Privacy Policy

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience, which may result in said third parties also processing data they collect and control.

Our privacy policy is structured as follows:

• I. Information about us as controller of your data
• II. The rights of users and data subjects
• III. Information about the data processing

I. Information about us as controller of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

Openfield Academy

Axel Schrauder
Fürsaumstrasse 4
82444 Schlehdorf
Phone: +491752037700
Email: [email protected]

Openfield Academy is a sole proprietorship (Einzelunternehmen) and, given its size and scope, is not required to appoint a data protection officer.

II. The rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

• to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
• to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
• to the immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
• to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
• to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Hosting and Platform Services (Kajabi)

Our website is hosted on the Kajabi platform, operated by Kajabi, LLC. Kajabi provides the technical infrastructure for our website, including hosting, member account management, form submissions, email delivery, and payment processing (see below). In this context, Kajabi processes personal data such as your IP address, server log files, contact information, and account data on our behalf and/or as a data processor, under its Data Processing Addendum.

The legal basis for this processing is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the reliable and secure operation of our website.

Further information can be found in Kajabi’s own privacy policy: https://kajabi.com/policies/privacy

Cookies

a) Session cookies 

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. Kajabi sets technically necessary cookies (e.g. to keep you logged into your member account). These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure. The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships. If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website, and the legal basis is then Art. 6 Para. 1 lit. f) GDPR.

b) Disabling cookies 

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Contact

If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data.

Customer account / registration

If you create a customer account with us via our website (for example, to access a training you have purchased), we will use the data you entered during registration (such as your name and email address) exclusively for providing you access to the purchased content, for order and account management, and for customer care. This data will not be sold or passed on to third parties beyond Kajabi as our hosting provider.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR, since it is necessary to fulfill the contract you entered into with us.

Newsletter

If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name, will be sent to us. We also store the IP address of your computer and the date and time of your registration. During the registration process (double opt-in), we obtain your consent to receive this newsletter, with reference made to this privacy policy. The data collected will be used exclusively to send the newsletter and will not be passed on to third parties.

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.

You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect at any time. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.

Server data

For technical reasons, the following data sent by your internet browser to us or to our hosting provider (Kajabi) will be collected, especially to ensure a secure and stable website: the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

Payment processing

To process payments for our paid offers (such as “Find Time for Yourself”), we use Kajabi Payments, which is powered by Stripe. When you make a purchase, your payment details are transmitted directly and processed by Stripe. We do not store your full payment details ourselves. Payment data is transmitted using SSL/TLS encryption.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR, since it is necessary to fulfill the contract you entered into with us.

Cloudflare

To secure our website and to optimize loading times, our hosting provider Kajabi uses the Cloudflare CDN (content delivery network), a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA (hereinafter “Cloudflare”).

The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the secure operation of our website and in its optimization.

When you access our website, your queries are forwarded to Cloudflare servers, and statistical access data about your visit (such as your IP address, the pages you access, browser type, and referrer URL) is collected by Cloudflare for the security and optimization of the service.

Further information can be found at: https://www.cloudflare.com/privacypolicy/

Google Fonts

Our website uses Google Fonts to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

To enable the display of certain fonts on our website, a connection to Google’s servers is established whenever our website is accessed.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and reliable operation of our site.

Further information can be found at: https://policies.google.com/privacy

Font Awesome

This website uses Font Awesome to display icons. The service is integrated by our platform provider Kajabi. The provider is Fonticons, Inc., USA.
When you open a page, your browser loads the required icon files directly from Font Awesome’s servers (content delivery network). In this process, your IP address and technical information (e.g. browser type, requested file, time of the request) are transmitted to the provider. According to the provider, this usage data is usually stored in identifiable form for a few weeks.
The use of Font Awesome is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a uniform and reliable presentation of our website.
Fonticons, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards for data processing in the US.
For more information, please see Font Awesome’s privacy policy: https://fontawesome.com/privacy

Content Delivery Network jsDelivr

Our platform provider Kajabi loads certain program libraries via the content delivery network jsDelivr (cdn.jsdelivr.net). The provider is Volentio JSD Limited, United Kingdom.
When these files are loaded, your IP address and technical information (e.g. browser type and version, referring website, requested file, time of the request) are transmitted to the provider. jsDelivr uses third-party service providers to deliver the files, so data may also be processed outside the EU/EEA. According to the provider, no cookies are used.
The use of jsDelivr is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the fast and reliable delivery of our website.
For more information, please see jsDelivr’s privacy policy: https://www.jsdelivr.com/terms/privacy-policy

