1. Privacy and scope

We take the protection of your personal data seriously and process it in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This notice applies to the CoachPlus landing/brand website. The website provides information about CoachPlus and supports our marketing activities and their evaluation. No registration or login is available on this website. Separate privacy notices apply to the CoachPlus mobile app.

2. Controller

SPM Sportplatz Media GmbH

Schleidenstraße 3, 22083 Hamburg, Germany

Managing Director: Marcel Hager

Email: info@sportplatz-media.com

Website: www.sportplatz-media.com

3. Data Protection Officer

ARTANA Digital GmbH

Prof. Dr. Christian Rauda

Alstertwiete 3, 20099 Hamburg, Germany

Phone: +49 40 537 981 260

Email: datenschutzbeauftragter@sportplatz-media.com

4. Legal bases

We process personal data only where there is a lawful basis, in particular Article 6(1)(a) GDPR (consent), (b) (contract/pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests). Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies to storing information on or accessing information from terminal equipment.

5. Website access and server logs

When you access our website, we may process your IP address, date and time, requested URL or file, referrer URL (where provided), browser type and version, operating system, amount of data transferred, HTTP status code and technical connection data.

Purposes: Website delivery, stability, troubleshooting, IT security and prevention of misuse.

Legal basis: Article 6(1)(f) GDPR; our legitimate interest is secure website operation.

Retention: Server logs are generally deleted after four weeks. Exceptionally, they may be kept longer where necessary to investigate a specific security incident.

6. Hosting by Hetzner

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes technical information necessary to deliver the website. No additional hosting or CDN providers are used for the landing page.

Purpose and legal basis: Secure and reliable website delivery, Article 6(1)(f) GDPR. Where Hetzner acts as our processor, processing is governed by an agreement under Article 28 GDPR.

7. Cookies and similar technologies

We use technically necessary technologies as well as consent-based analytics and marketing technologies. Technologies that are not technically necessary, in particular Google Analytics 4 and the Meta Pixel, are activated only after you consent. Our consent management platform controls activation (Basic Consent Mode for Google Analytics).

Where required, Section 25(1) TDDDG applies to storing or accessing information on your device, and subsequent personal-data processing is based on Article 6(1)(a) GDPR. Strictly necessary technologies are covered by Section 25(2) TDDDG; subsequent processing relies, depending on its purpose, in particular on Article 6(1)(f) GDPR. You may change or withdraw consent at any time using the website privacy settings.

8. Consent management (Consentmanager)

We use the consent management platform provided by consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg, Germany, to collect, manage, implement and document your consent decisions. Data processed may include consent status, privacy preferences, consent and withdrawal timestamps, consent-related identifiers and technical browser and device information.

Legal basis: Article 6(1)(c) GDPR where documentation is required by law; additionally Article 6(1)(f) GDPR for reliable management of privacy preferences. Where Consentmanager acts as a processor, an agreement under Article 28 GDPR applies.

Retention: Consent records are kept only for as long as necessary to meet applicable statutory documentation and evidence requirements.

You may change or withdraw your consent at any time through the website privacy settings.

9. Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to manage and control analytics and marketing tags. The Tag Manager does not itself create independent marketing user profiles; however, loading it may transmit technical information, including an IP address, to Google. Consent-based tags are activated through Consentmanager only after you consent.

The legal basis for consent-dependent personal-data processing is Article 6(1)(a) GDPR.

10. Google Analytics 4

We use Google Analytics 4 (GA4), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to evaluate visitor numbers, page views, interactions, traffic sources and marketing effectiveness and to improve the website. This may involve usage events, online identifiers, technical browser and device data, approximate location information and referrer data.

GA4 is activated only after consent (Basic Consent Mode). Google Signals and Google Ads features are disabled; no User-ID functionality is used on the landing page.

Legal bases: Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Retention: GA4 retention for user- and event-level data is set to two months; resetting the retention period on new activity is disabled. Aggregated standard statistical reports may remain available for longer.

