Privacy Policy

Name and contact details of the controller pursuant to Article 4 (7) GDPR

SOUL SURFING UN.LTD Apostolou Pavlou 16, 2nd Floor 8046 Paphos Cyprus

Legal representative: Andreas Goldemann Data protection coordinator: Andreas Goldemann

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This only applies insofar as no other information is provided in the subsequent processing operations.

„Personal data“ means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without giving any personal information. Every time you access our website, usage data is transmitted by your Internet browser and stored in log files (server log files). These stored data include, for example, the name of the page called up, the date and time of the call, the amount of data transferred and the requesting provider. This data is used exclusively to ensure the trouble-free operation of our website and to improve our offer. It is not possible to assign this data to a specific person.

Collection, processing and use of personal data for orders

When you place an order, we only collect and use your personal data to the extent necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Non-provision means that no contract can be concluded. The processing is based on Art. 6 (1) lit. b GDPR and is necessary for the fulfilment of a contract with you.

Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners, whom we need in order to process the contractual relationship, or service providers we use to process orders. In addition to the recipients named in the respective clauses of this privacy policy, these include recipients of the following categories: shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping merchants. In all cases we strictly observe the legal requirements. The extent of data transmission is limited to a minimum.

Duration of storage

After the contract has been completely processed, the data will initially be stored for the duration of the warranty period, thereafter taking into account statutory retention periods, in particular under tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

Purchase of products

We use the reseller Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany („Digistore24“) for order and payment processing of our digital products. Digistore24 is the seller of the products. We do not operate our own webshop; we are merely the product manufacturer. For the execution of orders, your personal data will be stored at Digistore24. Further information about the use of data by Digistore24 can be found in the privacy policy of Digistore24.

Digistore24 partner program

On the basis of our legitimate interests (i.e. interest in the economic operation of our online offer within the meaning of Art. 6 (1) lit. f GDPR), we participate in the partner program of Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany („Digistore24“), by means of which we can earn a commission for purchases by placing advertisements and partner links to digistore24.com. The price you pay at digistore24.com will not change as a result.

Digistore24 uses cookies to be able to trace the origin of orders. Among other things, Digistore24 can recognise that you have clicked on a partner link on our website and subsequently bought a product at Digistore24.

Further information about the use of data by Digistore24 can be found in the privacy policy of Digistore24.

Rights of the data subject

If the legal requirements are met, you are entitled to the following rights in accordance with Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

In addition, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) lit. f GDPR and to processing for the purpose of direct advertising.

Please contact us if you wish to exercise these rights. You can find the contact details in our legal notice.

Right to lodge a complaint with the supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that your personal data is being processed unlawfully.

Collection and processing when using the contact form

When you use the contact form, we only collect personal data (individual information about the personal or factual circumstances of a specific or identifiable natural person) to the extent that you have provided it. We only use your email address to process your enquiry. Your data will then be deleted, unless you have agreed to further processing and use.

Cookies

Our website uses so-called cookies in several places. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser and offer you services.

Analysis and advertising tracking

Use of Google Analytics

Our website uses the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“).

The processing of data serves to analyse this website and its visitors and for marketing and advertising purposes. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. In this process, the following information, among other things, may be collected: IP address, date and time of the website access, click path, information on the browser and the device you are using, the pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. The IP address transmitted from your browser within the scope of Google Analytics is not associated with any other data held by Google. Google Analytics uses technology such as cookies, web storage in the browser and tracking pixels which enable an analysis of your use of the website. The information generated by these regarding your use of this website is usually transferred to a Google server in the USA and stored there. Google relies on standard contractual clauses as suitable guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities may have access to your data. Google may combine your data with other data, such as your search history, personal accounts, usage data from other devices and any other information Google has about you.

IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

The processing of your personal data is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.

You can also prevent the collection of the data (including your IP address) generated by Google Analytics and related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout. To prevent data collection and storage by Google Analytics across multiple devices, you can place an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You need to implement the opt-out on all systems and devices that you use for this to work comprehensively. If you delete the opt-out cookie, requests will be transmitted to Google again. When you click here, the opt-out cookie will be placed: Deactivate Google Analytics (javascript:gaOptout()). You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/ and at https://policies.google.com/ and at https://policies.google.com/technologies/cookies.

Use of the Meta (Facebook) Pixel

Our website uses the remarketing function „Custom Audiences“ by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; „Facebook“).

Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transfer of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible in particular for fulfilling the information obligations in accordance with Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations in accordance with Art. 33, 34 GDPR, insofar as a breach of personal data protection affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the rights of the data subject in accordance with Art. 15 to 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Art. 33, 34 GDPR, insofar as a breach of personal data protection concerns Meta Platforms Ireland’s obligations under the joint processing agreement.

