1 Responsible Authority
We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:

Gabriela Freitag
Björnsonweg 44
22587 Hamburg
Phone: +49 40 45037208
E-mail: privacy@performance-that-works.com

2 General Information
Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.

When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.

All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.

On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.

The GDPR allows data processing in three cases in particular:

• in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;

• in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;

• in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.

 
2.1 Inventory Data
We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user. This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment). Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.
2.2 Usage Data
We also collect usage data to allow users to use the services on our website. These may consist of: usage information (for example visited websites or parts, duration of visit, interest in services), content data (for example data, text, images, sounds, videos entered or uploaded by you), meta data (for example identity of your device, location, IP address).

We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.

The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.

3 Hoster
3.1 CMS System Wix
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we have established this website with the Wix CMS system provided by Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel (“Wix.com”). Our website is also hosted on that company's servers.

Like any other hosting service, Wix.com will collect user data in that process. These are identifiable and non-identifiable data collected when you access our website. These will either be provided to Wix.com or automatically collected when using the services of Wix.com (“non-personal data”). With such non-personal data, it is impossible for Wix.com to determine from whom the data originates. Non-personal data is technological information and usage information, e.g. visitors' and service users' browsing and clickstream behaviour, heat maps of sessions and scrolling as well as non-identifiable data about the device used, operating system, browser, screen resolution, language and keyboard preferences, internet provider, referral and exit pages, date/time stamp etc.

As a hosting service, Wix.com also collects data which can identify a person with reasonable effort (“personal data“). Basically, this personal data is all data that you enter when using the website. This may include contact data (for example e-mail address or phone number), invoice details (name, billing address, payment method and bank details), data about a browser or user session (IP address, geographical location and/or unique identifier of the device), data about connected third-party accounts (for example e-mail address or user name for a connected PayPal, Google or Facebook account), scanned identity documents provided to us (for example ID card, driving license, passport or official documents about company registration), and any other personal data. For your protection, Wix.com will treat any non-personal data, which will be connected with personal data (for example to improve the services of Wix.com), as personal data.

Wix.com Ltd. is registered in Israel, which is viewed by the European Commission as a country providing adequate protection of the personal data of EU member states' citizens.

Affiliated companies and service providers of Wix.com, which store or process your personal data on behalf of Wix.com, have committed themselves to protect this data in accordance with industry standards and irrespective of possibly lower requirements under their legal system. We, too, have a contractual agreement with Wix.com, according to which Wix.com will only process the data on our behalf.

Wix.com may also process your data in the USA.

Wix.com will implement physical, electronic and procedural security measures to protect the personal data. Among other things, Wix.com offers HTTPS-secure access to our website; the transmission of confidential data is protected by a connection encrypted according to the industry standard SSL/TLS, and Wix.com regularly updates its PCI DSS (Payment Card Industry Data Security Standards) certification. Wix.com also regularly checks its systems for potential vulnerabilities and attacks and is constantly looking for new procedures and third-party services to further improve the security of its services and the protection of visitors' and users' data.

You will find more information about the data processing by Wix.com and your rights in the privacy policy of Wix.com at: https://www.wix.com/about/privacy

4 Advertisements
Before sending you advertisements, we will ask for your explicit consent pursuant to Art. 4 no. 11 GDPR, except in cases of advertisements for similar products to the one you already acquired. This will happen in particular when you grant us consent to mail our newsletter or when you fill out a contact form. You may withdraw your consent at any time in accordance with the subsequent section “Consent”.

INSOFAR AS WE USE YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU MAY ALSO OBJECT TO THE USE OF YOUR DATA FOR THAT PURPOSE AT ANY TIME. THIS MAY BE DONE THROUGH ANY OF OUR MEANS OF CONTACT, PARTICULARLY BY E-MAIL TO THE E-MAIL ADDRESS LISTED IN THE “LEGAL NOTICE” SECTION WITHOUT ANY FORMAL REQUIREMENTS. WE WILL THEN NO LONGER USE YOUR DATA FOR DIRECT MARKETING.

5 First Contact through Electronic Request
If you contact us in electronic form (for example by mail, fax, phone, messenger, etc.), we store and process the data which you have given us (for example name, contact information, content of the request). This is based on our legitimate interest in an effective communication with customers in accordance with Article 6 para. 1 (a) GDPR and, as far as it concerns a request to enter into or to perform a contract, also with Article 6 para. 1 (b) GDPR.
We will only pass on this data to third parties as far as required for the performance of the contract (in accordance with Article 6 para. 1 (b) GDPR), by the overwhelming interest in effective services (in accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in accordance with Article 6 para. 1 (a) GDPR) or if there is another legal permission or obligation.
You may ask us at any time and without any cost to provide information about the purpose of the processing, the origin and the recipient, if any, of your data. You may also request that we correct, delete or limit the processing of your personal data. You may object against the (further) processing of your data at any time and you have a right for the data to be made transferable as well as the right to file a complaint with the competent supervisory agency.
In general, your data will only remain stored as long as required by the purpose of the respective data processing. A longer storage is an option, in particular when required in order to pursue our rights, for other legitimate interests of ours or when there is a statutory duty to keep the data longer (for example record-keeping under tax law, statute of limitations).