Withdrawal: At any time with future effect through the website privacy settings. See Section 16 for possible international transfers.

11. Meta Pixel

We use the browser-based Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, to measure and optimize advertising on Facebook and Instagram. After you consent, information such as visited pages, visit timestamps, interactions, IP address, browser and device data, referrer information and online identifiers may be transmitted to Meta. Meta may combine this information with Facebook or Instagram account data where applicable. We do not use the Meta Conversions API or server-side Meta tracking.

Legal bases: Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Withdrawal: At any time through the website privacy settings. Where joint controllership applies to collection and transmission, the relevant Article 26 GDPR arrangements apply. Meta’s own privacy policy governs its further processing.

12. Facebook Custom Audiences

We use website Custom Audiences based on the Meta Pixel to show CoachPlus ads on Facebook or Instagram to people who previously visited our website (retargeting). Meta may use information collected via the Pixel to create advertising audiences. We do not upload our own customer or contact lists for this purpose.

Legal bases: Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You may withdraw your consent at any time through the website privacy settings, with effect for the future.

13. Locally hosted fonts (Google Fonts)

We use typefaces from the Google Fonts collection for consistent presentation. The font files are stored locally on our hosting infrastructure and served from there. Your browser therefore does not connect to Google servers to load these fonts, and no personal data is transmitted to Google in connection with loading them.

14. Newsletter

You may subscribe to our newsletter about CoachPlus, product news, features and offers. We process your email address and information relating to subscription, confirmation, consent status and, where applicable, unsubscription.

Purpose and legal basis: Sending the newsletter on the basis of your consent under Article 6(1)(a) GDPR. Consent records are maintained under Article 6(1)(c) GDPR where necessary to meet statutory evidence obligations.

You may withdraw your consent at any time via the unsubscribe link in every newsletter. We then remove your email address from the active mailing list unless another legal basis requires retention. Necessary consent evidence may be retained in accordance with statutory requirements.

15. Recipients of personal data

Where necessary, recipients may include Hetzner, Consentmanager, Google (Tag Manager and Analytics), Meta (Pixel and Custom Audiences), the newsletter provider, technical service providers, advisers or public authorities where legally required. We enter into Article 28 GDPR processing agreements with processors and, where applicable, Article 26 GDPR joint-controllership arrangements.

16. International data transfers

Google and Meta may process data outside the EU/EEA. Such transfers take place in compliance with Articles 44 et seq. GDPR, for example under relevant adequacy decisions (including the EU-US Data Privacy Framework for certified US recipients where applicable), standard contractual clauses or other permissible safeguards.

17. Retention periods

We retain personal data only as long as necessary for the respective purpose, unless statutory obligations require longer retention.

Server logs: generally four weeks, longer where necessary for a specific security incident.

Consentmanager: as long as necessary to meet applicable statutory documentation and evidence requirements.

GA4: two months for user- and event-level data, with no reset on new activity; aggregated standard reports may remain available for longer.

Meta tracking data: subject to the relevant processing purposes, settings and provider terms.

Newsletter: until consent is withdrawn or subscription cancelled; necessary consent records may be retained longer.

18. Data security

We apply appropriate technical and organizational measures under Article 32 GDPR, including encrypted data transmission, access restrictions, authorization concepts, security updates and measures to detect and prevent attacks. These safeguards are reviewed on a risk-based basis.

19. Your data protection rights

Subject to statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on Article 6(1)(f) GDPR in accordance with Article 21. You may exercise these rights using the contact details above.

20. Withdrawal of consent

You may withdraw consent at any time with effect for the future. For analytics and marketing technologies, use the website privacy settings; for newsletters, use the unsubscribe link. Withdrawal does not affect the lawfulness of processing before withdrawal.

21. Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, including the authority responsible for us or the authority at your habitual place of residence.

22. Changes to this privacy notice

We may update this notice when the website, service providers or legal requirements change. The current version will be made available on our website.

Last update: October 2026