Privacy Policy

This is a courtesy translation. The legally binding version is the German privacy policy.

Last updated: 13 August 2026

Protecting your personal data is important to us. Below we inform you about the nature, scope and purpose of the processing of personal data on this website, as well as about your rights. The applicable law is the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Uwe Sélan Preising / Sélan & Partner
Prinzregentenufer 5
90489 Nuremberg
Germany

Email: preising@selanpartner.de
Phone: +49 175 1192864

No data protection officer has been appointed, as the statutory requirements for this (in particular section 38 BDSG) are not met.

2. General information

We process personal data only to the extent necessary to provide a functional website and our content, or where you have given your consent. Personal data is deleted as soon as the purpose of storage ceases to apply and no statutory retention obligations (e.g. under commercial or tax law) prevent deletion. The relevant legal basis and storage period are stated with each individual processing activity.

3. Hosting and server log files (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. It is a largely static website with one server-side function for the contact form (see section 7). Vercel processes the data arising when the website is accessed on our behalf.

The website is delivered and the server-side function is executed via a data centre in Frankfurt am Main (EU region). Regular processing of the content therefore takes place within the EU. However, as Vercel Inc. is a US company and our contractual partner, access from the USA (for example for maintenance or support purposes) cannot be entirely ruled out; the notes in section 12 therefore also apply.

Each time the site is accessed, the following data is automatically processed in server log files: IP address, date and time, URL accessed, referrer URL as well as the browser and operating system used (user agent). This data serves the delivery, stability and security of the website and is not combined with other data or used to identify individual persons.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable provision).
Storage period: Log files are stored only for as long as necessary for these purposes and are then deleted. A data processing agreement (DPA) is in place with Vercel.

4. Reach measurement with Vercel Web Analytics (cookieless)

To analyse the use of our website we use Vercel Web Analytics, a service provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA – the same provider that also supplies our hosting (see section 3).

No cookies, no access to your device: The service operates entirely without cookies. No cookies are set and no information is stored on or read from your device – in particular, neither localStorage nor sessionStorage nor comparable techniques are used. In our assessment, consent under section 25(1) TDDDG is therefore not required; for the same reason this website does not need a cookie banner.

No third-party request from your browser: The measurement script is not loaded from an external domain but is served from our own domain. Your browser does not establish a connection to an external third-party domain for this purpose.

Recognition without a persistent identifier: To distinguish between visits, a hash value is calculated on the server from the data of the incoming request (including IP address and browser identifier). The IP address is not stored and cannot be reconstructed from the hash value. The hash value is automatically reset after 24 hours. Recognition across several days or across different websites is therefore impossible; no user profiles are created and no cross-site tracking takes place.

Data processed: time of access, URL or page path accessed, referrer (previously visited page), filtered query parameters, approximate location derived from the IP address (country, region, city), operating system and version, browser and version, device type (desktop/tablet/mobile) and the version of the measurement script. Evaluation is carried out exclusively on an aggregated, statistical basis. The URLs of our website contain no personal information. Access by automated systems (bots) is not counted.

Purpose: Statistical evaluation of site usage (reach, popular content, origin of visits) in order to design our offering according to demand and to improve it continuously.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in data-minimising, cookieless reach measurement without profiling. In our assessment your legitimate interests do not override this, as no persistent identifiers are used, no profiles are created and no combination with other data takes place.
Storage period: The session assignment is discarded after 24 hours; beyond that, only aggregated, non-personal statistics are retained.

Your right to object: You may object to this processing at any time informally using the contact details given in section 1 (Art. 21 GDPR; see also section 14). Independently of this, you can prevent the measurement itself by blocking the loading of the measurement script in your browser – for example via a script or ad blocker or corresponding browser settings.

Processing on our behalf and third-country transfer: Vercel processes the data on our behalf; a data processing agreement (DPA) is in place. Collection takes place via our own domain and therefore via the EU region Frankfurt am Main that we have selected (see section 3). For the subsequent storage and evaluation of the statistical data within the provider's platform, however, exclusive processing within the EU is not guaranteed; as Vercel Inc. is a US company, processing in the USA cannot be ruled out in this respect. The notes in section 12 apply. Further information from the provider: vercel.com/docs/analytics/privacy-policy

5. SSL/TLS encryption

This website uses SSL/TLS encryption to protect the transmission of data, recognisable by "https://" and the padlock symbol in your browser's address bar. This means the data you transmit cannot be read by third parties.

6. Fonts and Google Maps

Fonts (self-hosted)

The fonts used (Cormorant Garamond, Open Sans) are served exclusively locally from our server. No connection to third-party servers – in particular to Google – and no transmission of your IP address takes place in this context.

Google Maps (two-click solution)

On the contact page we embed a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; where applicable Google LLC, USA). The map is not loaded by default. Initially you see only a placeholder with a "Load map" button. The map is only loaded after your active click; in doing so, personal data (in particular your IP address as well as device and browser data) is transmitted to Google, and Google may set cookies.

Legal basis: Art. 6(1)(a) GDPR (consent by clicking). Consent can be withdrawn at any time with effect for the future by not loading the map. For the transfer to the USA see section 12. Further information: policies.google.com/privacy

7. Contact form (sent via Resend)

Via our contact form you can send us the following: name, email address, telephone number (optional), subject and message. The entries are passed to a server-side function on Vercel, which sends your enquiry to us by email via the service provider Resend (Resend Inc., USA). Your email address is set as the reply-to address. Before sending, you must consent to the processing via a mandatory checkbox. To protect against spam, the form contains a hidden "honeypot" field through which no additional data is collected.

