Zum Inhalt springen
North Athletic

Privacy Policy

This English version is provided for your convenience. In the event of any discrepancies, the German version of this privacy policy shall prevail.

1. Introduction

Protecting your personal data is our top priority. In this privacy policy, we inform you about which data we collect, what we use it for and which rights you have as a data subject, in full compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

The controller responsible for data processing on this website is:

Dominik Giese
Johann-Gutenberg-Str. 43a
23879 Mölln
Germany

2. General information on data processing

As a matter of principle, we only process our users’ personal data to the extent necessary to provide a functional website as well as our content and services. Personal data is generally only processed with the user’s consent or where processing is permitted by law.

Legal bases for processing:

Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent.

Art. 6(1)(b) GDPR is the legal basis where processing of personal data is necessary for the performance of a contract, e.g. when a visitor purchases a product from us or we provide a service for them. This legal basis also applies to processing necessary for pre-contractual measures, such as enquiries about our products or services.

Art. 6(1)(c) GDPR applies where we process personal data to fulfil a legal obligation, as may be the case under tax law, for example.

Art. 6(1)(f) GDPR serves as the legal basis where we can rely on legitimate interests to process personal data, e.g. for cookies that are necessary for the technical operation of our website.

3. Hosting and content management

Our website is based on Squarespace. Hosting is provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
Data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of the website).

4. Data collection on this website

a) Access data & server logs

When you visit the website, the following data is collected automatically:

  • IP address (anonymised)
  • Date & time of access
  • Page/file accessed
  • Browser type & operating system
  • Referrer URL

This data is used exclusively to ensure the operation of the website and is not combined with other data sources.

Legal basis: Art. 6(1)(f) GDPR

b) Contact forms (Squarespace & Typeform)

If you contact us via a form, we process the data you voluntarily enter. Depending on the form, this may include in particular the following personal data:

  • Name
  • Email address
  • Phone number
  • Age
  • Occupation
  • Goals, wishes, challenges
  • Free-text information about your personal situation

This data is collected exclusively to prepare individually for a strategy call, to respond to your enquiry or to initiate a possible collaboration.

Data is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) and, where you voluntarily provide information about your health or physical condition, on the basis of Art. 9(2)(a) GDPR (consent to the processing of special categories of data).

Your data will not be passed on to third parties and will be deleted after 6 months at the latest unless a collaboration follows.

5. Use of cookies

Our website uses cookies and similar technologies. When you first visit the website, you can use our Squarespace consent tool to decide individually which cookies you want to allow.

Technically necessary cookies are required to use the site (Art. 6(1)(f) GDPR).
Analytics and marketing cookies are only used with your express consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time.

6. Analytics and marketing tools

We use the following services to evaluate and optimise our website and to display targeted advertising. Unless stated otherwise, processing only takes place with your express consent pursuant to Art. 6(1)(a) GDPR. You give your consent via our cookie consent tool and can withdraw it at any time.

a) Google Tag Manager

This website uses Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Tag Manager itself does not process any personal data. It is used exclusively to manage and trigger other tracking scripts, which in turn may collect data (e.g. Google Analytics, Meta Pixel).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the efficient management of website tags)

b) Google Analytics

This website uses functions of the web analytics service Google Analytics (with IP anonymisation enabled) from Google Ireland Limited.

Data collected:

  • IP address (shortened)
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Time of the server request
  • Click and scroll behaviour

The information collected is usually transferred to and stored on a Google server in the USA. The IP address is anonymised before transfer.

Legal basis: Art. 6(1)(a) GDPR
Data transfer: USA, on the basis of EU Standard Contractual Clauses

c) Meta Pixel (formerly Facebook Pixel)

We use the Meta Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

This pixel allows us to track the behaviour of website visitors after they have been redirected to our website by a Meta ad. This makes it possible to measure the effectiveness of ads and to create targeted new audiences (“Custom Audiences”).

Data collected:

  • Device information
  • IP address
  • Browser information
  • Pages visited
  • Interactions

Legal basis: Art. 6(1)(a) GDPR
Data transfer: USA, on the basis of EU Standard Contractual Clauses

d) Google Ads & Google Remarketing

This website uses the online advertising programme Google Ads as well as Google Remarketing. The provider is Google Ireland Limited.

Data collected:

  • IP address
  • Usage behaviour
  • Pages visited
  • Interactions

Legal basis: Art. 6(1)(a) GDPR
Data transfer: USA, EU Standard Contractual Clauses

e) LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Data collected:

  • URL
  • Referrer
  • IP address
  • Device and browser properties
  • Timestamp

Legal basis: Art. 6(1)(a) GDPR

f) Hotjar

We use Hotjar (Hotjar Ltd., Malta) to visually analyse user behaviour (e.g. clicks, mouse movements, scrolling behaviour).

