The MAASter Plan

Privacy Policy

Last updated: November 2026

1. Who Is Responsible for Your Data (Controller)

The person responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

Clare Maas – The MAASter Plan
Zur Steinkaul 3
54298 Welschbillig
Germany
Email: contactclare@themaasterplan.de

2. General Principles and Legal Bases

We treat your personal data confidentially and in strict compliance with statutory data protection laws (GDPR and the German Federal Data Protection Act, BDSG) and this Privacy Policy. We only collect and use your personal data when we have a clear legal basis to do so:

  • Your consent (Article 6(1)(a) GDPR): e.g., when you subscribe to our newsletter.
  • Contract fulfillment or pre-contractual steps (Article 6(1)(b) GDPR): e.g., when you buy an e-book or online course, book a 1:1 consultation, or email us with a booking inquiry.
  • Legal obligations (Article 6(1)(c) GDPR): e.g., retaining invoices for tax authorities.
  • Legitimate interests (Article 6(1)(f) GDPR): e.g., keeping our website secure, stable, and error-free, and measuring anonymous visitor statistics.

3. Website Hosting, Server Logs, Cookies, and Statistics

Website Hosting and Server Log Files (WordPress.com / Automattic)

This website is hosted on WordPress.com, operated by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA; for European users: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland). Whenever you visit our website, the web server automatically records technical information in server log files sent by your browser, including your IP address, browser type and version, operating system, referring URL, and the date and time of access. This processing is necessary to ensure the technical stability, security, and reliable delivery of our website (Article 6(1)(f) GDPR). Automattic Inc. is certified under the EU-US Data Privacy Framework.

Cookies and Jetpack Statistics

Our website uses Jetpack Stats (provided by Automattic Inc.) to understand how our website is used. Jetpack Stats only produces aggregated, non-personalised statistics, such as which pages are viewed, which links are clicked, where visitors arrive from, and which country they are visiting from. We cannot see individual visitors, and no individual user profiles are created. To produce these statistics, Automattic processes your IP address (used to determine your country) and may store or read cookies on your device. This helps us see which content is useful and improve our website, which is our legitimate interest (Article 6(1)(f) GDPR). You can prevent cookies from being stored at any time through your browser settings, and you have the right to object to this processing (see Section 8).

External Links (Gumroad, Amazon, Instagram, Facebook)

Our website includes outbound links to third-party platforms, including Gumroad, Amazon, Instagram, and Facebook. Simply visiting themaasterplan.de does not transmit any personal data to these providers. Only when you actively click an external link and leave our website do the privacy policies of those respective platforms apply.

4. Contacting Us by Email and Booking Support Sessions

Email Inquiries

When you contact us by email (contactclare@themaasterplan.de), we store and process your email address, name, and message content to respond to your request. This is based on Article 6(1)(b) GDPR (for inquiries related to bookings or services) or our legitimate interest in answering general messages (Article 6(1)(f) GDPR).

1:1 Consultations and Support Bookings

When you book a free intro chat, a single consultation, a 3-session package, or post-session WhatsApp support, we process your contact details, scheduling information, and session notes solely to organize and carry out the booked service (Article 6(1)(b) GDPR). Free 15-minute intro chats can be booked via a Google Calendar booking page provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). When you book there, Google processes the name, email address, and appointment time you enter so that the appointment can be scheduled (Article 6(1)(b) GDPR). Google’s own privacy policy applies to its booking page.

5. Newsletter and Signup Forms (MailerLite)

Signup Forms and Data Collected

Our newsletter and free-resource signup forms are hosted by MailerLite. The signup buttons and links on themaasterplan.de lead to these forms on MailerLite’s own pages, so simply visiting our website does not transmit any data to MailerLite. When you open one of these form pages, MailerLite processes the technical data that your browser sends to any website (such as your IP address, browser type, and the date and time of access) in order to display the form. If you then sign up, we collect your email address and, if you choose to provide it, your first name. We use this information exclusively to send you requested resources, updates, and educational content.

