Privacy

Controller

Controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR)

Anahad Universe
Alexander Renner
Rotterstrasse 4
85625 Baiern, Germany
Phone: +49 8093 9054429
Mail: alexander@alexander-renner.com

Your rights

Using the contact details above, you can exercise the following rights under the GDPR at any time:

• access to your data stored by us and how it is processed (Art. 15 GDPR),
• rectification of inaccurate personal data (Art. 16 GDPR),
• erasure of your data stored by us (Art. 17 GDPR),
• restriction of processing where we may not yet delete your data due to legal obligations (Art. 18 GDPR),
• objection to the processing of your data by us (Art. 21 GDPR), and
• data portability, provided you have consented to the processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can withdraw it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA). You can also contact the supervisory authority of your own place of residence. A list of the German authorities with addresses is available at bfdi.bund.de.

What this website does not do

The course area is built so that as little data as possible is collected:

• No tracking: No analytics services are in use, neither Google Analytics nor Matomo nor comparable tools. There are no advertising or retargeting pixels.
• Only technically necessary cookies: This website itself sets exactly three cookies, all required for operation. No cookie is used for advertising or analytics, so a cookie banner is not needed. Details are in the section “Cookies”. Only when you start a quoted YouTube video in a lesson can further data be collected by YouTube, see section “Course videos”.
• Fonts stored locally: All fonts are stored on our own server. No Google Fonts or other external font services are loaded.
• No social plugins: Without your action, no content or scripts from social networks are loaded into the pages. The only exception are quoted YouTube videos, which are loaded only after your click.
• No sharing for advertising purposes: Personal data is not sold and not passed on to third parties for advertising purposes.

Hosting and server log files

This website is hosted by ALL-INKL.COM, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

Nature and purpose of the processing

When you visit our website without providing any further information, the server automatically records general information in so-called log files. This includes the type of browser, the operating system, the name of the internet provider, the IP address in shortened form, date and time of access, the file requested and the previously visited page. This data serves the secure connection setup, the smooth use of the website, system security and the detection of misuse.

We do not use this data to draw conclusions about you as a person. We reserve the right to review the log files retrospectively if there are concrete indications of unlawful use.

Legal basis and storage period

The processing is based on Art. 6 (1) (f) GDPR, our legitimate interest in the secure and stable operation of the website. The log files are deleted automatically after seven days at the latest. If a security-relevant event occurs, such as an attack on the server, they are kept until the matter is fully resolved.

Provision required

Providing this data is neither legally nor contractually required. Without an IP address, however, the website cannot technically be delivered.

Your customer account and signing in

Nature and purpose of the processing

After you purchase a course, we create a customer account for you. In it we store your name, your email address and your course access. Without this account we cannot provide the purchased content to you.

To sign in, we send you a login link by email on request. The link is valid for 30 minutes and works exactly once. In the database we store only a checksum of the link, together with the IP address of the requesting device in order to detect misuse. Login links are deleted automatically no later than one day after they expire or are used. Alternatively you can set a password. It is stored exclusively as a cryptographic hash, nobody but you knows it in plain text.

To prevent mass login attempts, we keep a counter per email address and per IP address. These entries are deleted automatically after one day.

Legal basis and storage period

The processing is carried out to fulfil the contract on the use of the course (Art. 6 (1) (b) GDPR); the measures against misuse are additionally based on our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). Your account exists as long as your course access exists. After that we delete it, unless statutory retention obligations prevent this.

Cookies

The course area itself sets exactly three cookies. All of them come from this website, none from a third party, none is used for advertising or analytics. They are required for operation (Section 25 (2) No. 2 of the German TDDDG); the processing of the data is carried out to fulfil the contract and based on our legitimate interest in secure operation (Art. 6 (1) (b) and (f) GDPR). If you start a quoted YouTube video in a lesson, YouTube may set its own cookies from that click on, see section “Course videos”.

Cookie	Purpose	Lifetime
anahad_sitzung	Keeps you signed in after login. Only a checksum of the value is stored in the database.	30 days, deleted immediately when you sign out
anahad_schutz	Protects the forms of this website against misuse by other sites.	1 year
anahad_sprache	Remembers your chosen language (German or English).	1 year

Your course activity

Nature and purpose of the processing

So that you can use your course comfortably, we store the state of your course activity with your account: which lessons you have marked as completed, your test attempts with their results, the position at which you last paused a video, and your personal notes on lessons. When you complete a course, we store the completion date and the number of your certificate of participation; your name appears on the certificate. This information is visible only to whoever is signed in to your account, and to us as the provider for support purposes.

