Legal
Privacy Policy
1. Controller
Julia Sutter
Harbatshofen 10 ½
88167 Stiefenhofen
Germany
Email: julia@juliasutter.de
2. Hosting with GitHub Pages
This static website is hosted through GitHub Pages by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. GitHub processes connection data required to deliver the site securely, such as IP address, time of access, requested file, browser, operating system and referrer. The legal basis is Article 6(1)(f) GDPR.
GitHub may process data in the United States. Please see GitHub’s Privacy Statement.
3. Cookies and external content
Optional advertising measurement is activated only with your consent. Your choice is stored in your browser for up to 180 days (julia-marketing-consent-v1). This storage is necessary to respect your decision under section 25(2)(2) TDDDG. You can change it through “Cookie settings” in the footer at any time. Fonts and images are served locally with the website. Google appointment booking is loaded only when you click a call booking button. No connection to Google is made for this feature before that click.
Optional advertising measurement with the Meta Pixel
If you choose “Accept”, we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, to measure and improve our Facebook and Instagram ads. The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Refusing does not affect your use of the website or your ability to book.
With consent, we measure visits to our main offering pages, successfully submitted course registrations and enquiries, and opening the appointment calendar. A binding registration includes its value in euros; it does not confirm payment. Opening the calendar does not count as a booked call. Meta also receives technical data such as IP address, browser and device information, page address and, where present, ad click identifiers. Meta may associate these data with a Meta account and use them for personalised advertising.
We do not send form contents such as names, email addresses, postal addresses, messages or information about children as measurement parameters. Automatic advanced matching and automatic event detection are not used. The Pixel may use the _fbp and _fbc marketing cookies, typically lasting up to three months. The Pixel is not loaded on our legal information pages.
You may withdraw consent for the future through “Cookie settings” by selecting “Decline”. Further measurement events from this website stop and accessible _fbp and _fbc cookies on this domain are removed. Withdrawal does not undo previous lawful processing. Meta’s retention rules and your Meta privacy settings apply to data already processed by Meta.
Julia and Meta are jointly responsible for collecting and transmitting event data under Meta’s Controller Addendum. Meta is responsible for subsequent processing. Data may be processed outside the European Economic Area, including in the United States. See Meta’s Privacy Policy and Cookie Policy for purposes, retention, international transfer safeguards and your rights. You may exercise your privacy rights with Julia or Meta.
Optional measurement for ChatGPT ads
With your consent, we also use an OpenAI image pixel to attribute visits, successfully submitted enquiries and binding course registrations to our ChatGPT ads. A course registration is not a confirmed payment. Opening Google Calendar is not reported to OpenAI as a booked call. The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.
OpenAI receives the event type, time, website domain, a random event identifier and technical connection data such as your IP address. If an ad link contains the OpenAI click identifier oppref, we store it after consent in local browser storage under julia-openai-click-v1 and use it for ad attribution for no more than 30 days. Expired identifiers are removed on your next visit to our website, or immediately when you withdraw consent. They may remain in browser storage until then. We do not load OpenAI JavaScript that could read form fields. We do not send names, email addresses, billing addresses, information about children or message contents to OpenAI. Browser settings may limit storage and attribution.
You can withdraw consent through “Cookie settings”. Further measurement events stop and the locally stored OpenAI click identifier and accessible legacy OpenAI measurement cookies on this domain are removed. This does not recall data already transmitted. See the OpenAI Privacy Policy and Conversion Measurement Terms for information about OpenAI, processing, possible transfers outside the European Economic Area and your rights.
Attributing enquiries and registrations to ads
With your consent to advertising measurement, we read the campaign labels utm_source, utm_medium, utm_campaign and utm_content from the ad link you visited. These labels are kept in your browser tab’s session storage (julia-campaign-attribution-v1) for up to 30 minutes after arriving through an ad link. A new ad link replaces the previous attribution. When you submit a contact or course form, the labels are sent with the form through Formcarry to Julia, allowing us to identify the source of an enquiry or registration. Without consent, these labels are neither stored nor added to the form. Withdrawal clears the stored attribution. The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.
This attribution does not collect search terms, conversation contents or personal click identifiers. No form data is sent to OpenAI. Bookings in the embedded Google Calendar cannot be attributed this way; opening the calendar is not a confirmed appointment. Campaign labels submitted with an enquiry or registration are deleted with that record according to the retention rules below.
Booking with Google Calendar and calls via Google Meet
We use Google Calendar for the free 20-minute call. After your click, Google’s booking page appears in a dialog. You can also open it directly in a new tab. Loading it sends technical connection data, including your IP address and browser and device information, to Google. Google may use its own cookies or similar storage technologies.
When you book, you enter your first name, last name and email address directly with Google. Julia receives these details and your chosen time to organise the call. Google provides the booking confirmation and Google Meet joining details. This website does not read or store the information entered in the booking window. Once loaded, the booking frame remains available during this page visit, including when you close the dialog.
The call takes place via Google Meet. For people in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For information on Google’s processing, including possible processing outside the EU and your settings, see Google’s Privacy Policy. If you prefer not to use Google appointment booking, you can contact Julia through the contact form or by email.
4. Contact and registration forms
When you submit a form, Julia processes the information you provide. A general contact form usually contains your name, email address, topic and message. A course request or binding registration may additionally include your surname, children’s ages, selected course, billing address and contractual confirmations.
General enquiries are processed under Article 6(1)(f) GDPR. Pre-contractual enquiries and registrations are processed under Article 6(1)(b) GDPR.
Formcarry
Form data is transmitted and stored by Teijal, Inc. d/b/a Formcarry, 3 Germay Dr, Unit 4 #1278, Wilmington, DE 19804, USA, acting as processor. Formcarry states that form data is stored in the EEA. Standard Contractual Clauses cover possible support access from the United States. IP address and technical connection data may also be processed when a form is submitted. See Formcarry’s Privacy Policy and Data Processing Agreement.
5. Email communication
Messages, sender address and any other information you provide are processed to respond to you under Article 6(1)(b) or (f) GDPR, depending on the nature of your enquiry.
6. Retention
Personal data is deleted when its purpose ends unless legal retention duties apply. Contract and invoice data is retained for the applicable statutory periods.
7. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may complain to a data protection authority, in particular the Bavarian State Office for Data Protection Supervision, www.lda.bayern.de.
8. Security and changes
The website is delivered over HTTPS and appropriate safeguards are used. This policy will be updated when the website, services or legal requirements change.