6 Consent
Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

7 Storage Period
Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.
For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus an adequate extra time for potential interruptions of the limitation period.
For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.
Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular the tax-law requirements to keep records, usually for 6 or even 10 years.

8 Cookies
8.1 More then essential Cookies
Upon opening the website, we have asked you to consent to the storing of certain cookies which will be placed while you visit our website. Based on your consent pursuant to Art 6 para. 1 (a) GDPR, our website thus uses cookies, so that our offer can be used in a better, more effective and more secure way.
A cookie is a record of information that is stored on your terminal device (computer, tablet, smartphone, etc.). These can be “session cookies”, which are automatically deleted when you leave our website. Other cookies are stored on your computer permanently until you delete them. That allows us to recognize your browser when you visit our website again and to provide you with features or offers according to your previous usage.

Your browser allows you to prevent the use of cookies in general or in specific cases. Please check the instructions for your browser to find out more about this. You can also delete cookies following these instructions which we have listed for you:

for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
for Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
for Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
for Edge: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
for Internet Explorer: https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may limit the functionality of our website and of other websites visited by you.
More information on this topic, in particular how you can administer, limit or completely disable third-party cookies and technologies with a similar purpose, can be found at:
https://www.aboutads.info/choices
https://www.youronlinechoices.eu
https://www.networkadvertising.org/choices
8.1.1 clickskeks
 
In order to obtain your consent to the storage of certain cookies on your device and to document them in compliance with data protection regulations, we use within the scope of our legal obligation in accordance with Article 6 Paragraph 1 Clause 1 lit. c GDPR and thus also our legitimate interest in accordance with Article 6 Paragraph 1 lit. we use Cookie Consent Manager „clickskeks“, from clickskeks GmbH & Co KG, Sechsschimmelgasse 14, 1090 Wien / Österreich.
The clickskeks cookie only sets technically necessary cookies. When our website is accessed, the following data is transmitted to clickskeks: your consent or the revocation of your consent to the setting of cookies, a cookie set by clickskeks in your browser, the cookie duration and version, domain and path of the WordPress website and the UID. The UID is a randomly generated ID and not personal information. clickskeks does not process any personal data.
If you would like to revoke your consent to the setting of certain cookies, simply delete the cookie in your browser. When you re-enter / reload the website, you will be asked again for your cookie consent.
You can find detailed information on the data protection provisions of clickskeks at: https://www.clickskeks.at/datenschutz
 
9 Users‘ Rights
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
9.1 Deletion, Correction, Limitation
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
9.2 Objection
The right to object to advertisement is governed by our text regarding consent:
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.
9.3 Data Transfer
You may request us to transfer the data stored about you in machine-readable form.
9.4 Complaint
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

10 Changes to the Privacy Policy
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

11 Data Entry
11.1 Encryption of Data Entry
When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.
11.2 Contact Forms
11.2.1 General contact form
When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.

Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.

Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.

Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).
11.3 Registration
If you register on our website, we will ask for compulsory and potentially also non-compulsory data in accordance with our registration form for the purposes listed hereinafter.
Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.
The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR in case of contracts, including non-remunerated ones.
Your data will remain stored for as long as you remain registered, particularly as long as the storage is still required to perform the contract, to pursue our rights or for our other legitimate interests or for as long as we are required by law to store your data (for example pursuant to tax-law requirements to store documents).
 
11.3.1 Webinar
If you register for a webinar, we will ask for your e-mail address and your first name, because we like to address you personally. We will only use your data to inform you about the implementation of the webinar as well as possibly about information which is necessary for the webinar to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information). Your data will be deleted after the completion of the webinar.
11.3.2 Course Registration
If you register for a course, we will ask for your data according to the registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the course as well as possibly about information which is necessary for the course to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).

12 Social Media
12.1 Social Media Links
12.1.1 General Information
We refer with links to our social media presences. When you follow any such link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information.
12.1.2 Linkedin
Our page uses links to our presence on the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.

It is just a normal link, which means that upon opening our page, LinkedIn won't learn anything of your visit to our website. But when you click on the link, you will be taken to LinkedIn, and then LinkedIn will also learn that you visited our page.

Thus, your data may be forwarded to the USA.

We have neither knowledge of, nor any influence on the possible collection and processing of your data by LinkedIn after clicking on the link. Further information can be found in LinkedIn's privacy policy at https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE.

