ireland Limited (YouTube). The respective provider is responsible for processing on these platforms.<\/p>\n<p class=\"klein\"><strong>Amazon Associates programme (Amazon.de PartnerNet).<\/strong> On some pages, for example \/en\/lcp\/, I recommend books and link to amazon.de. I take part in Amazon's partner programme (Amazon.de PartnerNet). If you buy something through such a link, I receive a commission. The price does not change for you. The links are marked as advertising and open in a new tab. My website does not load any Amazon scripts, widgets, images or cookies for this; these are plain text links. Only when you click a link do you leave my website and land on amazon.de. There, Amazon sets cookies and processes data under its own responsibility in order to attribute the purchase to my partner ID. The controller for this is Amazon Europe Core S.\u00e0 r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. For more information, see Amazon's privacy notice and cookie notice on amazon.de. The legal basis for including the links is my legitimate interest under Article 6(1)(f) GDPR in financing my recommendations. Through these links, I do not process any personal data about you on my own website. As an Amazon Associate I earn from qualifying purchases.<\/p>\n<p class=\"klein\"><strong>Affiliate links to Skool communities.<\/strong> On the page \/en\/werkzeuge\/ I recommend two communities on Skool (skool.com) that I am a member of myself. These links contain my affiliate ID. If you join a paid community through such a link, I receive a commission. The price does not change for you. The links are marked as advertising and open in a new tab. My website does not load anything from Skool for this; these are plain text links. Only when you click a link do you land on skool.com. There, Skool, Inc. (USA) processes data under its own responsibility in order to attribute your membership to my affiliate ID. For more information, see Skool's privacy policy. The legal basis for including the links is my legitimate interest under Article 6(1)(f) GDPR in financing my recommendations. My website itself does not process any of your personal data through these links.<\/p>\n\n<h2>5. Cookies<\/h2><p>This website uses technically necessary Cookies so that it works. For Cookies beyond that, I ask for your consent first. You can delete or block Cookies in your browser at any time. In addition, this website uses technically necessary entries in your browser\u2019s local storage, for example for the language selection, for the newsletter window (te_pop_until, see section 4) and for logging in to the members\u2019 area. Under Section 25(2) No. 2 TDDDG these are permitted without consent.<\/p><p><strong>Cookie banner and consent management.<\/strong> When you visit this website for the first time a cookie banner appears. For this I use the WordPress plugin Complianz, which runs on my website. There you can choose the categories \u201cFunctional\u201d, \u201cPreferences\u201d, \u201cStatistics\u201d and \u201cMarketing\u201d individually, accept everything or reject. Technically necessary functions (category \u201cFunctional\u201d) are always active. Services in the category \u201cStatistics\u201d (Google Analytics 4, Metricool) are loaded only after you consent; as long as you do not consent they are blocked. At present I do not use any services in the categories \u201cPreferences\u201d and \u201cMarketing\u201d. Your choice is stored in a cookie (names beginning with cmplz_) in your browser and is valid for 365 days; after that the banner asks again. This storage serves as proof of your decision and is technically necessary (Section 25(2) No. 2 TDDDG, Article 6(1)(c) and (f) GDPR). You can withdraw or change your consent at any time with effect for the future: via the button \u201cManage consent\u201d at the bottom of the page, or by deleting the cookies of your browser for this website. Further details on the cookies used are in the <a href=\"\/en\/cookie-policy-eu\/\">Cookie Policy (EU)<\/a>.<\/p><h2>6. How long I keep data<\/h2><p>I store personal data only for as long as is necessary for the purposes stated. After that I delete it, unless there is a statutory retention obligation. For documents relevant for tax purposes, the statutory periods of six or ten years apply. In detail: information from registration questions and preparation questionnaires as well as content in the client and members\u2019 area is deleted no later than six months after the end of the respective offer. I keep invoice and payment data in accordance with the retention periods under tax and commercial law. I store newsletter data until you withdraw your consent. I delete data from the book waitlist and the prize draw at the latest four weeks after the draw (see \u201cBook waitlist and prize draw\u201d). I delete data from requests for the book companion material after seven days if you do not confirm your address, and after 90 days if you confirmed but did not choose the newsletter. With the newsletter, the section \u201cNewsletter\u201d applies. Your cookie choice in the banner is valid for 365 days.<\/p><h2>7. Your rights<\/h2>\n<ul>\n \t<li><strong>Access<\/strong> to the data I hold about you.<\/li>\n \t<li><strong>Rectification<\/strong> of incorrect or incomplete data.<\/li>\n \t<li><strong>Erasure<\/strong> of your data, unless a retention obligation prevents it.<\/li>\n \t<li><strong>Restriction<\/strong> of processing.<\/li>\n \t<li><strong>Objection<\/strong> to processing based on legitimate interests.<\/li>\n \t<li><strong>Data portability<\/strong> in a common format.<\/li>\n \t<li><strong>Withdrawal of consent<\/strong> with effect for the future, for example for the newsletter.<\/li>\n<\/ul><p>An informal message is enough, to<\/p><a href=\"mailto:hello@thorstenenderlin.com\">hello@thorstenenderlin.com<\/a><p>.<\/p><h2>8. Right to complain<\/h2><p>If you believe that the processing of your data infringes the GDPR, you can complain to a supervisory authority. The authority responsible for me is:<\/p><div class=\"daten\">\n<p style=\"margin-bottom: 0;\"><strong>The State Commissioner for Data Protection and Freedom of Information of Baden-W\u00fcrttemberg<\/strong>\nLautenschlagerstrasse 20, 70173 Stuttgart, Germany\n<a href=\"https:\/\/www.baden-wuerttemberg.datenschutz.de\" target=\"_blank\" rel=\"noopener\">baden-wuerttemberg.datenschutz.de<\/a><\/p>\n\n<\/div>\n<h2>9. Data security<\/h2><p>I take technical and organisational measures to protect your data against unauthorised access, loss and misuse. The website is available with encryption throughout.<\/p><h2>10. Changes<\/h2><p>I update this policy when the legal situation or the services used change. The version published here is the one that applies.<\/p><p class=\"klein\" style=\"margin-top: 34px;\">Version: 26 October 2026<\/p>\n\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Rechtliches Datenschutzerkl\u00e4rung Ich nehme den Schutz deiner pers\u00f6nlichen Daten ernst. Hier steht, welche Daten ich erhebe, wof\u00fcr ich sie verwende und welche Rechte du hast. Verantwortlicher Thorsten EnderlinBeyond C, EinzelunternehmenEhrenmattenweg 6, 79280 Au, DeutschlandTelefon: +49 176 20843402E-Mail:hello@thorstenenderlin.com 1. Welche Daten ich erhebe Wenn du diese Website besuchst, mir schreibst oder ein Angebot nutzt, k\u00f6nnen folgende [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"elementor_header_footer","meta":{"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"slim_seo":{"title":"Datenschutz - Thorsten Enderlin","description":"I take the protection of your personal data seriously. This page sets out which data I collect, what I use it for and which rights you have."},"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":23,"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":5982,"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/5982"}],"wp:attachment":[{"href":"https:\/\/thorstenenderlin.com\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}