In addition, the system keeps a technical log of logins, sent emails and errors, which may also contain the IP address and email address involved. These entries are deleted automatically after 180 days; error and payment messages are kept longer where necessary for clarification or accounting reasons.

Legal basis

The processing is carried out to fulfil the contract on the use of the course (Art. 6 (1) (b) GDPR); the technical log is based on our legitimate interest in stable and secure operation (Art. 6 (1) (f) GDPR).

Purchase via Digistore24

Our paid online courses are sold via Digistore24. Digistore24 sells in its own name (reseller model) and is your contractual partner for the purchase. We are the provider of the course content and deliver the course. The platform is operated by Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. The free online training is covered by its own section on signing up through the form.

Ordering and payment

The order itself takes place entirely on the pages of Digistore24. There you enter your order and payment data. Digistore24 is responsible for this processing and describes it in its own privacy policy of Digistore24.

After the purchase, Digistore24 automatically transmits to us the data we need for delivery: your first name, your last name, your email address, the order number, your language and the purchased course. With this we create your customer account and activate your course access. We do not receive payment data such as account numbers or credit card numbers; these are processed solely by Digistore24 and the payment providers involved. Invoicing, VAT and the right of withdrawal are handled by Digistore24.

Legal basis and storage period

The processing is carried out to fulfil the contract on the use of the course (Art. 6 (1) (b) GDPR). We retain contract and billing data as required by German commercial and tax law, generally for ten years (Art. 6 (1) (c) GDPR, Section 147 AO, Section 257 HGB).

Free online training: signing up through the form

The free online training does not run through Digistore24. The sign-up form is hosted on gongausbildung.de, and the details you enter there are sent straight to this course system, where your course access is later held.

Nature and purpose of the processing

We process the details from the form: your first name, your last name and your email address, together with the consent you give through the checkbox. We also store the language you selected, the IP address of the sending device, the time of your consent and the page from which you submitted the form.

Submitting the form does not yet create a customer account. What is created first is only an entry with a confirmation key, and a confirmation email is sent to your address. Only when you click the link in that email do we create your customer account, activate your course access and send the welcome email. The same click signs you in and takes you straight into the course. The confirmation link remains valid for 72 hours.

The form contains a hidden field for spam protection, a so-called honeypot field. It is not visible to you and stays empty during normal use. Automated spam programs often fill it in, and such submissions are discarded.

After your confirmation we pass your first name, your last name and your email address to our newsletter list at Klick-Tipp. Without your confirmation this transfer does not take place. The processing at Klick-Tipp is described in the following section; the legal basis for this transfer is your consent.

Legal basis and storage period

We process the sign-up data to fulfil the contract on the use of the free course (Art. 6 (1) (b) GDPR). Adding you to the newsletter list is based on your consent (Art. 6 (1) (a) GDPR). We process the language, IP address, referring page and time of consent in order to be able to demonstrate your consent and to detect misuse of the form (Art. 6 (1) (f) GDPR, Art. 7 (1) GDPR).

If you sign up and do not confirm, we delete that entry 30 days after the confirmation period has expired. A confirmed entry is retained as evidence of your consent for as long as we have to be able to demonstrate it.

Provision required

We need your first name and email address for the sign-up, because without them the confirmation email and the course access cannot reach you. Giving your last name is optional.

Customer communication via Klick-Tipp

After you purchase a course, we add your email address, your name and an identifier of the purchased course to our customer communication at Klick-Tipp. Through it you receive information about your course and about our gong offers. You can unsubscribe at any time via the unsubscribe link in every email or write to us directly; this mailing then stops.

Purpose: customer care after the purchase and information about our own, similar offers.
Legal basis: our legitimate interest in looking after our customers and in direct marketing for our own, similar offers (Art. 6 (1) (f) GDPR in conjunction with Section 7 (3) of the German Act against Unfair Competition, UWG).
Storage period: We store your data in the mailing list until you unsubscribe. After that we delete it there.

