Privacy Policy

Last updated: 25 June 2026

The protection of personal data is important to us. With this Privacy Policy, we inform you about which personal data we process in connection with the use of our website, the TaKeTiNa Online Membership, our digital content, newsletters, payment processing and live online offers.

This Privacy Policy applies to the website www.taketina-online.com, its subpages and the password-protected members’ area of the TaKeTiNa Online Membership.

 

1. Controller

The controller responsible for the processing of personal data is:

TaKeTiNa Online Learning GbR
Münchner Str. 2
82335 Berg
Germany

Email: member@taketina.com

Further information can be found in our Legal Notice.

 

2. Data Protection Contact

For questions regarding data protection or to exercise your rights, you may contact us at any time:

TaKeTiNa Online Learning GbR
Münchner Str. 2
82335 Berg
Germany

Email: member@taketina.com

No data protection officer has been appointed, as there is currently no legal obligation to do so.

 

3. General Information on Data Processing

We process personal data only insofar as this is necessary for the provision of our website, the performance of the TaKeTiNa Online Membership, communication with users, payment processing, compliance with legal obligations or on the basis of consent.

Personal data means any information relating to an identified or identifiable natural person, for example name, email address, payment data, usage data, IP address or communication data.

Processing is carried out in particular on the following legal bases:

  • Art. 6(1)(a) GDPR, if you have given us your consent;

  • Art. 6(1)(b) GDPR, if processing is necessary for the performance of a contract or for the implementation of pre-contractual measures;

  • Art. 6(1)(c) GDPR, if we are legally obliged to process the data;

  • Art. 6(1)(f) GDPR, if processing is necessary to protect legitimate interests and your interests or fundamental rights do not override them.

 

4. Hosting and Technical Provision

Our website and members’ platform are generally operated on servers in Germany.

When you access our website or the members’ area, technically necessary data is processed so that the website can be displayed, operated in a stable manner and protected against misuse. This may include in particular:

  • IP address;

  • date and time of access;

  • pages and files accessed;

  • referrer URL;

  • browser type and browser version;

  • operating system used;

  • amount of data transferred;

  • access status or HTTP status code.

Processing is carried out for technical provision, system security and error analysis. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of our website and online offers.

Server log data is stored only for as long as necessary for the purposes mentioned and is then deleted or anonymized, unless longer storage is required for security reasons or legal reasons.

 

5. Contact

If you contact us by email or through other communication channels, we process the data you provide, in particular:

  • name;

  • email address;

  • content of your message;

  • time of contact;

  • any further information voluntarily provided by you.

Processing is carried out in order to process your inquiry. The legal basis is Art. 6(1)(b) GDPR, insofar as your inquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to inquiries.

Inquiries are deleted as soon as they are no longer required, unless statutory retention obligations or legitimate interests in longer storage apply.

 

6. Registration, Customer Account and Membership

The use of the paid TaKeTiNa Online Membership requires the creation of a customer account or member access.

In this context, we process in particular:

  • name;

  • email address;

  • login data;

  • membership status;

  • booked product or selected membership;

  • payment and billing information;

  • technical usage data, insofar as this is necessary for operating the members’ area;

  • information about activated content and access authorizations.

Processing is carried out for the creation and administration of the membership, the activation of digital content, the performance of the contract, communication with members and billing. The legal basis is Art. 6(1)(b) GDPR.

Certain data, in particular billing and payment data, may be stored for a longer period due to statutory retention obligations. In this respect, the legal basis is Art. 6(1)(c) GDPR.

 

7. Digital Content and Members’ Area

As part of the TaKeTiNa Online Membership, we provide digital content such as videos, audios, instructions, course materials, TaKeTiNa journeys, meta-skills, meditations and supplementary materials.

To provide this content, we process technical data and usage data insofar as this is necessary to enable access, activate content, ensure platform stability and prevent misuse.

This may include in particular:

  • login data;

  • membership status;

  • technical access data;

  • information about activated content;

  • technical error and security data.

