How we handle your personal data — in accordance with the EU General Data Protection Regulation (GDPR).
The controller responsible for data processing on this website within the meaning of the GDPR is:
Nils RingThe controller decides, alone or jointly with others, on the purposes and means of the processing of personal data. Further details can be found in our Imprint.
We take the protection of your personal data very seriously. We treat your data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Personal data is any information relating to an identified or identifiable natural person.
Please note that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
You have the following rights with regard to the personal data we hold about you:
To exercise any of these rights, an informal message to sifu@kungfu-spirit.de is sufficient.
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und InformationsfreiheitThis website is hosted by:
HOSTINGER, UABThe server used for this website is located in the Netherlands, i.e. within the European Union. When you visit the site, the provider's web server automatically collects and stores information in so-called server log files, which your browser transmits automatically. This may include:
This data is not merged with other data sources and is not used to identify you personally. It is processed on the basis of Art. 6 (1) (f) GDPR — we have a legitimate interest in the technically error-free presentation, security and optimisation of our website. Log data is deleted after a short period, at the latest after 7 days, unless it is required as evidence in the event of an attack on our systems.
Hostinger processes this data on our behalf and strictly according to our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place: Hostinger's data processing addendum, which forms part of its terms of service and is available at hostinger.com/legal/dpa.
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and the lock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.
If you send us an enquiry via the contact form, the details you provide there (name, e-mail address and your message) are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing is based on Art. 6 (1) (b) GDPR if your request relates to the performance of a contract or to pre-contractual measures (e.g. arranging a trial class). In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time.
We retain the data you send us until you ask us to delete it, withdraw your consent, or the purpose of storage no longer applies (e.g. once your enquiry has been fully dealt with). Mandatory statutory retention periods remain unaffected.
If you contact us by e-mail or telephone, your enquiry — including all resulting personal data — will be stored and processed by us for the purpose of handling your request. The legal basis is the same as described above for the contact form.
Our newsletter uses the double opt-in procedure. After entering your address you receive an e-mail asking you to confirm the subscription. Until you open that link, no newsletter is sent to you, and an unconfirmed address is deleted again after seven days.
We store the following data for this purpose:
The timestamps and IP addresses are stored so that we can demonstrate your consent if required (Art. 7 (1) GDPR). The data is used exclusively for sending the newsletter and is not passed on to third parties.
The processing is based on your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time — via the unsubscribe link contained in every newsletter, or by sending a message to sifu@kungfu-spirit.de. The lawfulness of the processing that has already taken place remains unaffected by the withdrawal.
When you unsubscribe, your address and the associated consent records are deleted immediately.
You can register for the members' area of this website. The data you enter during registration is used for the purpose of operating the members' area and administering your training membership.
During registration we process the following data:
A new account must first be approved by an instructor before you can sign in. For this purpose, the data you provide is displayed to the instructor and sent to them by e-mail. You will be notified by e-mail once your account has been approved or rejected.
Once your account is active, the following additional data may be stored in the members' area: your attendance records (training date and session name), your training level and progress, and messages sent to you by your instructor.
The legal basis for this processing is Art. 6 (1) (b) GDPR, as it is necessary for the performance of the membership relationship, and Art. 6 (1) (f) GDPR with regard to the secure operation of the members' area.
Your account data is stored by us for as long as you are registered. You can request the deletion of your account at any time by sending a message to sifu@kungfu-spirit.de. Statutory retention periods remain unaffected.
If you request a new password, we generate a one-time token that is valid for 60 minutes and send a reset link to the e-mail address stored for your account. Only a cryptographic hash of this token is stored on our server; the token is deleted as soon as it has been used or has expired. When a password is reset, all existing sessions of that account are ended for security reasons.
To protect accounts against automated attacks, we temporarily record failed login attempts together with the IP address used, for a maximum of 15 minutes. This data is held in the server's memory only, is not stored permanently and is not used for any other purpose. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the security of our systems).
This website uses only technically necessary cookies. We do not use tracking, advertising, profiling or analytics cookies, so your consent is not required. On your first visit we show a short notice informing you about this; confirming it stores a purely local entry in your browser (localStorage) so that the notice is not shown again. This entry never leaves your device and is not transmitted to us.
Cho Gar Wing ChunHttpOnly and SameSite=Lax flags, is transmitted exclusively via an encrypted connection in live operation, and expires after 7 days at the latest. It is deleted immediately when you log out.These cookies are strictly necessary to provide a service you have expressly requested, and are therefore stored on the basis of § 25 (2) no. 2 TDDDG. The associated processing of personal data is based on Art. 6 (1) (f) GDPR.
System e-mails (registration notifications, approval decisions and password reset links) are sent through the mailbox of this domain, which is operated by the same provider — HOSTINGER, UAB (see section 4). Your e-mail address and the content of the respective message are transmitted to that provider for the purpose of delivery and are processed exclusively for sending the e-mail. The same data processing agreement pursuant to Art. 28 GDPR applies.
This website deliberately does without external services that would transmit your data to third parties:
We store personal data only for as long as is necessary for the purposes described above, or for as long as statutory retention obligations (in particular under commercial and tax law) require. Once the purpose ceases to apply and no retention obligation exists, the data is deleted.
We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or in order to reflect changes to our services — for example when new features are introduced. The current version applies to your next visit.
Last updated: August 2026