Last updated: 7 September 2026
1. Data controller
The controller responsible for processing personal data on this website is:
Yonju EOOD
ul. Brezovska 36, et. 4
4003 Plovdiv, Bulgaria
Registration number: 205220792
Managing director: Sebastian Maier
Phone: +49 (0)30 57711658
Email: info@sebastianmaier.co
2. Hosting with Firebase App Hosting
This website is delivered through Firebase App Hosting. For customers based in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data required for delivery, security and operation on our behalf.
When you open a page, Firebase processes your device's IP address. This may also include the time, the file requested, the referrer, and information about your browser and operating system. Without this connection data, the website cannot be delivered to your device. It also helps detect errors and abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.
Firebase App Hosting and the underlying Google Cloud services may also process data outside the European Economic Area. Such transfers are subject to the safeguards provided in the Firebase and Google Cloud agreements. Where required, these include the European Union's Standard Contractual Clauses. The retention of technical logs depends on the settings and retention periods of the services used.
You can find further information in the Firebase privacy information, the Data Processing Terms and the list of Firebase subprocessors.
3. Locally hosted fonts
The Inter and Cormorant Garamond fonts are served directly by this website. Opening a page therefore does not establish a connection to Google Fonts or any other external font provider.
4. Privacy settings
Optional services in your browser load only after your explicit consent. You decide separately about audience measurement, usage analysis and embedded videos. The website remains usable without these consents.
We store your choices and the time of your decision in your browser for no more than 180 days. This is necessary so the website can respect your choice. The legal bases are Article 6(1)(c) GDPR and, where applicable, Section 25(2) No. 2 TDDDG. Previous consent for DataFast does not apply to Google Analytics or other new services.
You can change your choice for future use at any time through "Privacy settings" at the bottom of the page. Withdrawal stops further collection by the respective service. Accessible tracking identifiers are deleted. This does not affect the lawfulness of processing before withdrawal.
5. Audience measurement and usage analysis
Google Analytics
If you use this website’s AI features and have consented to audience measurement, we also record which function was called, whether it succeeded and the number of results. Search terms and enquiry content are not transmitted to Google Analytics.
With your consent, we use Google Analytics, provided by Google Ireland Limited. We measure which pages are visited, which offers are clicked and how embedded videos are used. This helps us improve our content and the paths to our offers. Data collected includes page views, referring websites, browser and device details, click and video events, and pseudonymous visitor and session identifiers. Advertising signals and personalisation are disabled. Google also receives your IP address when the analytics script loads.
The retention of event and user data in Google Analytics is set to 14 months. Aggregated reports may remain available for longer. This is separate from the 180-day validity of your consent.
Google may also process data outside the European Economic Area, particularly in the United States. Google identifies applicable adequacy decisions and EU Standard Contractual Clauses as safeguards.
Further information: Google privacy information and Retention in Google Analytics.
OpenReplay
With your separate consent, we use a self-hosted OpenReplay installation on a netcup GmbH server in Austria. netcup provides the server infrastructure as our processor. We record page states, clicks, scrolling and video events to identify usability problems and technical errors. This may also include browser and device details, performance and error data, and IP addresses and connection data during transmission.
Input fields and sensitive areas are excluded from recording; email addresses and numbers are obscured. Video content is not recorded. Session identifiers are stored in your browser for the respective session. We delete or anonymise recordings and associated analytics data once they are no longer needed to analyse current website versions and error patterns.
Linking and consent
Only if you allow both services do we link their analyses using a random pseudonymous identifier. It contains neither your name nor your email address. We do not link it to customer accounts or visits to other product websites. The identifier remains in your browser while both consents are valid; it is removed on withdrawal or on your next visit after expiry.
The legal bases for both services, including their linking, are your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can withdraw each consent independently through “Privacy settings”. Withdrawal does not automatically delete measurement data already stored; you can contact us at the address above to request deletion.
