German version: Datenschutzerklärung
Privacy policy
Neumann Marketing GmbH
Brachtstraße 22
40223 Düsseldorf
Phone: 0176/38170574
Email: an@arturneumann.com
Managing director: Artur Neumann
Register court: Düsseldorf Local Court (Amtsgericht Düsseldorf)
Commercial register number: HRB 107148
Last updated: October 10, 2026
1. Relevant legal bases
In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we inform you of the legal bases of our data processing. If the legal basis is not stated in this privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR. The legal basis for processing to provide our services, carry out contractual measures and answer inquiries is Art. 6(1)(b) GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR. The legal basis for processing to protect our legitimate interests is Art. 6(1)(f) GDPR. If the vital interests of the data subject or of another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
2. Changes and updates to the privacy policy
Please check the content of our privacy policy regularly. We adapt the privacy policy as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require an action on your part (e.g., consent) or another individual notification.
3. Security measures
In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. In doing so, we take into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. These measures include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to it, its input, its transfer, securing its availability and its separation. We have also set up procedures that ensure the exercise of data subject rights, the deletion of data and a response to threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in line with the principle of data protection by design and by default (Art. 25 GDPR).
The security measures include in particular the encrypted transfer of data between your browser and our server.
4. Cooperation with processors and third parties
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer data to them or otherwise grant them access to the data, we do so only on the basis of a legal permission (e.g., if a transfer of data to third parties, such as payment service providers, is necessary to perform a contract under Art. 6(1)(b) GDPR), if you have given your consent, if a legal obligation provides for it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called “data processing agreement”, we do so on the basis of Art. 28 GDPR.
5. Transfers to third countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this happens when we use third-party services or disclose or transfer data to third parties, we do so only if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process data in a third country, or have it processed there, only if the special requirements of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized finding of a level of data protection equivalent to that of the EU (e.g., for companies in the USA that are certified under the EU-U.S. Data Privacy Framework), or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
6. Rights of data subjects
You have the right to request confirmation as to whether the data in question is being processed, and to obtain information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning you or the correction of inaccurate data concerning you.
In accordance with Art. 17 GDPR, you have the right to request that the data in question be deleted without undue delay or, alternatively, in accordance with Art. 18 GDPR, to request a restriction of the processing of the data.
In accordance with Art. 20 GDPR, you have the right to receive the data concerning you that you have provided to us and to request its transfer to other controllers.
In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.
7. Right to withdraw consent
You have the right to withdraw consent you have given with effect for the future in accordance with Art. 7(3) GDPR.
8. Right to object
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you can object to processing for direct marketing purposes.
9. Cookies and right to object to direct marketing
We use temporary and permanent cookies, i.e., small files that are stored on users' devices (for an explanation of the term and the function, see section 15). Some of the cookies serve security purposes or are required to operate our online offering (e.g., to display the website). In addition, we or our technology partners use cookies for reach measurement and marketing purposes. Users are informed about this in the course of this privacy policy.
For many services, especially in the case of tracking, a general objection to the use of cookies for online marketing purposes can be declared via the US site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that you may then not be able to use all functions of this online offering.
10. Deletion of data
The data we process is deleted or its processing is restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent its deletion. If the data is not deleted because it is required for other, legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
Germany: Under statutory requirements, we retain in particular books and records, inventories, opening balance sheets, annual financial statements and management reports for 10 years, accounting vouchers including invoices for 8 years, and received and sent commercial and business letters for 6 years (Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO), Section 14b of the German VAT Act (UStG)).
11. Provision of contractual services
We process users' personal data, master data (e.g., names and addresses of customers), contract data (e.g., services used, names of contact persons, payment information) and content data (e.g., entries in the contact form or the community) in order to fulfill our contractual obligations and services in accordance with Art. 6(1)(b) GDPR.
12. Contacting us
When users contact us (for example by email or messenger), their details are processed in accordance with Art. 6(1)(b) GDPR to handle and process the contact request.
We store and process inquiries and contact data in our own CRM and email system on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on the basis of our legitimate interests (Art. 6(1)(f) GDPR). Details on sending emails are in section 21.
For our email inbox, we use Google Workspace of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on the basis of our legitimate interests. Data may also be processed by Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.
13. Comments and contributions
If users leave comments or other contributions, their IP addresses are stored for 7 days on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR.
14. Collection of access data and log files
On the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR, we collect data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed web page, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
15. Cookies & reach measurement
Cookies are pieces of information that are transferred from our web server or from third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.
We use session cookies, which are only stored for the duration of the current visit to our online presence, and permanent cookies, which remain stored after the visit, for example to recognize returning visitors and for reach measurement (see sections 16 to 19). We also store information about the source of a visit, such as UTM parameters, in a cookie or in the local storage of your browser.
16. Google Analytics
On the basis of our legitimate interests, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google uses cookies. The information generated about the use of the online offering by users may also be transferred to servers of Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.
According to Google, Google Analytics 4 does not log or store IP addresses.
17. Google re/marketing services
On the basis of our legitimate interests, we use the marketing and remarketing services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
18. Facebook social plugins
On the basis of our legitimate interests, we use social plugins (“plugins”) of the social network facebook.com, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Facebook”).
19. Facebook, Custom Audiences and Facebook marketing services
Our online offering uses the so-called “Facebook pixel” of the social network Facebook. With the help of the Facebook pixel, Facebook can determine the visitors to our online offering as a target group for displaying ads (so-called “Facebook ads”).