This application serves to address visitors to the website with interest-related advertising on the social network Facebook.

We have implemented Facebook’s remarketing tag on our website for this purpose. This tag establishes a direct connection to Facebook’s servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then be shown personalised, interest-related Facebook ads.

Your data may be transmitted to the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.

The data processing, particularly the placing of cookies, is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in addressing visitors to the website with targeted, interest-related advertising. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you carried out in accordance with Art. 6 (1) lit. f GDPR.

You can find more detailed information on Facebook’s collection and use of data and your associated rights and options for protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking

Our website uses the online marketing program „Google Ads“, including conversion tracking (evaluation of user actions). Google conversion tracking is a service operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“).

If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies relating to the websites of Ads customers.

The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, we do not receive any information which could be used to personally identify users.

Your data may be transmitted to the USA. The data processing, particularly the placing of cookies, is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in addressing visitors to the website with targeted, interest-related advertising. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you carried out in accordance with Art. 6 (1) lit. f GDPR.

You can deactivate personalised advertising in Google’s advertising settings. Instructions for this can be found at https://support.google.com/ads/answer/2662922. Alternatively, you can prevent the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the further opt-out instructions specified there. You will then not be included in the conversion tracking statistics.

You can find more information as well as Google’s privacy policy at: https://www.google.com/policies/privacy/

Children

Our offer is fundamentally directed at adults. Persons under 18 years of age should not transmit any personal data to us without the consent of their parents or legal guardians.

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our work and our further offers. The contents of the newsletter are named in the respective declaration of consent.

(2) We use the so-called double opt-in procedure for subscribing to our newsletter. This means that after your registration, we will send you an email to the email address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be deleted after 4 months at the latest. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) We process the following data within the scope of newsletter registration and newsletter delivery: email address, IP address upon registration, date and time of registration, IP address upon confirmation, date and time of confirmation, bounce status, referrer (URL of registration), IP address upon cancellation, date and time of cancellation.

(4) Your email address is the only mandatory information for sending the newsletter. The provision of any other, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.

(5) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the unsubscribe link provided in each newsletter email, via our contact form, by email to privacy@andreasgoldemann.com or by sending a message to the contact details provided in the legal notice.

(6) We would like to point out that we evaluate your user behaviour when the newsletter is sent. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analysis, we link the data mentioned above and the web beacons with your email address and an individual ID. With the data thus obtained, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters and which links you click on, and deduce your personal interests from this. We link this data to actions you take on our website. The information is stored for as long as you are subscribed to the newsletter. After you have unsubscribed, we store the data on a purely statistical and anonymous basis.

(7) We use an external service provider for sending newsletters. A separate data processing agreement has been concluded with this service provider to ensure the protection of your personal data. We work together with the following service provider:

KLICK-TIPP LIMITED 15 Cambridge Court 210 Shepherd’s Bush Road London W6 7NJ United Kingdom

Email: hilfe@klick-tipp.com

We have concluded a data processing agreement in accordance with the GDPR with Klick-Tipp. This agreement ensures that Klick-Tipp complies with the strict requirements of European data protection law in all respects when sending out the newsletter. Your data is stored within the EU and the United Kingdom; the United Kingdom is recognised by the European Commission as providing an adequate level of data protection (adequacy decision).

Integration of YouTube videos

We incorporate videos from youtube.com into our pages. youtube.com is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA („YouTube“), which in turn is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). We use YouTube in the interest of presenting our online offerings in an attractive manner. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

When embedding YouTube videos, we deliberately activate the „extended data protection mode“ option provided by YouTube. This means the YouTube videos are loaded from the domain youtube-nocookie.com. According to YouTube, this means that YouTube will not store any information about you unless you watch the video.

When you watch a video, your IP address is sent to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information is also associated with your account. You can prevent this by logging out of YouTube before viewing the video. In addition, clicking on the video may trigger other data processing operations over which we have no control. For more information, please refer to Google’s privacy policy.

Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection for data transfers to the USA.

Integration of third-party services and content

Within our online offer, third-party content, such as videos from Vimeo, maps from Google Maps, fonts from Google Fonts or graphics from other websites, may be integrated. This always requires that the providers of this content (hereinafter referred to as „third-party providers“) are aware of your IP address, because without the IP address they could not send the content to your browser. The IP address is therefore required to display this content. We make every effort to use only content whose respective providers use your IP address solely to deliver the content. However, we have no influence over whether third-party providers store the IP address, for example for statistical purposes. Insofar as we are aware of this, we will inform you about it.

Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services which you can use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, conclusion of contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.

(4) Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

Last updated: 22 July 2026