Privacy Policy - Every(day) Body Method®

Convenience translation

This English version is provided for convenience. In case of discrepancies, the German version shall prevail.

This Privacy Policy applies to the website curveandcalm.de and all related digital offerings of the Every(day) Body Method®. It explains how personal data is processed in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller within the meaning of the GDPR is:

Sabine Quast
c/o POSTFLEX PFX-463-794
Emsdettener Straße 10
48268 Greven, Germany

Email: hello@everyday-body.com

2. What data we collect

When you visit the website, the following data is collected automatically:

– IP address (anonymized after 7 days)
– browser type and version
– operating system
– referrer URL
– date and time of access

When you use the email opt-in (freebie download), the following data is collected:

– first name (optional)
– email address

3. Purpose and legal basis

Personal data is processed on the following legal bases:

– Art. 6(1)(b) GDPR – performance of a contract: email address for providing the requested freebie
– Art. 6(1)(a) GDPR – consent: email marketing via MailerLite (only after explicit opt-in)
– Art. 6(1)(f) GDPR – legitimate interests: server log data for troubleshooting and security

4. Third-party services

MailerLite (email marketing)

Provider: UAB MailerLite, Vilnius, Lithuania (EU)

Purpose: sending emails after explicit consent

Data: email address, first name

A data processing agreement (DPA) is covered by MailerLite’s standard contractual terms.

Google Fonts

This website uses Google Fonts in a self-hosted form. No data is transmitted to Google.

Supabase (app backend)

Provider: Supabase Inc., San Francisco, USA

Purpose: only for app users: storage of account and usage data

Server location: EU (Frankfurt)

A data processing agreement (DPA) must be concluded with Supabase.

5. Cookies

This website uses technically necessary cookies for functionality and, subject to consent, analytical cookies. Consent can be withdrawn at any time via the cookie banner.

6. Storage period

– server log data: 7 days, then automatic deletion
– email addresses (MailerLite): until consent is withdrawn
– app account data: until the account is deleted, then within 30 days

7. Your rights

You have the following rights at any time:

– access to your stored data (Art. 15 GDPR)
– rectification of inaccurate data (Art. 16 GDPR)
– erasure of your data (Art. 17 GDPR)
– restriction of processing (Art. 18 GDPR)
– data portability (Art. 20 GDPR)
– withdrawal of any consent given at any time

To exercise your rights, please contact: hello@everyday-body.com

You also have the right to lodge a complaint with the competent supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany

8. Data security

All data transmissions are encrypted via TLS/HTTPS. Access to the database is restricted to authorized services.

9. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

10. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if technical or legal changes require it. The date of the latest update is indicated above.

This Privacy Policy was created using the privacy policy generator of activeMind AG.