Privacy Policy

1. General Information

The protection of your personal data is very important to us. This Privacy Policy explains how we collect, process, and use personal data when you visit our website or use our services.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

2. Data Controller

Responsible for data processing:

Sven Friedrich
Breslauer Straße 28
35398 Gießen
Germany

Email: info (and than at) quit-smoking-weed.com

3. Data Collection When Visiting the Website

When you access our website, certain information is automatically collected by your browser and transmitted to our server. This includes:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

• Requested page

This data is used to ensure the technical stability and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

4. Contact Form and Email Communication

If you contact us via email or contact form, we store the information you provide (such as name and email address) to process your request.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

Your data will not be shared with third parties without your consent.

5. Registration and Online Program

If you register for our online program or community, we collect and process personal data necessary for the performance of the contract. This may include:

• Name

• Email address

• Payment information

• Login data

The legal basis is Art. 6(1)(b) GDPR (contract performance).

6. Payment Providers

For payment processing, we use external payment service providers. Payment data is transmitted directly to the respective provider and is not stored by us.

The legal basis is Art. 6(1)(b) GDPR.

Specific providers used may include Stripe, PayPal, or other secure payment processors.

7. Newsletter

Payments with Stripe, member account and purchase emails

Purchase and payment through Stripe

The seller and your contract partner is Sven Friedrich (address in the legal notice). Payment is processed by the payment service Stripe. For customers in the European Economic Area this is Stripe Payments Europe, Limited, Ireland, possibly together with other companies of the Stripe group, also in the USA.

We process your name, your email address, your payment data (for card payments the card number, expiry date and security code, which you enter directly at Stripe and which we do not see), the amount, the time of payment, and device and browser data used to detect fraud. We use the data to carry out the contract, take payment, handle refunds, manage your subscription and prevent fraud. The legal basis is Art. 6(1)(b) GDPR (contract), and for fraud prevention Art. 6(1)(f) GDPR (protection against payment fraud).

Depending on the process, Stripe handles the data on our behalf (payment processing) or as a controller in its own right, for example for fraud detection and for meeting legal duties as a payment provider. Stripe may also process data outside the European Economic Area, for example in the USA, and uses the safeguards provided for by the EU for this. You can find Stripe’s privacy notice at stripe.com/privacy.

Payment methods

You can pay by credit or debit card, Apple Pay, Google Pay, PayPal and Amazon Pay. If you use PayPal, payment runs through PayPal and the provider processes your data as a controller under its own privacy terms. The same applies to Amazon Pay. With Apple Pay and Google Pay you confirm the payment on your device, and Apple or Google process their own data.

Member account

After a successful payment we automatically create a user account for you on quit-smoking-weed.com. We store your user name, your email address, your password (only as a hash), your access status (active, paused, ended), the start and end of your paid time, and your Stripe customer number and subscription number. The legal basis is Art. 6(1)(b) GDPR. We use technically necessary cookies for login. We do not store your learning progress. If you want, we delete your account. Invoice data is kept because of legal retention duties.

Invoices and retention

We issue an invoice for every payment (small business, without VAT). It shows your name, the date, the service, the amount and, if we collect it, your address. We must keep invoices and accounting records under tax law. The legal basis is Art. 6(1)(c) GDPR.

Emails about your purchase

After your purchase you get system emails from us: purchase confirmation, login details, invoice, notices about failed payments, and cancellation and refund confirmations. These emails are not newsletters. The legal basis is Art. 6(1)(b) GDPR. We send them through the mailbox of our host ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Friedersdorf, Germany. Stripe may also email you about payment problems.

Cancellation page

On the cancellation page you enter your email address. We use it to check whether you have a subscription and to send you a confirmation link. To prevent misuse, we briefly count and keep requests in the server’s working memory, without storing them permanently. The legal basis is Art. 6(1)(b) and (f) GDPR.

Counting of the checkout window

We count anonymously how often the checkout window is opened and the pay button is clicked. We store no IP addresses or identifiers and cannot link the numbers to a person.

Partner request and partner account

You can send us a request through the form on the partner page. For this we store your name, your email address, your link or channel and your message. Your request arrives as an email in our mailbox so that we can answer you personally. If you become a partner, we also store your partner code, the sales made through your link and your commissions, so that we can account for them and pay them out to you. For this we create a user account for you on this website and store the payout details (IBAN or PayPal email) you enter in your partner account. We count the clicks on your partner link only as a number per day, with no IP address and no cookie. Customers do not see any of your data, and you do not see personal data of the customers. The legal basis is Art. 6(1)(b) GDPR. To prevent misuse we briefly count requests in the server’s working memory. The legal basis is Art. 6(1)(f) GDPR. If we decline a request, we delete it after six months at the latest.

Sharing and service providers

We share member data only with service providers we need to run the service: Stripe (payment, possibly PayPal and Amazon Pay), ALL-INKL.COM (hosting and email), Hetzner Online GmbH, Gunzenhausen, Germany (server of the checkout), Cloudflare (network and DNS), and authorities where we are legally required to. We do not share data for advertising.

If you subscribe to our newsletter, we process your email address for the purpose of sending informational and marketing emails.

The legal basis is Art. 6(1)(a) GDPR (consent).

You may withdraw your consent at any time by clicking the unsubscribe link in any email or contacting us directly.

8. Cookies

Our website may use cookies to improve functionality and user experience.

Cookies are small text files stored on your device.

You can configure your browser to block cookies. However, some website features may not function properly without cookies.

Where legally required, we obtain your consent before setting non-essential cookies.

9. Analytics and Tracking

We may use analytics tools to understand how visitors use our website.

These tools may collect anonymized or pseudonymized data such as:

• Page views

• Time spent on pages

• Click behavior

Where required by law, tracking is only activated after user consent.

10. Community and User Content

If you participate in a community or comment area, the information you publish may be visible to other users.

You are responsible for the content you share.

We reserve the right to remove content that violates laws or community guidelines.

11. Data Retention

Personal data is stored only as long as necessary for the respective purpose or as required by legal retention obligations.

After the purpose ceases to apply, the data is deleted unless statutory retention periods require otherwise.

12. Your Rights Under GDPR

You have the right to:

• Access your stored personal data (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or destruction.

However, no data transmission over the internet can be guaranteed to be completely secure.

14. International Users

If you access this website from outside Germany, please note that your data may be processed in Germany or within the European Union, where data protection laws may differ from those in your country.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to comply with legal requirements or reflect changes to our services.

The current version is always available on this website.