Klick-Tipp is based in the United Kingdom, outside the EU. The European Commission has determined that the United Kingdom provides an adequate level of data protection and renewed this decision on 19 December 2025 until 27 December 2031 (Art. 45 GDPR). A separate safeguard is therefore not required.

How we use Klick-Tipp

(1) In our online communication with you we use the services of KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom. The representative of KLICK-TIPP LIMITED within the meaning of Art. 27 GDPR is Waterton Knowledge Center WKC UG, Friedrichstr. 53a, 15537 Erkner, Germany, represented by Ulf Castelle, DSGVO-Vertreter@klicktipp.com. We obtain these services through a main contractual relationship with Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Digistore24 is a reseller that procures products or services such as Klick-Tipp and sells them to buyers without substantial further processing. With Klick-Tipp itself we have additionally concluded a data processing agreement within the meaning of Art. 28 GDPR. This ensures that we retain full control over the personal data processed there and that Klick-Tipp, in turn, follows our instructions.

(2) We store your contact data at Klick-Tipp. Klick-Tipp may take note of this data but has no right of its own to use it and is subject to our instructions.

(3) Furthermore, Klick-Tipp allows us to link your personal data with so-called tags. Klick-Tipp distinguishes two kinds of tags. SmartTags: when a contact signs up via a subscription form, they automatically receive a tag with the name of that form. In addition, Klick-Tipp automatically sets the tags “email received”, “email opened”, “email clicked” and “email viewed in browser”. Manual tags: in addition to SmartTags, manual tags can be created, for example “customer” or, more specifically, “product B purchased”.

(4) Details on these and further features that we use at Klick-Tipp can be found in the Klick-Tipp manual.

(5) The privacy policy of Klick-Tipp and the anti-spam policy of Klick-Tipp are available on their website.

Course videos

Teaching videos via Vimeo

The teaching videos of your courses are hosted at Vimeo and are played on the lesson pages via the Vimeo player. When you open a lesson with a video, your browser connects to Vimeo servers and your IP address is transmitted. We embed the player with the “Do Not Track” parameter. Vimeo then does not store any information about your use for analytics or advertising purposes. The provider is Vimeo.com, Inc., based in New York, USA.

The processing is carried out to fulfil the contract on the use of the course (Art. 6 (1) (b) GDPR), because the videos are the course content you purchased. Vimeo is based in the USA and is certified under the EU-US Data Privacy Framework; for certified companies the European Commission has determined an adequate level of data protection (Art. 45 GDPR). Further information is available in the privacy policy of Vimeo.

Quoted YouTube videos only after a click

Individual lessons quote third-party videos hosted on YouTube. These videos are not loaded automatically; at first you only see a notice box without any connection to YouTube. Only when you start the video there does your browser load the player via the privacy-friendly address youtube-nocookie.com. From that click on, your IP address is transmitted to Google and data may be transferred to third countries. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis is your consent, which you give by starting the video (Art. 6 (1) (a) GDPR). If you do not start the video, nothing is transmitted to YouTube. Further information is available in the privacy policy of Google.

Emails to you

The system sends you emails that are part of fulfilling the contract: login links, confirmations and notices about your account. They are sent via our own mailbox at our hosting provider ALL-INKL.COM; the transmission is encrypted. The legal basis is the fulfilment of the contract (Art. 6 (1) (b) GDPR).

Your right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where it is based on Art. 6 (1) (f) GDPR, that is, on a balancing of interests. This also applies to profiling based on it within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection: Alexander Renner, Anahad Universe, Rotterstrasse 4, 85625 Baiern, Germany, email: alexander@alexander-renner.com

Data security

This website is delivered exclusively over an encrypted connection (TLS). You can recognise this by the lock symbol in the address bar and the “https://” prefix. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss and misuse.

Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it complies with current legal requirements or reflects changes to our services, for example when a new service is added. The new version then applies to your next visit. The current version can always be found on this page.

Last updated: September 2026

Questions about privacy

If you have questions about privacy or want to exercise one of your rights, write to the controller named above by email. Alexander reads each of these messages himself and answers you personally.

This privacy policy was created with the help of activeMind AG (version #2024-10-25) and adapted for anahad-universe.com.