Processing is carried out for the performance of the membership and the provision of digital content. The legal basis is Art. 6(1)(b) GDPR. Insofar as data is processed for security and misuse prevention, processing is additionally based on Art. 6(1)(f) GDPR.

 

8. Payment Processing

For payment processing, we use external payment service providers, in particular Stripe and PayPal. Depending on the selected payment method, personal data may be transmitted to and processed by the respective payment service provider.

This may include in particular:

  • name;

  • email address;

  • billing data;

  • payment amount;

  • selected payment method;

  • transaction data;

  • bank or credit card data, where applicable;

  • technical data required for payment processing.

Processing is carried out for the performance of the contract and payment processing. The legal basis is Art. 6(1)(b) GDPR.

The respective payment service providers also process certain data under their own responsibility, in particular for payment processing, fraud prevention, compliance with legal obligations and the provision of their own services. The privacy policies of the respective payment service providers apply additionally to such processing.

 

9. Newsletter and Email Communication via ActiveCampaign

We use ActiveCampaign to send newsletters and automated emails.

If you subscribe to our newsletter, we process in particular:

  • email address;

  • name, if provided;

  • time of registration;

  • time of confirmation;

  • IP address at the time of registration and confirmation;

  • information regarding consent;

  • opening and click data, where applicable, insofar as this is used and there is a legal basis for it.

Subscription to our newsletter generally takes place through a double opt-in procedure. This means that after registering, you will receive an email in which you must confirm your subscription.

Processing for newsletter delivery is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in each newsletter email or by sending us a message.

Insofar as we send automated emails within the framework of an existing membership, such as confirmations, access information, membership notices, payment information, technical information or organizational communications, processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.

ActiveCampaign processes personal data on our behalf insofar as the service is used for sending our newsletters and email communications. Insofar as ActiveCampaign processes data for its own purposes, ActiveCampaign’s privacy policy applies additionally.

ActiveCampaign may also process personal data outside the European Union or the European Economic Area, in particular in the USA. Such transfer takes place only insofar as the legal requirements are met, in particular on the basis of an adequacy decision, certification under the EU-US Data Privacy Framework, standard contractual clauses or other appropriate safeguards.

 

10. Vimeo

We use Vimeo to provide our videos.

When you access a page with an embedded Vimeo video or play a video, personal data may be transmitted to Vimeo. This may include in particular:

  • IP address;

  • device and browser information;

  • information about the page accessed;

  • date and time of access;

  • usage data when playing the video;

  • cookie information or comparable technical identifiers, where applicable.

Vimeo is used to provide our digital video content as part of the TaKeTiNa Online Membership. The legal basis is Art. 6(1)(b) GDPR insofar as the provision of video content is necessary for the performance of the membership.

Insofar as Vimeo or we use cookies or comparable technologies that are not technically necessary, this is done only on the basis of your consent. The legal basis is then Art. 6(1)(a) GDPR and, where applicable, Section 25 TDDDG.

Vimeo may also process data outside the European Union or the European Economic Area. Such transfers are subject to the respective legal requirements, in particular adequacy decisions, standard contractual clauses or other appropriate safeguards.

 

11. Zoom Live Online Meetings

As part of the TaKeTiNa Online Membership, we offer monthly live online meetings. We use Zoom for these meetings.

When you participate in a Zoom meeting, the following data in particular may be processed:

  • name or display name;

  • email address, where required;

  • IP address;

  • device and connection data;

  • meeting metadata, such as topic, date, time and duration;

  • audio and video data, insofar as you activate your microphone or camera;

  • chat content, insofar as you use the chat;

  • contributions, questions or other content that you voluntarily share during the meeting.

Processing is carried out for the performance of live online meetings as part of the membership. The legal basis is Art. 6(1)(b) GDPR.

Live online meetings are not recorded unless expressly announced otherwise. If, exceptionally, a recording is made, we will inform participants separately in advance. A recording will only take place if there is an appropriate legal basis.

Zoom processes personal data partly under its own responsibility. Zoom’s privacy policy applies additionally to such processing.

 

12. Cookies and Comparable Technologies

Our website and members’ area use cookies and comparable technologies.

