WhoAmI.Academy

Privacy Policy

1. General Information

We process personal data in accordance with the EU General Data Protection Regulation (GDPR). This notice explains what data we process, for which purposes and legal bases, who receives it, how long we store it, and which rights you have. Transfers on this site are protected by TLS/SSL encryption.

2. Controller

Stefanie Weil – Business & Soul
Affstätter Tal 11, 71083 Herrenberg, Germany
Email: contact@whoami.academy

3. Categories of Data

  • Identity and contact data (first/last name, email)
  • Communication content (messages via forms/email)
  • Technical usage data (IP address, browser, OS, time of request, referrer URL)
  • Payment data (e.g., via PayPal – processed there under their responsibility)

4. Purposes and Legal Bases (Art. 6 GDPR)

  • Website provision & security (server log files) – legitimate interests, Art. 6(1)(f) GDPR (operation, stability, fraud/misuse prevention).
  • Contact & enquiries (forms/email) – contract / pre-contract communication, Art. 6(1)(b) GDPR; optional details based on consent, Art. 6(1)(a) GDPR.
  • Orders / fulfilment (if offered) – performance of a contract, Art. 6(1)(b) GDPR.
  • Newsletter / sign-ups (if used) – consent (double opt-in), Art. 6(1)(a) GDPR; withdrawal possible at any time.

5. Cookies & Tracking

We set no analytics or marketing cookies. Technically necessary cookies may be used to enable certain site functions (legal basis: Art. 6(1)(f) GDPR).

6. Processors & Hosting (Hostinger)

Hosting is provided by Hostinger as our processor under Art. 28 GDPR. Server log files are processed for technical provision and security. Processing in third countries may occur according to the provider’s architecture; where applicable, transfers rely on appropriate safeguards, in particular Standard Contractual Clauses under Art. 46 GDPR.

7. Payments (PayPal)

For payments via PayPal, processing is carried out there as an independent controller. PayPal’s privacy policy applies. We receive transaction confirmations (e.g., payment received) to fulfil the contract.

8. Disclosures

We disclose data only where necessary for the purposes above (e.g., hosting) or where legally required. No other sharing with third parties takes place.

9. Storage Periods

  • Log files: retained short-term for security, then deleted.
  • Communication/enquiries: until completion of your request or according to statutory retention.
  • Contract/billing data: per commercial and tax retention periods.
  • Newsletter data: until you withdraw consent.

10. Your Rights

You have the rights of access, rectification, erasure, restriction, data portability and to object (Art. 15–21 GDPR). You may withdraw consent at any time with future effect (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Contact for exercising rights: contact@whoami.academy

11. Changes to this Policy

We may update this policy to reflect legal or service changes. The current version is published on this page.
Last updated: August 2025