Purpose: Handling and answering your enquiry.
Legal basis: Art. 6(1)(a) GDPR (consent); for contract-related enquiries additionally Art. 6(1)(b) GDPR as well as our legitimate interest under Art. 6(1)(f) GDPR.
Storage period: We store your enquiry until it has been conclusively dealt with and delete it afterwards, unless statutory retention obligations apply. A data processing agreement (DPA) is in place with Resend. For the transfer to the USA see section 12.

8. Newsletter (Klaviyo, double opt-in)

We use the service Klaviyo (Klaviyo Inc., 125 Summer St, Boston, MA 02110, USA) to send our newsletter. Your email address and, optionally, your first name are processed. Technically, the sign-up is transmitted directly from your browser to Klaviyo; your IP address is also transmitted in the process.

Registration takes place using the double opt-in procedure: dispatch is only activated after confirmation via a link in a confirmation email. Before sending, you must give your consent via a mandatory checkbox.

Purpose: Sending information and news by newsletter.
Legal basis: Art. 6(1)(a) GDPR (consent).
Withdrawal: You can unsubscribe from the newsletter at any time via the unsubscribe link in every email; the lawfulness of processing carried out until then remains unaffected. After unsubscribing, your data is deleted from the distribution list. A data processing agreement (DPA) is in place with Klaviyo. For the transfer to the USA see section 12.

9. Appointment booking via Calendly (external link)

On the training page you can arrange a free introductory conversation via a link. The link leads to the service Calendly (Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, GA 30363, USA). This is an external service: as soon as you click the link, you leave our website and are redirected to Calendly's booking page. Calendly is not embedded on our website itself; no Calendly cookies or scripts are loaded there.

Data processed: If you book an appointment, we generally process your name, your email address, the appointment time you select and, where applicable, further details you voluntarily provide, via Calendly as processor. Calendly may additionally process technical data (in particular IP address, browser and device information) and set its own cookies on the Calendly page.

Purpose: Arranging and holding an introductory conversation in connection with our coaching training, as well as organising and following up the appointment.
Legal basis: Art. 6(1)(b) GDPR (processing to carry out pre-contractual measures at your request); where necessary Art. 6(1)(f) GDPR (legitimate interest in efficient appointment organisation).
Storage period: We process appointment data for as long as this is necessary for appointment organisation and, where applicable, the initiation of a contractual relationship, and delete it afterwards unless statutory retention obligations apply. Calendly's own storage periods apply on Calendly's site.

Processing on our behalf: Calendly processes the appointment data you enter on our behalf. Calendly provides a Data Processing Addendum (DPA) which is incorporated into Calendly's terms of use and meets the requirements of Art. 28 GDPR.
Third-country transfer: Calendly processes data in the USA. The transfer is based on the EU-U.S. Data Privacy Framework (DPF), for which an adequacy decision of the EU Commission exists, and additionally on the Standard Contractual Clauses under Art. 46 GDPR. For the residual risk see section 12.

Voluntary nature: Booking an appointment is voluntary. Without the stated data we cannot reserve an online appointment for you; alternatively you can contact us by email or telephone (section 7).
Further information: Calendly Privacy Notice, Data Processing Addendum, Data Privacy Framework

10. Google reviews

Google reviews displayed on our website are stored statically in the source code. There is no live retrieval from a Google interface and no transmission of data to Google.

11. Cookies, storage technologies and members' area

Our website uses no tracking or analytics cookies (no Google Analytics, no Tag Manager, no Meta pixel or similar). Third-party cookies may arise if you actively load the Google Maps map (see section 6) or call up the external Calendly booking page (see section 9).

For reach measurement we use Vercel Web Analytics. This service operates without cookies and neither stores nor reads any information on or from your device; you will find the details in section 4. As neither storage nor access to your device within the meaning of section 25(1) TDDDG takes place, consent is not required in our assessment. For this reason this website uses no cookie banner and no consent management tool.

For the password-protected members' area, only your browser's sessionStorage is used. Unlocking takes place purely on the client side and is remembered only locally in your browser; it is deleted automatically when the tab is closed. No personal data is transmitted to a server for this purpose.

12. Data transfer to the USA

The services Vercel (hosting and Web Analytics), Resend, Klaviyo, Calendly and Google process data in the USA or are US companies. All of the providers named are certified under the EU-U.S. Data Privacy Framework (DPF), for which an adequacy decision of the EU Commission under Art. 45 GDPR exists. The transfer is based primarily on this; in addition, and for transfers not covered by the DPF, the Standard Contractual Clauses under Art. 46 GDPR apply. Data processing agreements (DPAs) are in place with all processors.

Residual risk: Despite these measures, protection equivalent to the European level cannot be guaranteed in every case; in particular, access by US authorities is possible. In addition, the adequacy decision on the DPF is the subject of ongoing proceedings before the European Court of Justice. Insofar as a transfer is based solely on your consent (e.g. Google Maps), you also consent to this residual risk.

13. Your rights

You have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You may withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out until then remains unaffected. An informal message to the contact details given in section 1 is sufficient to exercise these rights.

14. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, or the processing serves the establishment, exercise or defence of legal claims.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

16. Data security and currency

We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access, and continuously develop these further. This privacy policy has the status stated above and will be adapted if changes to the website or the legal situation make this necessary. The current version can be accessed on this page at any time.