13 Social Media Tracking
13.1 Linkedin Insight Tag
When accessing the page, referring to the explanation in this data protection declaration, you consented that we may use the LinkedIn Insight Tag to evaluate the success of our advertising measures on LinkedIn.

The LinkedIn Insight Tag is, in the context of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization in accordance with. 6 (1) (f) GDPR, the range measurement service of LinkedIn Ireland Limited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.
The technology implemented by the LinkedIn Insight Tag enables us to measure the reach and sales based on this (so-called conversions) of our advertisements on LinkedIn and thus improve our advertising. We can also use it to target users who have already been to our website with advertising on LinkedIn.

The LinkedIn Insight Tag is a JavaScript code that enables the collection of data on visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent) and time stamps. This data is encrypted, the IP addresses are shortened and the direct IDs of the members are removed within seven days in order to pseudonymize the data. Your data is also anonymized for us, we cannot assign it to you. We only receive a statistical analysis from LinkedIn.

The data is processed in the EU by the LinkedIn branch in Ireland. There is a possibility that your data will also be transmitted to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. 

You can deactivate the LinkedIn Insight Conversion Tool and interest-based advertising,
by unsubscribing at the link below:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
If you are a LinkedIn member, click on "Unsubscribe from Linkedin". Other visitors click on "Log out".
Further information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

14 Google
14.1 Google Analytics 4
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the Google Analytics tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This helps to analyse the use of websites. In that process, the data can be turned into pseudonymous user profiles. Google uses different technologies for that purpose, which are based on algorithms, also it is possible, that Cookies are used. Google uses a pseudonymous number for each user of our website. Pseudonym means that neither name nor e-mail address nor other data that clearly identifies the user are used. The number is then used to analyse how the individual user uses our online offering. The date and time of use as well as page views, scrolls to the end of the page, clicks on external links, website searches, viewing of an embedded YouTube video and file downloads are also analysed.

Google may transfer the collected data to countries outside of the EU, in particular to the USA. We have concluded a data-processing agreement with Google, according to which Google will only process your information in accordance with our instructions. This data-processing agreement also states that Google may only transfer the data to the USA within the framework of the standard contractual clauses, see the Google Ads Data Processing Terms for further information. The Google Ads Data Processing Terms are available here: https://business.safety.google/adsprocessorterms/.

Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

Google will automatically anonymize your IP address, which means that information won't be stored on their hard disk. To ensure an adequate protection of your data, we have also concluded a data-processing agreement with Google, according to which Google will not combine your information with other data collected by Google with the goal of determining your identity.

If you don't find this sufficient, you can also use the link http://tools.google.com/dlpage/gaoptout?hl=de to download and install Google's browser plugin to block Google Analytics, which will prevent Google from collecting and passing on your personal data.

You can also prevent being analysed by Google Analytics by using the following link: Deactivate Google Analytics to place an opt-out cookie, which will also prevent the data from being collected.

If you want to read about Google's privacy policy, please use the following link https://www.google.de/intl/de/policies/privacy/.

15 Videoconferences, Webinare and Onlinemeetings
15.1 Microsoft Teams
We use external communication providers (third-party providers or platforms for our video conferences, audio conferences, webinars or other online meetings and online communications), here Microsoft Teams, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.
This is done either
- within the framework of our contractual or pre-contractual legal relationships according to Art. 6 para. 1 lit. b GDPR,
- within the scope of your consent, provided that we have obtained this in advance (such as for a recording) in accordance with Art. 6 para. 1 lit. a GDPR or otherwise
- in the context of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization acc. Article 6 (1) lit. f GDPR.
Every time you use our external communication provider, you enter or display all the data that you provide during communication (in particular inventory data such as name and email, usage data such as the browser used, websites visited, length of stay, referrer URL and your IP address, content data such as audio and video communication and / or recording, chat history, shared screen contents) to the external communication provider and saved by it. We ourselves use settings that are as privacy-friendly as possible, you can also take such precautions. You can register with alias names or unique email addresses, for example, or deactivate your audio and video transmission (in part).

This will forward your data to the United States. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. 

Your data will remain stored insofar as it is still necessary for the purposes of your consent, for contract fulfillment / processing, for legal prosecution by us or for our other legitimate interests or if we are legally required to keep your data.
We and the external communication provider will not pass on your data to third parties. An exception can be an evaluation of the usage data for service and backup purposes as well as for marketing purposes by the external communication provider. For further use of your data by the external communication provider, we refer to their privacy policy
https://privacy.microsoft.com/de-de/privacystatement
and the associated additional safety information
https://www.microsoft.com/de-de/trust-center.
If the external communication provider stores cookies or other trackers for you, we also refer to our general presentation in this data protection declaration for the general handling and deactivation of cookies.
 

This is our current valid privacy policy from 11.06.2025