Wistia (video hosting)
Our platform provider Kajabi uses Wistia to host and play the videos on our website. The provider is Wistia, Inc., 120 Brookline St, Cambridge, MA 02139, USA.
When you open a page with a video, your browser connects to Wistia’s servers. In this process, your IP address and technical information (e.g. browser type, time of the request) are transmitted to Wistia. When you play a video, Wistia records how you watch it, for example how much of the video is played and where you pause. The Wistia player stores information in your browser’s local storage, for example so that you can resume a video where you left off.
The use of Wistia is based on Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our video content in an appealing and reliable way.
Wistia, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF).
For more information, please see Wistia’s privacy policy: https://wistia.com/privacy

 Cookie Consent Management (Cookiebot)

We use the consent management platform Cookiebot, provided by Cybot A/S (operating under the Usercentrics group), to obtain, manage, and document your consent to the use of cookies on our website in compliance with the GDPR. Cookiebot itself sets a cookie to store your consent choices. The legal basis for this processing is Art. 6 (1) lit. c) GDPR (compliance with our legal obligation to document consent) and Art. 6 (1) lit. f) GDPR (our legitimate interest in providing a legally compliant website).
Further information can be found in Cookiebot's own privacy policy: https://www.cookiebot.com/en/privacy-policy/

Google Analytics 4

With your consent (cookie category "Statistics"), we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyze how visitors use our website, for example which pages are viewed, how visitors found our site (including via campaign parameters such as UTM tags), and general usage patterns. This helps us understand and improve our website and content.

Google Analytics 4 is configured with a data retention period of 2 months, and Google Signals (which would link data to Google user accounts) is disabled. The tracking script only loads and processes data after you have given your consent via our cookie banner; if you do not consent, no Google Analytics cookies are set and no personal data is transmitted to Google for this purpose.

The legal basis for this processing is Art. 6 (1) lit. a) GDPR (your consent). You can withdraw your consent at any time with future effect via the "Cookie settings" link in the footer of our website.

We have entered into Google's Data Processing Terms with Google Ireland Limited for the use of Google Analytics. Further information can be found in Google's own privacy policy: https://policies.google.com/privacy

RudderStack
Our platform provider Kajabi uses RudderStack, a service of RudderStack, Inc., USA, for analysis and, where applicable, marketing purposes.
RudderStack is only loaded after you have given your consent via our cookie banner. In this case, data about your use of our website is collected, together with technical information about your device and browser.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer of our website.
RudderStack, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF).
For more information, please see RudderStack’s privacy policy: https://www.rudderstack.com/privacy-policy/

Google Tag Manager (Google tag)

To integrate Google Analytics 4, we use the Google tag (gtag.js), which is loaded from the Google Tag Manager servers (www.googletagmanager.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The Google tag is a tool for embedding and managing analytics code on our website. It does not set any cookies itself and does not create user profiles. However, when it is loaded, your IP address and technical information about your browser are transmitted to Google; this may include a transfer to Google LLC in the USA. Which data Google Analytics processes is described in the section "Google Analytics 4".

The Google tag is only loaded after you have given your consent via our cookie banner (category "Statistics"). The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR and Section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can withdraw your consent at any time with future effect via the "Cookie settings" link in the footer of our website.

Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). For transfers to certified companies, the European Commission has determined an adequate level of data protection (Art. 45 GDPR). Further information: https://www.dataprivacyframework.gov/

We have entered into Google's Data Processing Terms with Google. Further information: https://policies.google.com/privacy 

Social Media Presence

We maintain profiles on the following social media platforms to communicate with interested users and customers: Facebook, Instagram, YouTube, and TikTok. When you visit these profiles, the respective platform provider processes your data as an independent controller, based on its own privacy policy and terms of use. We have no influence on the scope and further use of data processed by these providers for their own purposes (e.g. for statistical or advertising purposes), and only receive anonymized visitor statistics for our own profiles where available.

For our Facebook Page in particular, Meta Platforms Ireland Limited and we act as joint controllers with respect to certain visitor statistics ("Page Insights"), pursuant to Art. 26 GDPR. Further information on this arrangement and on Meta's own data processing can be found at:
https://www.facebook.com/legal/terms/page_controller_addendum
We recommend reviewing the privacy policies of Instagram, YouTube (Google), and TikTok directly for details on how they process data when you interact with our profiles there. 

Google reCAPTCHA

Our website uses Google reCAPTCHA to check and prevent automated bots from submitting our forms. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of automated spam.

Further information can be found at: https://policies.google.com/privacy