Privacy policy

Draft, last updated [date]. Highlighted fields must be completed, and the text should be checked against a German privacy generator or by a lawyer before publishing.

Who is responsible

Rafael Leal, [address], Berlin, Germany. Email: [your@email.com].

Hosting and server logs

This website is hosted by [hosting provider, address]. When you visit, the server automatically records technical data such as your IP address, browser type, date and time of access and the page requested. This is necessary to deliver the site securely (Art. 6(1)(f) GDPR). Logs are deleted after [number] days. A data processing agreement with the host is in place.

No cookies, no tracking

This site sets no cookies and uses no analytics or advertising trackers. Fonts are stored on this server, so no data is sent to font providers.

Newsletter (MailerLite)

If you subscribe, your email address is processed by MailerLite (UAB “MailerLite”, Vilnius, Lithuania) to send you the newsletter, at most once a month. Subscription uses double opt-in: you only receive emails after confirming your address. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in every email; your data is then deleted or blocked. MailerLite may record whether emails are opened and links are clicked, to measure the newsletter’s reach.

Contact form (Formspree)

Messages sent through the contact form, with your name and email address, are transmitted via Formspree, Inc. (USA) and forwarded to me by email. They are used only to answer your request (Art. 6(1)(b) and (f) GDPR) and deleted when no longer needed. Transfers to the USA are based on [the EU–US Data Privacy Framework or standard contractual clauses, check Formspree’s current terms].

Links to Udemy and social networks

The course is sold on Udemy. Links to Udemy, Instagram, LinkedIn, Bluesky and rafaelleal.com are plain links: no data is shared with those services until you click them. After that, their own privacy policies apply.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You can also complain to a data protection authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.