Cookies are small text files stored on your device. Comparable technologies may also store or read information on your device.

We distinguish between technically necessary cookies and non-essential cookies.

Technically necessary cookies are required to provide the website, login, members’ area, security functions or booked digital content. These cookies are used on the basis of Section 25(2) TDDDG. The associated processing of personal data is carried out on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Non-essential cookies and comparable technologies, in particular for analytics, marketing or third-party functions, are used only if you have given your prior express consent. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You may withdraw or change any consent you have given at any time with effect for the future, in particular via the cookie settings of our website, insofar as this function is provided.

 

13. Service Providers and Recipients of Personal Data

We use external service providers to provide our website, members’ platform and services. These include in particular service providers for:

  • hosting and technical infrastructure;

  • operation and maintenance of the website;

  • payment processing;

  • newsletter and email delivery;

  • video hosting;

  • live online meetings;

  • IT security;

  • accounting and legal advice, where required.

Insofar as service providers process personal data on our behalf, we conclude data processing agreements with them pursuant to Art. 28 GDPR.

Personal data is only disclosed if this is necessary for the performance of the contract, if we are legally obliged to do so, if you have given your consent or if there is a legitimate interest.

 

14. Transfers to Third Countries

Some of the service providers we use may process personal data outside the European Union or the European Economic Area, in particular in the USA.

A transfer to third countries takes place only if the legal requirements are met. This may be the case in particular if:

  • there is an adequacy decision by the European Commission for the respective country;

  • the recipient is certified under the EU-US Data Privacy Framework;

  • standard contractual clauses of the European Commission have been concluded;

  • additional safeguards are in place;

  • or you have expressly consented.

We ensure that an adequate level of data protection is provided when personal data is transferred to third countries.

 

15. Storage Period

We store personal data only for as long as necessary for the respective purposes.

Data connected with the membership is generally stored for the duration of the contractual relationship. After termination of the membership, the data will be deleted unless statutory retention obligations or legitimate interests in further storage apply.

Billing and payment data are stored in accordance with statutory retention obligations, generally for six or ten years.

Data from inquiries is stored only for as long as necessary to process the inquiry, unless statutory retention obligations or legitimate interests in longer storage apply.

Newsletter data is stored as long as your consent exists. After unsubscribing from the newsletter, the data will be deleted or restricted, unless further storage is required to prove consent or for legal reasons.

 

16. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure.

These measures include, in particular, access restrictions, secure transmission procedures, technical security measures and organizational safeguards. Our security measures are adapted in line with technological development.

 

17. Your Rights

Subject to the statutory requirements, you have the following rights:

  • right of access to the personal data processed by us pursuant to Art. 15 GDPR;

  • right to rectification of inaccurate data pursuant to Art. 16 GDPR;

  • right to erasure pursuant to Art. 17 GDPR;

  • right to restriction of processing pursuant to Art. 18 GDPR;

  • right to data portability pursuant to Art. 20 GDPR;

  • right to object to certain processing pursuant to Art. 21 GDPR;

  • right to withdraw consent pursuant to Art. 7(3) GDPR;

  • right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

If you have given consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

To exercise your rights, you may contact us at any time at member@taketina.com.

 

18. Right to Object

Insofar as we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

The right to object does not apply to data processing that is necessary for the performance of the membership, the provision of access, payment processing or compliance with legal obligations. Such processing is carried out in particular on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(c) GDPR.

If you object to processing based on legitimate interests, we will review the objection. We will then no longer process the affected data for this purpose unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defense of legal claims.

You may object at any time to the processing of personal data for direct marketing purposes. In this case, we will no longer use your data for advertising communications, newsletters, offer information or comparable marketing measures.

Contract-related communications, in particular access information, payment and billing information, technical notices, information regarding the active membership and organizational communications relating to booked or included services, remain unaffected, insofar as they are necessary for the performance of the contract.

 

19. Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

 

20. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal, technical or organizational changes make this necessary.

The current version is available on our website.

 

Translation Notice

This English version is a translation of the German Privacy Policy. In the event of discrepancies or differences in interpretation, the German version shall prevail.