— Privacy

Privacy policy

What this site collects, why, on what legal basis — and what rights you have.

1. Controller

Christoph Sacher, MSc.
«address»
Email: coach@christophsacher.com

2. Simply visiting the site

On each request the hosting provider automatically processes server log data: IP address, date and time, page requested, referrer URL, browser and operating system identifiers. This is technically necessary to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR.

3. The application form at /apply

When you submit the application form I process what you enter: name, email address, optionally a phone number, and your answers on role, company size, current situation, urgency, previous attempts and investment readiness, plus an optional free-text note.

Note on health-related information: some of these answers may permit inferences about your health and therefore fall under Art. 9 GDPR (special categories of personal data). I process them solely on the basis of your explicit consent under Art. 9(2)(a) GDPR, which you give on submission. You may withdraw it at any time by email; the lawfulness of processing before withdrawal is unaffected.

Purpose: solely to answer your enquiry and prepare an initial conversation. No disclosure to third parties for advertising, no addition to any mailing list.

Delivery: submissions are delivered to me via a Telegram bot (see section 5) and processed by email.

Retention: enquiries that do not lead to an engagement are deleted after «e.g. 12» months at the latest. Where an engagement follows, statutory retention periods apply.

4. Cookies and measurement

This site uses cookies and measurement technologies from Google and Meta (see section 5). These are not necessary for operating the site and may only be set with your consent (Art. 6(1)(a) GDPR).

5. Services and recipients

Vercel (hosting)

Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Server logs are processed on each request: IP address, timestamp, page requested, referrer, browser and device identifiers. Legal basis: Art. 6(1)(f) GDPR (operation and security of the site).

Google Fonts

Fonts are loaded from Google servers (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google in the process. Legal basis: Art. 6(1)(f) GDPR.

Google Ads / Google tag (AW-691320868)

Google Ireland Ltd. Measures whether a visit originating from an advert led to an enquiry. Sets cookies and processes usage data. Legal basis: consent, Art. 6(1)(a) GDPR.

Meta Pixel (ID 1623278519362850) and Conversions API

Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Measures advertising performance. The Conversions API additionally transmits event data server-side (including IP address, user agent, and the _fbp/_fbc cookie identifiers) to Meta. Legal basis: consent, Art. 6(1)(a) GDPR.

Telegram (enquiry delivery)

Telegram FZ-LLC, Dubai, UAE. Submissions from the application form are delivered to me via a Telegram bot so that I read them promptly. The data you entered is transmitted. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or consent.

Spotify (podcast embeds on /podcast)

Spotify AB, Sweden. Loading the embedded players establishes a connection to Spotify and transmits your IP address.

WhatsApp links

Meta Platforms Ireland Ltd. A connection to WhatsApp is only established once you click a WhatsApp link. Nothing is transmitted merely by viewing a page.

Transfers to the USA or other third countries rely on adequacy decisions or the standard contractual clauses of the respective providers. A level of protection equivalent to the European one cannot be guaranteed in every case.

6. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Consent given may be withdrawn at any time with effect for the future.

An informal email to coach@christophsacher.com is sufficient for any of these.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence.

7. Confidentiality of coaching content

Independently of data protection obligations, I treat everything from enquiries and conversations as confidential. I do not use client names in marketing. Case examples are published only in anonymised form and only with explicit permission.

Last updated: 2026-08-15 · See also: Legal notice