restart50.plus

Privacy Policy

1. Data Controller

Michael Pröschel, restart50.plus, Schlehdornstr. 17, 82031 Grünwald, Germany.
Email: kontakt@restart50.plus

2. Hosting

Provider: Hetzner Online GmbH, Germany. Servers exclusively in EU data centres (Germany/Finland). Server log files are deleted after 7 days.

3. Cookies

Only technically necessary cookies (e.g. session cookies). No tracking or advertising cookies.

4. Web Analytics (Plausible Analytics)

Provider: Plausible Insights OÜ, Estonia (EU). No cookies, no personal data, no IP storage, no fingerprinting. Data processing exclusively within the EU.

5. Registration and User Account

Data collected: email, name, password (encrypted).
Authentication & Database: Supabase (AWS eu-central-1, Frankfurt). All data within the EU. Standard Contractual Clauses + EU-US Data Privacy Framework.

6. Contact Form

Enquiries are deleted 12 months after processing.

7. Free Resources (Lead Gate)

Double opt-in process. Consent can be revoked at any time. Legal basis: Art. 6(1)(a) GDPR.

8. Email Delivery

Provider: Scaleway SAS, France (EU).

9. Payment Provider

Provider: Stripe Payments Europe, Ltd., Ireland (EU). PCI DSS Level 1 certified.

10. AI Processing

Provider: AWS Bedrock, Frankfurt region (eu-central-1). Your inputs are not used for training AI models. Personal data is removed or anonymised before transmission.

11. SSL/TLS Encryption

All connections are SSL/TLS encrypted.

12. Retention Periods

  • User account: until deletion (+ 30 days)
  • Server log files: 7 days
  • Contact enquiries: 12 months
  • Billing data: 10 years (statutory requirement)
  • Lead gate emails: until consent is revoked

13. Data Processors

  • Hetzner Online GmbH (DE) — Hosting
  • Supabase, Inc. (USA; data in AWS Frankfurt) — Auth & Database
  • AWS EMEA SARL (LU/Frankfurt) — AI Processing
  • Scaleway SAS (FR) — Email
  • Stripe Payments Europe (IE) — Payments
  • Plausible Insights OÜ (EE) — Web Analytics
  • Sentry GmbH (DE / EU region) — Error monitoring, with IP and cookie capture disabled

14. Pseudonymized Analytics & Research Collaborations

With your explicit consent (Art. 6(1)(a) GDPR), we additionally process your coaching content in pseudonymized form to (a) improve the coaching program and produce aggregated, anonymized analytics, and (b) optionally make pseudonymized data available in the context of scientific research collaborations.

Both consents are independent of each other and can be revoked at any time in your account settings (“Data usage”). Analytics already performed prior to a revocation remain lawful (Art. 7(3) sentence 2 GDPR).

Recipient categories: Analytics results are first used internally only. Pseudonymized data is shared with third parties (e.g. universities or outplacement consultancies) solely upon active “research collaborations” consent and exclusively to recipients without re-identification means, on the basis of a written agreement. Until a concrete collaboration is established, no external transmissions occur.

15. Your Rights

Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Data Portability (Art. 20), Objection (Art. 21), Withdrawal of Consent (Art. 7(3)).

Contact: kontakt@restart50.plus or contact form.

Supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

As of: April 30, 2026

Privacy Policy — restart50.plus