1. Controller

This website is operated by:

André Munzinger – Your Next Step
Gronachblick 3
74589 Satteldorf
Germany

Email: info@your-next-step.com
Website: https://your-next-step.com

We are based in Germany and comply with the General Data Protection Regulation (GDPR) as well as the Federal Data Protection Act (BDSG).

2. Collection and Processing of Personal Data

User Accounts & Orders

If you create an account or order digital products, we process your name, email address, billing and payment details.
Legal basis: Performance of contract (Art. 6 para. 1 lit. b GDPR).

Payments

Payment processing is carried out by Stripe Payments Europe, Ltd. (Ireland). We do not store any payment data ourselves.
More info: https://stripe.com/de/privacy

Appointment Bookings

For booking workshops/coaching sessions we use TidyCal (Acuity/TidyCal Inc.). Name, email address, and booked times are processed.
Legal basis: Performance of contract (Art. 6 para. 1 lit. b GDPR).

Statistics

We use Matomo (self-hosted) for anonymized analysis (e.g., page views, device type). There is no transfer of data to third parties.
Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR).

Newsletter

If you subscribe to our newsletter, we store your email address (and optionally your name). Delivery is carried out via [to be determined tool, e.g. Mautic].
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR).
You may withdraw your consent at any time.

Contact Forms & Comments

When using forms or comments, we collect your input, IP address, and browser data for spam prevention.

Cookies

We use cookies to enable logins, settings, and analytics. You can disable cookies in your browser settings.

Embedded Content (YouTube, etc.)

Our pages may contain videos from YouTube. We use the “extended data protection mode.” Data is only transmitted to YouTube (Google Ireland Limited) once you play a video.
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR).

Google Fonts

For display purposes, we use locally hosted Google Fonts. This means no data is transferred to Google servers.

3. Storage Period

• Accounts & orders: as long as required or legally mandated
• Newsletter: until unsubscribed
• Comments/forms: indefinitely unless deleted

4. Your Rights

You have the right to:

• Access your stored data
• Rectification or erasure
• Restriction or objection to processing
• Withdrawal of consent
• Lodge a complaint with the competent supervisory authority (e.g. BfDI)

To exercise these rights, contact us at: info@your-next-step.com

5. Data Security & Transfer

• SSL-encrypted data transmission
• Storage on secure servers with our host all-inkl.com (Neue Medien Münnich, Germany)
• Access only by authorized persons
• If data is processed outside the EU (e.g., Stripe, YouTube), GDPR-compliant safeguards are ensured.

6. Contact Person

Responsible for data protection:
André Munzinger – Your Next Step
Email: info@your-next-step.com
Address: Gronachblick 3, 74589 Satteldorf