Last updated: 7 September 2026
1. Data controller
The controller responsible for processing personal data on this website is:
Yonju EOOD
ul. Brezovska 36, et. 4
4003 Plovdiv, Bulgaria
Registration number: 205220792
Managing director: Sebastian Maier
Phone: +49 (0)30 57711658
Email: info@sebastianmaier.co
2. Hosting with Firebase App Hosting
This website is delivered through Firebase App Hosting. For customers based in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data required for delivery, security and operation on our behalf.
When you open a page, Firebase processes your device's IP address. This may also include the time, the file requested, the referrer, and information about your browser and operating system. Without this connection data, the website cannot be delivered to your device. It also helps detect errors and abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.
Firebase App Hosting and the underlying Google Cloud services may also process data outside the European Economic Area. Such transfers are subject to the safeguards provided in the Firebase and Google Cloud agreements. Where required, these include the European Union's Standard Contractual Clauses. The retention of technical logs depends on the settings and retention periods of the services used.
You can find further information in the Firebase privacy information, the Data Processing Terms and the list of Firebase subprocessors.
3. Locally hosted fonts
The Inter and Cormorant Garamond fonts are served directly by this website. Opening a page therefore does not establish a connection to Google Fonts or any other external font provider.
4. Privacy settings
Optional services load only after your explicit consent. You decide separately about audience measurement, usage analysis and embedded videos. The website remains usable without these consents.
We store your choices and the time of your decision in your browser for no more than 180 days. This is necessary so the website can respect your choice. The legal bases are Article 6(1)(c) GDPR and, where applicable, Section 25(2) No. 2 TDDDG. Previous consent for Google Analytics does not apply to new services.
You can change your choice for future use at any time through "Privacy settings" at the bottom of the page. Withdrawal stops further collection by the respective service. Accessible tracking identifiers are deleted. This does not affect the lawfulness of processing before withdrawal.
5. Audience measurement and usage analysis
DataFast
With your consent, we use DataFast, provided by JustShipIt Pte. Ltd., Singapore, as our processor. We measure which pages are visited, which offers are clicked and how embedded videos are used. This helps us improve our content and the paths to our offers. Data collected includes page views, referring websites, browser and device details, click and video events, and pseudonymous visitor and session identifiers. DataFast also receives your IP address when the analytics script loads.
DataFast uses visitor cookies lasting up to one year and session cookies lasting 30 minutes, which may be renewed with further activity. Measurement data is retained for as long as needed to compare traffic sources and engagement with our offers over longer periods. We then arrange for its deletion or anonymisation. This is separate from the 180-day validity of your consent.
DataFast and its subprocessors may process data outside the European Economic Area, particularly in Singapore and the United States. DataFast describes EU Standard Contractual Clauses in particular as safeguards for this processing. You can request information about these safeguards and a copy using our contact address above.
Further information: DataFast privacy information and Data processing and subprocessors.
OpenReplay
With your separate consent, we use a self-hosted OpenReplay installation on a netcup GmbH server in Austria. netcup provides the server infrastructure as our processor. We record page states, clicks, scrolling and video events to identify usability problems and technical errors. This may also include browser and device details, performance and error data, and IP addresses and connection data during transmission.
Input fields and sensitive areas are excluded from recording; email addresses and numbers are obscured. Video content is not recorded. Session identifiers are stored in your browser for the respective session. We delete or anonymise recordings and associated analytics data once they are no longer needed to analyse current website versions and error patterns.
Linking and consent
Only if you allow both services do we link their analyses using a random pseudonymous identifier. It contains neither your name nor your email address. We do not link it to customer accounts or visits to other product websites. The identifier remains in your browser while both consents are valid; it is removed on withdrawal or on your next visit after expiry.
The legal bases for both services, including their linking, are your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can withdraw each consent independently through “Privacy settings”. Withdrawal does not automatically delete measurement data already stored; you can contact us at the address above to request deletion. Google Analytics is not used on this website.
6. Embedded YouTube videos
YouTube videos initially appear as local placeholders. Only when you allow "External media" does your browser connect to YouTube and load the video through youtube-nocookie.com. This is YouTube's privacy-enhanced mode. The provider is Google Ireland Limited. Other Google companies may be involved in the technical processing.
Loading and playing a video may involve processing your IP address, device information, referrer, playback data and interaction data. If you are signed in to Google, this activity may be associated with your account. Processing in the USA cannot be ruled out. The legal bases are your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Alternatively, you can open a video directly on YouTube using the displayed link. This takes you away from this website, and Google's privacy policy then applies.
7. Contact by email or phone
If you contact us by email or phone, we process the contact details you provide, the content of your enquiry and the relevant information needed to handle it. The legal basis is Article 6(1)(b) GDPR where this concerns entering into or performing a contract, and Article 6(1)(f) GDPR otherwise. Our legitimate interest is handling enquiries and business communications appropriately.
We retain enquiries only for as long as necessary to handle and document them. Statutory retention periods for business correspondence and contractual documents remain unaffected.
8. External links
This website links to separate services and offers. These include CoachWunder, ConnectWunder, the Golden Ticket, WhatsApp, YouTube, Instagram and LinkedIn. A connection to the destination website is only established when you open the link. The respective provider's privacy policy applies there.
9. Recipients, retention periods and provision of data
Personal data is received only by internal teams and service providers that need it for the purposes described above. These include Google for hosting and, with your respective consent, DataFast for audience measurement, netcup as the hosting provider for our OpenReplay installation, and YouTube for embedded videos. When you open external links, the respective provider processes your request. Otherwise, we share data only where permitted or required by law, or where you have consented.
Where no fixed period is specified above, we determine retention based on whether the purpose still applies, statutory retention duties, and the need to establish or defend legal claims. You are generally not required to provide personal data. However, the website cannot be delivered without technically necessary connection data. Without optional consent, the corresponding services remain disabled.
10. Your rights as a data subject
Subject to the applicable legal conditions, data subjects have rights including access, rectification, erasure, restriction of processing, data portability and objection. Consent may be withdrawn with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.
For privacy enquiries, simply send a message to info@sebastianmaier.co. The supervisory authority generally responsible for the controller company is the Commission for Personal Data Protection in Bulgaria. Your right to contact another competent European supervisory authority remains unaffected.
11. Automated decisions and updates
This website does not use solely automated decision-making that produces legal or similarly significant effects. We do not use this website's data for personalised advertising.
We update this privacy policy when the services used, the technical delivery or the legal requirements change. The version published on this page is the applicable version.