Privacy Policy

1. Privacy at a Glance

General Information The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information, please refer to the full privacy policy below.

Data Collection on This Website Data is processed by the website operator (contact details in Section 3). Data is collected when you provide it to us (e.g. contact form, booking) or automatically when you visit the website (technical data, cookies). You have the right to access, rectify, delete and restrict your data at any time, as well as the right to lodge a complaint with the competent supervisory authority.

2. Hosting & Infrastructure

GoDaddy (Website Hosting) This website is hosted by GoDaddy.com, LLC, 14455 North Hayden Road, Suite 226, Scottsdale, Arizona 85260, USA. GoDaddy collects log files including IP addresses. Legal basis: Art. 6(1)(f) GDPR. GoDaddy is certified under the EU-US Data Privacy Framework (DPF). A data processing agreement (DPA) is in place. Privacy policy: https://www.godaddy.com/legal/agreements/privacy-policy

Hostinger (VPS & Automation) For server infrastructure and automation processes (n8n), we use Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Personal data (e.g. email addresses from booking processes) may be processed here. Legal basis: Art. 6(1)(f) GDPR. A DPA is in place. Privacy policy: https://www.hostinger.com/privacy-policy

3. General Information & Mandatory Disclosures

Controller Edgar Bobb Calle Gravina 14 35010 Las Palmas de Gran Canaria, Spain
Email: info@edgarbobb.com

Retention Period Personal data is stored until the purpose of processing ceases or you request deletion. Statutory retention periods remain unaffected. Tax-relevant documents are retained for ten years, commercial correspondence for six years.

Your Rights You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Complaints may be directed to the competent data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

Right to Object to Direct Marketing You have the right to object at any time to the processing of your personal data for direct marketing purposes. After objection, your data will no longer be processed for this purpose.

SSL/TLS Encryption This website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser.

International Data Transfers Where data is transferred to third countries (outside the EU/EEA), this is done only on the basis of appropriate safeguards (e.g. EU Standard Contractual Clauses, EU-US Data Privacy Framework) pursuant to Art. 44 et seq. GDPR.

4. Cookies & Consent

This website uses cookies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR. All other cookies (analytics, marketing) are only set with your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via our cookie banner.

Types of Cookies

• Session cookies: Deleted automatically after you leave the website

• Persistent cookies: Remain stored until you delete them or your browser removes them automatically
  

5. Analytics & Tracking

Google Tag Manager We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not set cookies or process personal data — it manages other tags only. Legal basis: Art. 6(1)(f) GDPR. Privacy policy: https://policies.google.com/privacy

Google Analytics 4 (GA4) To analyse user behaviour, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 uses cookies and collects data including anonymised IP addresses, page views and interactions. Processing takes place only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to the USA; Google is certified under the EU-US DPF. You can withdraw your consent at any time via our cookie banner. Privacy policy: https://policies.google.com/privacy

Meta Pixel We use the Meta Pixel by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The Pixel tracks visitor behaviour for ad optimisation and remarketing purposes. Processing takes place only with your explicit consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to the USA; Meta is certified under the EU-US DPF. You can withdraw your consent at any time via our cookie banner. Privacy policy: https://www.facebook.com/privacy/policy

6. Communication & Marketing

KlickTipp (Email Marketing) For email and newsletter delivery, we use KlickTipp by KlickTipp Limited, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, UK. Your email address and any additional information are stored and processed only after explicit consent via a double opt-in process (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email. A DPA is in place. Privacy policy: https://www.klicktipp.com/datenschutz

ManyChat (Instagram & WhatsApp Automation) We use ManyChat Inc., 535 Mission Street, San Francisco, CA 94105, USA for automated communication via Instagram Direct Messages and WhatsApp. Usernames, messages and phone numbers may be processed. Legal basis: Art. 6(1)(a) GDPR (consent through active interaction). Data is transferred to the USA. A DPA is in place. Privacy policy: https://manychat.com/privacy

Meta Instagram & WhatsApp Business We use Instagram and WhatsApp Business — both services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland — for communication and marketing. Legal basis: Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR where active consent is given. Data may be transferred to the USA; Meta is certified under the EU-US DPF. Privacy policy: https://www.facebook.com/privacy/policy

7. Bookings, Courses & Payment Processing

Alfima (Coaching Platform, Bookings, Payments, Email, Online Courses) For client management, appointment bookings, payment processing, email communication and the delivery of online courses, we use Alfima by alfima GmbH, Gärtnerstraße 26a, 20253 Hamburg, Germany. Personal data processed includes name, email address, payment data, course progress, coaching notes and form data. Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR for marketing emails. A DPA is in place. Privacy policy: https://alfima.io/datenschutz

Calendly (Appointment Scheduling) For booking calls and appointments, we use Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. Name, email address and further details may be processed. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Data is transferred to the USA. A DPA is in place. Privacy policy: https://calendly.com/privacy

Stripe (Payment Processing & Checkout) Payments are processed via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe processes payment data and personal data for fraud prevention purposes. Legal basis: Art. 6(1)(b) GDPR. Stripe is certified under the EU-US DPF. Privacy policy: https://stripe.com/privacy

8. Internal Tools & Productivity

Google Workspace For internal communication, documentation and the processing of client data (coaching notes, forms), we use Google Workspace by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis: Art. 6(1)(b) and (f) GDPR. A DPA is in place. Data may be transferred to the USA; Google is certified under the EU-US DPF. Privacy policy: https://policies.google.com/privacy

Riverside.fm (Podcast Production) For podcast recordings and interviews, we use Riverside.fm by Riverside Technologies Inc., 228 Park Ave S, New York, NY 10003, USA. Personal data of interview guests (name, email, image, voice) may be processed. Legal basis: Art. 6(1)(a) GDPR (consent of participants). Data is transferred to the USA. Privacy policy: https://riverside.fm/privacy

9. Social Media

We maintain a presence on Instagram and use WhatsApp Business (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you contact us via these channels, your data is processed by Meta. We have no influence over Meta's data processing. Legal basis: Art. 6(1)(f) GDPR. Privacy policy: https://www.facebook.com/privacy/policy

10. EU Dispute Resolution

The European Commission provides a platform for online dispute resolution: https://ec.europa.eu/consumers/odr/

We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.

11. Changes & Updates

We update this privacy policy whenever changes to our data processing practices require it. We recommend checking this page regularly.

Last updated: April 2026