Automated requests from bots and crawlers
Separately from visitor analytics, we analyse recognised requests from search engines and AI crawlers in Google Cloud BigQuery. We store the public page requested, the technical bot identifier, time, method and response status. We do not store raw IP addresses, URL parameters, cookies, visitor identifiers or form inputs for this purpose. This analysis does not set cookies or access your browser storage.
Where personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to understand and improve how search engines and AI services discover our public content. The information above about Google Cloud also applies here. You may object to this processing on grounds relating to your particular situation by contacting us at the address provided.
AI features and optional feedback
Supported AI assistants can search this website’s public content and prepare an enquiry draft. These functions process the inputs provided for that purpose in your browser. They do not send messages or make bookings. We do not receive your full chat. Your chosen AI provider’s privacy information applies to its processing.
You can voluntarily share an individual input to help improve our content and AI features. We first show you the text for review and editing. Please remove personal or confidential information. Only after your explicit consent do we store the displayed input with the function, selected filters, page, language, result identifiers and a random reference number in Google Cloud. We do not store enquiry drafts or full conversations for this purpose.
The legal basis is your consent under Art. 6(1)(a) GDPR. Sharing is not required to use the website or its AI features. Entries are deleted after 30 days. The hosting information above applies to Google as our processor and to possible international transfers. You can withdraw your consent at any time for the future and request deletion using our contact address. Please include the displayed reference number if possible. Withdrawal does not affect the lawfulness of processing before withdrawal.
6. Embedded YouTube videos
YouTube videos initially appear as local placeholders. Only when you allow "External media" does your browser connect to YouTube and load the video through youtube-nocookie.com. This is YouTube's privacy-enhanced mode. The provider is Google Ireland Limited. Other Google companies may be involved in the technical processing.
Loading and playing a video may involve processing your IP address, device information, referrer, playback data and interaction data. If you are signed in to Google, this activity may be associated with your account. Processing in the USA cannot be ruled out. The legal bases are your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Alternatively, you can open a video directly on YouTube using the displayed link. This takes you away from this website, and Google's privacy policy then applies.
7. Contact by email or phone
If you contact us by email or phone, we process the contact details you provide, the content of your enquiry and the relevant information needed to handle it. The legal basis is Article 6(1)(b) GDPR where this concerns entering into or performing a contract, and Article 6(1)(f) GDPR otherwise. Our legitimate interest is handling enquiries and business communications appropriately.
We retain enquiries only for as long as necessary to handle and document them. Statutory retention periods for business correspondence and contractual documents remain unaffected.
8. External links
This website links to separate services and offers. These include CoachWunder, ConnectWunder, the Golden Ticket, WhatsApp, YouTube, Instagram and LinkedIn. A connection to the destination website is only established when you open the link. The respective provider's privacy policy applies there.
9. Recipients, retention periods and provision of data
Personal data is received only by internal teams and service providers that need it for the purposes described above. These include Google for hosting, bot analysis and, with your consent, Google Analytics, netcup as the hosting provider for our OpenReplay installation, and YouTube for embedded videos. When you open external links, the respective provider processes your request. Otherwise, we share data only where permitted or required by law, or where you have consented.
Where no fixed period is specified above, we determine retention based on whether the purpose still applies, statutory retention duties, and the need to establish or defend legal claims. You are generally not required to provide personal data. However, the website cannot be delivered without technically necessary connection data. Without optional consent, the corresponding services remain disabled.
10. Your rights as a data subject
Subject to the applicable legal conditions, data subjects have rights including access, rectification, erasure, restriction of processing, data portability and objection. Consent may be withdrawn with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.
For privacy enquiries, simply send a message to info@sebastianmaier.co. The supervisory authority generally responsible for the controller company is the Commission for Personal Data Protection in Bulgaria. Your right to contact another competent European supervisory authority remains unaffected.
11. Automated decisions and updates
This website does not use solely automated decision-making that produces legal or similarly significant effects. We do not use this website's data for personalised advertising.
We update this privacy policy when the services used, the technical delivery or the legal requirements change. The version published on this page is the applicable version.