Privacy Policy

1. Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

Anna Katharina Thielemeyer
Wilmsstr. 68
46049 Oberhausen
Germany
E-mail: info@annashuffle.com

2. General Information

I take the protection of your personal data seriously. Your data is processed confidentially and exclusively in accordance with the applicable data protection legislation, in particular the GDPR, and this Privacy Policy.

You can generally use this website without providing personal data. Where personal data (e.g., name, e-mail address) is collected, this is done on a voluntary basis whenever possible. Your data will only be disclosed to third parties with your explicit consent or where legally permitted.

3. Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

When accessing the website, the following log data is automatically collected:
– IP address
– Date and time of access
– Browser type and version
– Operating system
– Referrer URL

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in ensuring the security and functionality of the website).
Log files are deleted after no more than 7 days.

4. Cookies

Information on the use of cookies is provided on a separate cookie notice page.

5. Newsletter (Thrive Leads & ActiveCampaign)

Newsletter subscriptions are managed via Thrive Leads, and subscriber data is transmitted to the email marketing provider ActiveCampaign, LLC, 1 North Dearborn Street, Chicago, IL 60602, USA.

Processed data includes:
– E-mail address
– Optional name
– IP address at the time of subscription
– Newsletter interactions (opens, clicks)

The legal basis is your consent under Art. 6(1)(a) GDPR.
You may withdraw your consent at any time (e.g., via the unsubscribe link in any newsletter).

Data transfer to the USA:
ActiveCampaign is certified under the EU–US Data Privacy Framework (DPF), ensuring an adequate level of data protection.

Data is retained until consent is withdrawn.

6. Sale of Online Courses via Digistore24

Online courses and digital products are sold through Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany.

When you make a purchase via Digistore24, the provider processes data such as:
– Name, address, e-mail address
– Payment details
– Purchased products
– Transaction data

Digistore24 acts as an independent data controller for all data processed during the checkout and payment process.

The legal basis for the processing of personal data in connection with the purchase process is Art. 6(1)(b) GDPR(performance of a contract).

Digistore24’s Privacy Policy applies to all purchases made through its platform.

7. Online Courses (Thrive Apprentice)

To access online courses, a user account is required. The following data is processed:
– Name
– E-mail address
– Username
– Encrypted password
– Course progress and related usage data

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Users may delete their account at any time. Data subject to statutory retention periods (e.g., tax-relevant records) will remain stored as required.

8. Embedded Content: YouTube

Videos are embedded using YouTube (Google Ireland Limited, Dublin, Ireland).
Videos are integrated via the privacy-enhanced mode (youtube-nocookie.com), meaning data is transmitted only when you actively play the video.

The legal basis is Art. 6(1)(a) GDPR (consent via cookie banner or by clicking the video).

9. External Links & Affiliate Programmes

The website contains external links, including Amazon Affiliate links and links to platforms such as Instagram, YouTube, Spotify or TikTok.
When you click such links, you leave this website.

The operators of those external platforms are solely responsible for any data processing taking place there.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in marketing and expanding reach).

10. Data Security

Appropriate technical and organisational measures are implemented to protect your data, including SSL/TLS encryption and restricted access controls.

11. Rights of Data Subjects

You have the following rights under the GDPR:

– Right of access (Art. 15 GDPR)
– Right to rectification (Art. 16 GDPR)
– Right to erasure (Art. 17 GDPR)
– Right to restriction of processing (Art. 18 GDPR)
– Right to data portability (Art. 20 GDPR)
– Right to object (Art. 21 GDPR)
– Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, simply send an informal e-mail to info@annashuffle.com.

12. Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority, e.g., the data protection authority of the EU Member State of your residence.
In Germany, for example:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

Status of this Privacy Policy: November 2025