In addition, we transmit certain events, for example page views, sign-ups and purchases, directly from our server to Meta (Conversions API). For this, we transmit in particular the time and type of the event, the page visited, your IP address, the identification of your browser, Meta cookie identifiers and, for sign-ups and purchases, your email address and, if provided, your phone number in hashed (pseudonymized) form. Each event receives an ID so that Meta does not count it twice. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Data may also be processed by Meta Platforms, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework.
20. Amazon affiliate program
We participate in the affiliate program of Amazon EU. This program was designed to provide websites with a means of earning advertising fees by placing advertisements and links to Amazon.de.
21. Newsletter
With the following information, we inform you about the content of our newsletter, about registration, sending and evaluation, and about your right to withdraw your consent.
We send our newsletter and other emails with content, invitations to webinars and information about our offers only with your consent. As a rule, you confirm your registration via a link in an email that we send you after you submit the form (double opt-in). For some forms, the registration is already valid when you submit the form (single opt-in).
When you register, we store your email address and, if you provide them, your name and your phone number. We also store the time of registration and of confirmation, the page or form through which you registered, and information about the source of the visit, for example UTM parameters and ad identifiers. This information serves as proof of your consent and shows us through which channels readers sign up.
The data is stored in our own newsletter system on a server in Germany. The server provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. Sending is handled by Amazon Simple Email Service (Amazon SES) in the Frankfurt am Main region (eu-central-1). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. For this purpose, Amazon SES processes your email address and the content of the respective email. Amazon SES also reports to us whether an email was delivered, whether it was undeliverable and whether a recipient complained about it. We exclude addresses that are permanently undeliverable or for which we receive a complaint from further mailings.
We analyze whether our emails are opened and whether links in them are clicked. To measure opens, each email contains a small invisible image that your email program loads from an Amazon SES server when you open the email. In this process, we receive the time of opening, your IP address and the identifier of your email program or browser. Links in our emails first go through our newsletter system and only then to the destination. When you click, we store the clicked link, the time and the identifier of your browser. In this case, we store your IP address only as a hash value. We add campaign parameters such as UTM parameters to the links so that we can see on our pages which email a visit comes from. We assign opens and clicks to your email address. This lets us see which content interests our readers, and we can improve our emails and send them in a more targeted way.
The legal basis for sending the newsletter and for measuring opens and clicks is your consent under Art. 6(1)(a) GDPR. Logging the registration and processing the delivery reports are based on our legitimate interest in a verifiable and reliable mailing under Art. 6(1)(f) GDPR.
You can withdraw your consent at any time with effect for the future. To do so, simply click the unsubscribe link in any newsletter email or send a message to an@arturneumann.com. You cannot unsubscribe from open and click tracking alone. For this, please unsubscribe from the newsletter. If you turn off the loading of images in your email program, no open tracking takes place.
After you unsubscribe, you will no longer receive the newsletter. Your email address remains stored in a block list with the note “unsubscribed” and the time of unsubscribing. This ensures that you do not receive any further newsletters and allows us to prove your earlier consent. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. If you also want your other data to be deleted, write to us at an@arturneumann.com.
22. Communication via WhatsApp
If you voluntarily check the separate WhatsApp checkbox on one of our forms, you consent to receiving the book and bonus tips from Neumann Marketing GmbH via WhatsApp. This may also include an invitation to a free online workshop on a related topic. Your mobile number alone does not trigger any WhatsApp communication. The checkbox is not preselected. The legal basis is your consent under Art. 6(1)(a) GDPR.
For this communication, we process in particular your name, your mobile number, the link to the requested content, the consent text and time of consent, as well as message, delivery and interaction data. The first message asks whether you would like to take part in the related workshop free of charge. Only if you confirm this via the reply offered do we send you the personal registration link. If you reply “Nein danke” (no thanks) or do not reply, this process sends no further automated workshop message.
We use the WhatsApp Business Platform for this. The provider for the European Region is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp may also process data through affiliated companies and service providers outside the European Union or the European Economic Area. You can find more information in WhatsApp's privacy policy.
You can withdraw your consent at any time with effect for the future, in particular by sending the message “STOP” in the WhatsApp chat or by email to an@arturneumann.com. We store the proof of consent and, after a withdrawal, the blocking information required to respect the withdrawal, insofar as this is necessary to fulfill legal obligations and to defend against claims.
23. Integration of third-party services and content
On the basis of our legitimate interests, we use content or service offerings from third-party providers within our online offering in order to integrate their content and services, such as videos or fonts.
24. Orders via Digistore24
We sell our paid offers, for example our consulting packages, via Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Digistore24 acts as a reseller and processes the order and the payment under its own responsibility; Digistore24's privacy policy applies to this. We receive from Digistore24 the data required to deliver our service, in particular your name, your email address, the product purchased, the price and the order number. We process this data to fulfill the contract (Art. 6(1)(b) GDPR) and to meet our statutory retention obligations (Art. 6(1)(c) GDPR).
25. Video calls via Zoom
We hold consulting calls via Zoom, a service of Zoom Communications, Inc., San Jose, California, USA. Zoom processes in particular your name, your email address, connection and device data and the audio and video content of the call. If a recording is part of the booked service, we record the call and make the recording available to you. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Zoom Communications, Inc. is certified under the EU-U.S. Data Privacy Framework.
26. Communication via Telegram
If you send us questions via the messenger Telegram, we process your Telegram name, your phone number if it is visible to us, and the content of your messages, including voice messages, in order to answer your questions. The legal basis is the performance of the contract for booked consulting (Art. 6(1)(b) GDPR) and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). Telegram is operated by companies outside the European Union. You can find more information in Telegram's privacy policy.