Hotjar anonymises the IP address and sets cookies to measure the behaviour of individual users, but without making them identifiable.

Legal basis: Art. 6(1)(a) GDPR

Note: All tools are only used if you have given your consent via the cookie banner. You can withdraw your consent at any time via the corresponding link in the footer or via your browser settings.

7. Newsletter & email marketing

We offer you the option of subscribing to our email newsletter via our website. As part of the subscription, we process personal data in order to provide you regularly with information about our services.

a) Provider & data processing

We use the service provider KlickTipp, operated by KLICK-TIPP LIMITED, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, to send our newsletter.

KlickTipp stores your data on servers within the EU (as of 2025) and processes it on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. There is no transfer to third countries outside the EU.

Data processed:

  • Email address (required)
  • First name (optional)
  • IP address at the time of subscription
  • Date and time of subscription

Legal basis: Art. 6(1)(a) GDPR (consent)

b) Double opt-in & documentation

Subscription to our newsletter takes place using the double opt-in procedure. After subscribing, you will receive a confirmation email in which you must actively confirm your subscription again. Only then will your email address be activated for mailing.

This logging serves as proof that the subscription was actually made by you.

c) Performance measurement & tracking

KlickTipp allows us to analyse how recipients interact with our emails. For this purpose, it records whether and when emails are opened and which links are clicked. These analyses are pseudonymised, i.e. without drawing conclusions about specific individuals.

Legal basis: Art. 6(1)(a) GDPR

You can object to this performance measurement at any time by unsubscribing from the newsletter.

d) Withdrawal of consent

You can withdraw your consent to receiving the newsletter at any time, either via the unsubscribe link in every email or by notifying us at: dominik@northathletic.de

After withdrawal, no further newsletters will be sent.

8. Embedded content & third-party services

On our website, we use various third-party services to display content attractively, enable bookings and make our communication efficient. When this content is accessed, personal data may be transferred to the respective providers, in particular the IP address, which is technically required for display.

a) YouTube videos

Our website embeds videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you play a video, your IP address is transmitted to Google. If you are logged into your YouTube account at the same time, Google may assign your browsing behaviour to your personal profile.

Legal basis: Art. 6(1)(a) GDPR (consent via the cookie banner)
Data transfer to third countries: USA, Standard Contractual Clauses

b) Social media links

Our website contains links to our profiles on the following social networks:

  • Instagram (Meta Platforms Ireland Ltd.)
  • Facebook (Meta Platforms Ireland Ltd.)
  • LinkedIn (LinkedIn Ireland Unlimited Company)
  • YouTube (Google Ireland Ltd.)
  • Spotify (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden)

These are exclusively external links. When you click on them, you are redirected directly to the respective platform. Only there may data processing by the respective provider begin. We have no influence on this processing.

c) Calendly

To make scheduling appointments easy, we use the service Calendly, operated by Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA.

When you use the booking form, the following data is processed:

  • Name
  • Email address
  • Phone number, if applicable
  • Selected appointment time

Data is transmitted in encrypted form. Calendly processes data as a processor on the basis of Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR.

Legal basis: Art. 6(1)(b) GDPR (scheduling appointments)
Data transfer: USA, Standard Contractual Clauses

d) HubSpot

We use HubSpot, a service of HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA.

HubSpot helps us manage contacts, forms, emails and communication histories. Personal data that you enter in a form or send to us by email may be stored and analysed there.

Data is processed under a data processing agreement. Data transfers to the USA take place on the basis of EU Standard Contractual Clauses.

Legal basis: Art. 6(1)(b) and (f) GDPR

e) Meta Business Manager

We use the Meta Business Manager to manage and analyse our Meta ads. No data is collected directly via our website, but data may be shared with Meta via embedded pixels (see section 6, Meta Pixel).

Legal basis: Art. 6(1)(a) GDPR

9. Data transfer to third countries

Some of the tools mentioned above (e.g. Google, Meta, Hotjar) transfer data to third countries outside the EU, in particular to the USA.
The transfer takes place on the basis of EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

10. Your rights as a data subject

You have the right at any time to:

  • Access pursuant to Art. 15 GDPR
  • Rectification pursuant to Art. 16 GDPR
  • Erasure pursuant to Art. 17 GDPR
  • Restriction of processing pursuant to Art. 18 GDPR
  • Data portability pursuant to Art. 20 GDPR
  • Objection pursuant to Art. 21 GDPR

To exercise these rights, an informal message to dominik@northathletic.de is sufficient.

You also have the right to lodge a complaint with the competent supervisory authority.

11. Validity and changes to this privacy policy

This privacy policy is currently valid and is dated 1 June 2025.

Further development of our website or changes to legal requirements may make it necessary to update this policy. You can always find the current version on this website.

Last updated: 1 June 2025