Double Opt-In Verification

To ensure nobody signs you up without your permission, we use a Double-Opt-In process:

  1. You enter your email address into one of our signup forms.
  2. You receive an automated email asking you to confirm your subscription.
  3. Your subscription only becomes active once you click the confirmation link in that email.
  4. For legal proof of consent, we log the signup timestamp, confirmation timestamp, and IP address.

Legal Basis and Unsubscribing

We process your newsletter data solely based on your explicit consent (Article 6(1)(a) GDPR). You can unsubscribe and withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of every email or by emailing contactclare@themaasterplan.de. Withdrawing consent does not affect the lawfulness of any emails sent before you unsubscribed.

Email Service Provider

Our signup forms and email newsletters are managed through MailerLite Limited (88 Harcourt Street, Dublin 2, D02 DK18, Ireland). We have signed a GDPR Data Processing Agreement (Article 28 GDPR) with MailerLite.

6. Course Platforms, Payment Providers, and Online Calls

a) Course Hosting and Digital Sales (Kikudoo & Gumroad)

To provide access to our online courses and digital downloads, we use kikudoo GmbH (Germany/EU) for EU/UK course bookings and Gumroad, Inc. (548 Market St, San Francisco, CA 94104, USA) for international digital sales. When you place an order, your name, email address, billing details, and course access data are processed to fulfill your purchase (Article 6(1)(b) GDPR). Data transfers to Gumroad in the USA are protected under the EU-US Data Privacy Framework and/or Standard Contractual Clauses (Article 46 GDPR).

b) Payment Processing (Stripe & PayPal)

Payments are processed via Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg). Your payment details (such as card information, PayPal email, and transaction amount) are transmitted directly to the selected payment provider to complete your payment (Article 6(1)(b) GDPR).

c) Online Consultations and Support (Zoom & WhatsApp)

We conduct 1:1 video consultations using Zoom Video Communications, Inc. (55 Almaden Blvd, San Jose, CA 95113, USA). Your name, email address, and technical meeting data are processed to hold the booked session (Article 6(1)(b) GDPR). Zoom is certified under the EU-US Data Privacy Framework. No audio or video recordings are made unless explicitly agreed beforehand.

If you book optional post-session support via WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland), your phone number and chat messages are processed strictly to deliver that support (Article 6(1)(b) GDPR).

7. How Long We Keep Your Data (Data Retention)

We only retain personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with statutory retention rules:

  • Newsletter Data: Retained until you unsubscribe or withdraw your consent (plus routine backup deletion cycles).
  • General Email Inquiries: Deleted once your inquiry has been resolved, unless an ongoing client relationship or legal retention requirement applies.
  • Client, Booking, and Invoice Records: Under German commercial and tax laws (Section 147 AO and Section 257 HGB), invoices, payment records, and contract-related correspondence must be kept for eight (8) to ten (10) years from the end of the calendar year in which they were created, after which they are securely deleted.

8. Your Rights Under the GDPR

You have the following rights regarding your personal data at any time:

  • Right of access (Article 15 GDPR): Ask whether we hold personal data about you and receive a copy of it.
  • Right to rectification (Article 16 GDPR): Ask us to correct inaccurate or incomplete personal data.
  • Right to erasure (Article 17 GDPR): Ask us to delete your personal data (“right to be forgotten”), unless we are legally required to keep it.
  • Right to restriction of processing (Article 18 GDPR): Ask us to limit how we use your data in certain situations.
  • Right to data portability (Article 20 GDPR): Receive the personal data you gave us in a structured, commonly used, machine-readable format.
  • Right to withdraw consent (Article 7(3) GDPR): Withdraw any consent you previously gave us at any time for the future.

Right to Object (Article 21 GDPR)

Where we process your personal data based on legitimate interests (Article 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is required for legal claims. If your personal data is used for direct marketing, you may object at any time, and we will immediately stop using your data for marketing.

Right to Lodge a Complaint (Article 77 GDPR)

You have the right to file a complaint with a data protection supervisory authority. The supervisory authority responsible for Rhineland-Palatinate is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP)
Hintere Bleiche 34, 55116 Mainz
https://www.datenschutz.rlp.de

A German translation of this page can be provided on request, for information purposes only. The English version remains the legally authoritative version for this website.