Legal
What happens to your data when you visit theelevatedmatch.com, download the free book or buy the course: who processes it, why, on what legal basis, and the rights you have under the GDPR.
RITZI GmbH, Kreuzweidenstraße 20A, 53604 Bad Honnef, Germany, represented by its Managing Director Kai Stubbe. Email: [email protected]. The Elevated Match is a brand of RITZI GmbH. We have not appointed a data protection officer because the legal requirements for one are not met.
We process personal data under the GDPR, in particular on the basis of your consent (Art. 6(1)(a)), to perform a contract or take steps before one (Art. 6(1)(b)), to meet legal obligations such as tax record-keeping (Art. 6(1)(c)), and for our legitimate interests where yours do not override them (Art. 6(1)(f)). Storing or reading information on your device additionally falls under § 25 of the German TDDDG.
Our pages, the sign-up form and our customer database run on HighLevel (HighLevel LLC, 1801 N. Lamar St., Suite 600, Dallas, Texas 75202, USA). When you open a page, HighLevel processes technically necessary data: IP address, date and time, the page requested, referrer, browser and operating system. This is needed to deliver the site securely and reliably (Art. 6(1)(f)). HighLevel uses further providers for delivery and protection, in particular Cloudflare (content delivery and bot protection) and Google Cloud (scripts for embedded forms). We have a data processing agreement with HighLevel under Art. 28 GDPR. On transfers to the USA, see section 10.
When you request the free book, we process your first name, email address, the time of sign-up and your IP address, and we send you the book and a short series of emails about the framework and our paid course, Date on Purpose. The legal basis is your consent (Art. 6(1)(a)). You can withdraw it at any time, with effect for the future, through the unsubscribe link in every email or by writing to us.
We send these emails through HighLevel. It records whether an email was delivered and opened and which links were clicked, so we can improve the content and stop sending sales emails once you have bought. If you reply, your reply reaches our HighLevel inbox. After you unsubscribe, we keep your email address on a block list for up to three years so we can prove the unsubscribe and never email you again (Art. 6(1)(f)).
When you buy Date on Purpose, we process your name, email address, the product, price, time of purchase and payment status to conclude and perform the contract (Art. 6(1)(b)) and to meet statutory retention duties (Art. 6(1)(c)).
Payments are handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. You enter your payment details directly with Stripe; we never receive them. Stripe also processes data to prevent fraud and may transfer it to Stripe, Inc. in the USA. If your device supports it, Stripe offers Apple Pay or Google Pay, in which case those providers' privacy terms also apply. More: stripe.com/privacy.
The course runs on Mini Course Generator. To give you access, your name and email address are stored there, together with your progress, quiz answers and the entries you make in the course worksheets, so you can pick up where you left off (Art. 6(1)(b)). According to the provider, data is processed in the EU; subprocessors may process it outside the EU on the basis of EU Standard Contractual Clauses. Some worksheets also keep a copy of your entries in your own browser's local storage, so they are still there on the same device; that copy never leaves your device.
On your first visit we ask whether you agree to the Meta Pixel and Microsoft Clarity. Your choice (accept or only necessary) and its time are stored in your browser's local storage so we don't ask on every page. This is technically necessary (§ 25(2) no. 2 TDDDG, Art. 6(1)(c) and (f)). You can change or withdraw your choice at any time with the "Cookie settings" link at the bottom of every page.
Our pages, the HighLevel form and the Stripe checkout set technically necessary cookies and similar storage, for example to submit forms, prevent abuse and process payments securely (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f)).
If you accept, we load the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). It sets cookies and sends information about your visit to Meta, such as the pages you view, that you signed up for the free book, that you clicked through to the course checkout, your IP address and browser data. We use this to measure whether our ads on Facebook and Instagram work and to show them to people more likely to find them useful. Meta may link this information to your Facebook or Instagram account and use it for its own purposes.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We and Meta are joint controllers for collecting and transmitting the data (Art. 26 GDPR); Meta alone is responsible for what happens afterwards. The joint controller addendum is at facebook.com/legal/controller_addendum and Meta's privacy policy at facebook.com/privacy/policy. Meta also transfers data to the USA (see section 10).
If you accept, we also load Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft"). Clarity records how visitors use our pages (scrolling, clicks, taps and mouse movement, page views, time on page, device, browser, screen size and approximate location derived from the IP address) and turns this into heatmaps and session recordings, so we can see where a page is unclear and improve it. Text you type into fields is masked by default, and the sign-up form is embedded from HighLevel, so its contents are not recorded. Clarity sets cookies to recognise a returning browser.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Microsoft processes the data on our behalf and may also use it to improve its own services; it may transfer data to the USA (see section 10). More: privacy.microsoft.com/privacystatement and clarity.microsoft.com/terms. You can withdraw your consent at any time under "Cookie settings".
Our pages load the typefaces Cormorant Garamond and Montserrat from Bunny Fonts (BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia), which does not log or track visitors. Your IP address is transmitted to deliver the font files (Art. 6(1)(f)). Embedded HighLevel forms may load their own fonts the same way.
If you write to us or reply to one of our emails, we process what you send in order to answer (Art. 6(1)(b) or (f)).
Some of the providers above (HighLevel, Cloudflare, Stripe, Meta, Microsoft) process data in the USA. Where a provider is certified under the EU–US Data Privacy Framework, the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR); otherwise it is based on EU Standard Contractual Clauses (Art. 46 GDPR).
We delete personal data when it is no longer needed for the purpose it was collected for, unless statutory retention periods apply: commercial and tax records are kept for six to ten years (§ 257 HGB, § 147 AO). Email sign-up data is kept until you unsubscribe, plus the block list described in section 4.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). You can also complain to a supervisory authority, for example the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.
This site is served over an encrypted connection (TLS). We use technical and organisational measures to protect your data against loss, misuse and unauthorised access.
As of November 2026 · Legal notice