Last updated: September 15, 2026

Controller

HeroFunnels, owner: Aya Stern
Gustav-Meyrink-Str. 13a
82319 Starnberg
Germany
Email: [email protected]

General information on data processing

We take the protection of your personal data very seriously. Personal data is treated confidentially and in accordance with statutory data protection provisions and this privacy policy.

Using our website or our funnels is generally possible without providing personal data. Where personal data (such as name, address, or email addresses) is collected on our pages, this is always done on a voluntary basis wherever possible.

Collection and processing of personal data

We process personal data that you provide to us in the course of using our services, in particular:

Name

Email address

Phone number

Address (where required for invoicing or shipping)

Payment information (handled exclusively via payment service providers and not stored by us)

Content you enter in forms (for example inquiries, bookings)

Purposes of data processing

We process your data for the following purposes:

Communicating with you (for example email contact, support)

Performing the contract and delivering our services

Booking appointments or services

Marketing, where you have consented to it

Operating our website and funnels

Analyzing and optimizing our offerings

Legal bases

Your personal data is processed on the basis of:

Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)

Art. 6(1)(f) GDPR (legitimate interest in providing our services securely and efficiently)

Art. 6(1)(a) GDPR (consent, where obtained)

Use of GoHighLevel (HeroFunnels)

To provide our funnels, websites, and automated communication, we use the GoHighLevel platform (HeroFunnels), a service of HighLevel, LLC, 2201 Double Creek Dr, Suite 7001, Round Rock, TX 78664, USA.

GoHighLevel acts as a processor on our behalf.

Data transfers to the USA take place on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

GoHighLevel ensures an adequate level of protection through technical and organizational measures.

You can find further information in GoHighLevel's privacy policy: https://www.gohighlevel.com/privacy-policy

Use of the Facebook Pixel (Meta Pixel)

Our website uses the Facebook Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

The pixel allows us to track the behavior of users who were directed to our website via a Facebook ad. This enables us to analyze the effectiveness of our Facebook ads for statistical and market research purposes.

The data collected is anonymous to us, meaning we do not see the personal data of individual users. Meta, however, stores and processes this data, so that a connection to the respective user profile is possible. Meta may use this data for its own advertising purposes.

Legal basis: Art. 6(1)(a) GDPR (consent)

Data transfers to the USA take place on the basis of the European Commission's Standard Contractual Clauses.

You can find further information in Meta's privacy policy: https://www.facebook.com/about/privacy/

Use of Google Analytics

This website uses Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

We have activated IP anonymization on this website, so that your IP address is truncated by Google within the EU. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

You can find further information in Google's privacy policy: https://policies.google.com/privacy

Use of a cookie consent tool

We use a cookie consent tool to obtain your consent to the storage of certain cookies or the use of certain technologies.

The consent tool stores your selection so that we do not have to ask again, and documents it so that we can meet our legal obligations.

Legal basis:
Art. 6(1)(c) GDPR (legal obligation)
Art. 6(1)(f) GDPR (legitimate interest in obtaining and documenting consent in a legally compliant manner)

Use of payment service providers (Stripe and PayPal)

Stripe

To process payments we use the payment service provider Stripe, offered by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Stripe processes data required for payment processing, for example name, email address, invoice amount, currency, and payment details.

Data processing by Stripe takes place on the basis of Art. 6(1)(b) GDPR (performance of a contract) and on the basis of our legitimate interest under Art. 6(1)(f) GDPR in offering you secure and efficient payment options.

Stripe may also transfer data to countries outside the EU, in particular to the USA. To protect your data, Standard Contractual Clauses pursuant to Art. 46 GDPR have been concluded.

You can find further information in Stripe's privacy policy: https://stripe.com/de/privacy

PayPal

We offer payment processing via PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select payment via PayPal, the payment data you enter is transmitted to PayPal. This may include name, email address, address, IP address, phone number, and other data required for payment processing.

The transfer of data to PayPal takes place on the basis of Art. 6(1)(b) GDPR (performance of a contract).

You can find further information in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Disclosure to third parties

Your personal data is disclosed to third parties only:

where this is permitted or required by law,

where it is necessary for performance of the contract (for example payment service providers),

where you have expressly consented.

Cookies and tracking

Our website and funnels may use cookies or similar technologies in order to:

make the use of our services technically possible,

carry out statistical analyses,

optimize marketing measures.

On your first visit you may be informed via a cookie banner. You can withdraw your consent at any time.

Retention period

We store your personal data only for as long as is necessary to fulfill the respective purposes or as long as statutory retention periods apply.

Rights of data subjects

You have the right at any time to:

Access the data stored about you (Art. 15 GDPR)

Rectification of inaccurate data (Art. 16 GDPR)

Erasure of your data (Art. 17 GDPR)

Restriction of processing (Art. 18 GDPR)

Data portability (Art. 20 GDPR)

Object to processing (Art. 21 GDPR)

Withdraw consent you have given (Art. 7(3) GDPR)

To exercise your rights, please contact [email protected].

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your place of residence, your place of work, or the place of the alleged infringement.

Changes to this privacy policy

We reserve the right to adapt this privacy policy from time to time. The version currently published on our website applies.