Datenschutzerklärung (GDPR)

Privacy Policy

Last updated: 26 October 2026 · Draft

1. Who is responsible

Controller within the meaning of the GDPR: Louis Trawny, [street, number], [postcode, city], Germany. Email: support@louistrawny.com.

2. The short version

• This website uses no cookies, no analytics and no tracking. Fonts are hosted on this server; nothing is loaded from Google Fonts.
• I only process personal data that is needed to run the website, answer your messages and deliver what you bought.
• Health information from clients is only processed with your explicit consent.

3. Hosting and website delivery — Cloudflare

This website is hosted with Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technical data that every website request contains: IP address, date and time, the page requested, browser and operating system. This is necessary to deliver the website securely and to protect it from attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Cloudflare is certified under the EU-U.S. Data Privacy Framework; I have concluded a data processing agreement with Cloudflare.

4. Email contact

When you email support@louistrawny.com, your message is received through Cloudflare Email Routing (Cloudflare, Inc., see above) and forwarded to my mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). I process your email address, name and the content of your message to answer you. Legal basis: Art. 6(1)(b) GDPR if your message relates to a contract or a planned contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

5. Withdrawal and cancellation forms — Tally

The forms on “Withdraw from contract” and “Cancel contracts here” are provided by Tally (Tally BV, [address], Belgium). I process your name, email address, the contract concerned, your declaration, and the date and time of submission. I then send you a confirmation of receipt by email. Legal basis: Art. 6(1)(c) GDPR (legal obligations under §§ 312k and 356a BGB). The form is only loaded when you open one of these two pages.

6. Buying an offer — Stripe

Payments are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe processes your name, email address, billing address and payment details to carry out the payment and to prevent fraud. I receive your name, email address, the product purchased and the payment status — never your full card details. Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (tax and accounting obligations). Stripe is independently responsible for its own fraud prevention; see stripe.com/privacy.

7. Training platform — Relay

Programs, training logs and check-ins run in the Relay app, provided by [Relay provider: company name, address, country]. Relay processes your account data (name, email), your training program and the training data you log (sets, reps, loads, velocities, notes). If you buy the Training Team subscription through Relay, Relay also handles the subscription checkout. Legal basis: Art. 6(1)(b) GDPR. [Transfer basis if outside the EU: Data Privacy Framework / standard contractual clauses — check with Relay]. I have concluded a data processing agreement with Relay.

8. Calls and messages

Weekly check-ins take place by call, voice message, text or in Relay. Calls take place via Google Meet; onboarding calls are booked through a Google Calendar booking page, where you enter your name and email address and receive a confirmation and reminders by email. Both are provided by Google Ireland Limited (see above). Text and voice-message check-ins take place via WhatsApp, provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp encrypts messages end to end; WhatsApp itself processes your phone number and metadata, and may transfer data to Meta Platforms, Inc. in the USA (certified under the EU-U.S. Data Privacy Framework). If you prefer not to use WhatsApp, check-ins can take place in Relay or by email instead. Legal basis: Art. 6(1)(b) GDPR. Calls are not recorded unless you agree beforehand.

9. Community — Skool

Clients get access to my online community on Skool, provided by [Skool provider: company name, address, USA]. When you join, Skool processes your profile data and what you post. Legal basis: Art. 6(1)(b) GDPR. Data may be transferred to the USA; [transfer basis: Data Privacy Framework certification or standard contractual clauses — check]. Skool’s own privacy policy applies to your Skool account.

10. Health data (clients only)

To write a safe, effective program I need information about your health: injuries, pain, illnesses, medication relevant to training, and similar. This is special category data under Art. 9 GDPR. I only process it with your explicit consent, which I ask for in writing during onboarding (Art. 9(2)(a) GDPR). You can withdraw this consent at any time with effect for the future by emailing support@louistrawny.com. Without this information I may not be able to program safely for you; in that case we discuss whether and how the coaching can continue.

11. Results, photos and testimonials

Before/after photos, training data and statements from clients are only published on this website or on social media with the client’s separate written consent (Art. 6(1)(a) GDPR; § 22 KUG). Consent can be withdrawn at any time with effect for the future; I then remove the content from my own channels.

12. Newsletter — Kit

[Only once a sign-up form is on the site:] If you subscribe to my newsletter, your email address and name are processed by Kit (ConvertKit LLC, [address], USA) to send it. Legal basis: your consent, Art. 6(1)(a) GDPR, confirmed by double opt-in. You can unsubscribe at any time via the link in every email.

13. Video on this website

[Once the video is embedded: provider, what is loaded when, legal basis — or “The video is hosted on this server; no third party is involved.”]

14. How long data is kept

• Emails and enquiries without a contract: deleted when the matter is closed, at the latest after 12 months.
• Client data (program, logs, check-ins, health data): for the duration of the coaching, then deleted after 12 months unless you ask for earlier deletion or we work together again.
• Invoices and accounting documents: as long as tax and commercial law requires (currently up to 10 years).
• Withdrawal and cancellation submissions: 3 years after the end of the year of submission, to be able to prove them.

15. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent at any time with effect for the future (Art. 7(3)). An email to support@louistrawny.com is enough.

Right to object (Art. 21 GDPR): Where I process data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. I then stop processing unless I can demonstrate compelling legitimate grounds.

16. Right to complain

You can complain to a data protection supervisory authority, in particular in the EU member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for me is [supervisory authority of your federal state, e.g. Landesbeauftragte für Datenschutz … — depends on your business address].

17. Changes

I update this policy when the website or my services change. The current version is always available on this page.