Privacy

This policy explains what personal data I process when you use goldeneradecoded.com, take the quiz, download your Starter, subscribe to the Golden Era Letter or buy a product. A German version is available at /datenschutz; if the two differ, the German version prevails.

1. Who is responsible

David Mansfeld
[STRASSE UND HAUSNUMMER]
[PLZ ORT]
Germany
Email: david@goldeneradecoded.com

I have not appointed a data protection officer, as I am not required to.

2. Hosting, security and server logs

This site and its functions (quiz, downloads, order processing) run on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, your browser transmits technical data such as IP address, date and time, the page requested, referrer, browser and operating system. Cloudflare processes this data to deliver the site, protect it against attacks and keep it available.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, fast website). Cloudflare acts as my processor under a data processing agreement. Cloudflare is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses also apply. Security logs are kept by Cloudflare for a short period only.

Fonts are hosted on this site itself. No connection to Google Fonts or other font services is made.

3. Storage on your device

I don’t use advertising or tracking cookies. To make the quiz work, your browser stores your answers, your progress, the source of your visit (for example, which video you came from) and, after confirmation, a link to your profile in its local storage. This is strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

4. The quiz and the confirmation code

When you request your profile, I process your quiz answers, your first name, your email address, the source of your visit, your IP address and the time. I send a 6-digit code to your email address to confirm it really is yours (double opt-in). The code email is sent via Cloudflare Email Service (Cloudflare as above). The code expires after 15 minutes and is then deleted.

Legal basis: your consent, Art. 6(1)(a) GDPR, and, for delivering the free Starter you requested, Art. 6(1)(b) GDPR. To be able to prove your consent, I store the time of your request and confirmation, your IP address and the consent text (Art. 6(1)(c) and (f) GDPR).

The quiz assigns you a training type. This is a suggestion with no legal or similarly significant effect on you; it is not automated decision-making within the meaning of Art. 22 GDPR.

5. The Golden Era Letter (newsletter)

If you confirm your email, I send you your profile and Starter and then the Golden Era Letter: training history, one training principle per issue, news from the channel and offers for my programs. I use MailerLite (MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland) as my processor. MailerLite stores your email address, first name, quiz result (training type, track, age range, equipment, main obstacle), the source of your visit, the time and IP of your sign-up and confirmation, and, if you buy something, which product you bought.

MailerLite measures whether emails are opened and which links are clicked, so I can see which content is useful. This is part of the consent you give when you subscribe.

You can unsubscribe at any time with the link in every email or by writing to me. Withdrawal does not affect the lawfulness of processing before it. After you unsubscribe, I keep your email address and the proof of consent only as long as needed to prove past consent (usually up to three years) and on a block list so you don’t receive emails by mistake.

Legal basis: Art. 6(1)(a) GDPR. MailerLite stores data in a data center in the EU; where subprocessors outside the EU are involved, MailerLite uses standard contractual clauses or the Data Privacy Framework.

6. Personalized downloads

Your first name is printed on the cover of your PDF and your training track is marked inside. To do this, the download link carries your first name and track. The PDF is generated at the moment of download and is not stored with your name. Legal basis: Art. 6(1)(b) GDPR.

7. Purchases via Digistore24

Paid products are sold by Digistore24 (Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Deutschland, or an affiliated company depending on your country) as reseller and merchant of record. When you click a buy button, you go to Digistore24’s order form. Digistore24 processes your order and payment data as an independent controller under its own privacy policy, which is linked in the order form.

To deliver your product, Digistore24 sends me your order data: order number, product, first and last name, email address, country, payment status and, if you came via the quiz, the source and your training type. I store this data to provide your downloads, to handle refunds and support, and, only if you have subscribed to the Golden Era Letter, to send you buyer emails. Legal basis: Art. 6(1)(b) GDPR (delivery) and, for emails, Art. 6(1)(a) GDPR. Order records are kept for three years after the purchase, longer where tax law requires.

If you bought without subscribing, the thank-you page offers you the Golden Era Letter. I only add you to my mailing list if you confirm it with a code.

8. Email contact

If you email me, I process your message and contact details to answer you. My mailbox is hosted by Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, Netherlands) in an EU data center. Legal basis: Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for questions about an order. I delete messages when they are no longer needed, unless retention periods apply.

9. Notifications to me

I get a short notification about new sign-ups and sales (for example, “New lead: The Oak, over-40 track, from Issue 003”). These notifications contain no names, email addresses or other personal data.

10. Website statistics

I use Cloudflare Web Analytics to count page views. It sets no cookies, does not store anything on your device and does not create user profiles; your IP address is not stored for analytics. Legal basis: Art. 6(1)(f) GDPR (understanding which pages are used).

11. Links to social networks

Links to YouTube, Instagram or TikTok are plain links. No data is sent to these networks until you click one. After that, the network’s own privacy policy applies.

12. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just write to david@goldeneradecoded.com.

You also have the right to lodge a complaint with a supervisory authority, for example the one responsible for me: Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt, www.tlfdi.de.

13. Changes

I update this policy when the site or the law changes. The current version is always here.

Last updated: October 20, 2026