Privacy policy

Privacy Policy

Note: This is an English translation of the German privacy policy, provided for information purposes only. In the event of any discrepancy between the German original and this English translation, the German version shall prevail.

1. Controller and scope
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
aboutcontent GmbH, Europaplatz 2, 44269 Dortmund, Germany, tel.: +49 231 29298090, email: info@aboutcontent.de.
This privacy policy applies to the processing of personal data via our online shop at about.training. Our offering is directed exclusively at entrepreneurs within the meaning of Section 14 of the German Civil Code (BGB). The subject matter of the contracts concluded via our online shop is the performance of training services in the field of Google Cloud as virtual, instructor-led live events; no physical goods are shipped.

2. Hosting and provision of the website (Shopify)
For the hosting of our website and the display of page content, we use the system of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. All data collected on our website is processed on the provider's servers. Data may also be transferred to Shopify Inc., 150 Elgin Street, Suite 800, Ottawa, Ontario, Canada; an adequacy decision of the European Commission exists for Canada. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in the secure and efficient provision of our online offering) and Art. 6(1)(b) GDPR within the scope of initiating and performing the contract.

3. Server log files
Each time our website is accessed, our system automatically collects data and information stored in so-called server log files. This includes in particular the IP address, the date and time of access, the browser type and operating system used, the previously visited page (referrer) and the volume of data transferred. The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the stability, security and functionality of our website.

4. Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files stored on your end device. Some of these are automatically deleted after the browser is closed (so-called "session cookies"); others remain on your device for longer and enable the storage of page settings (so-called "persistent cookies"). We use technically necessary cookies on the basis of Art. 6(1)(f) GDPR. Cookies that are not technically necessary, as well as access to information on your device for analytics or advertising purposes, are used exclusively on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can also configure your browser to inform you about the setting of cookies and to decide individually about their acceptance.

5. Consent management (cookie banner)
To obtain and manage effective consent for cookies and consent-requiring technologies, this website uses the consent banner provided by our shop platform, Shopify International Limited. Technologies and services requiring consent are loaded only once you give the corresponding consent via the banner. Your consent decision is stored so the request is not repeated on every page view; you can change or withdraw it at any time with effect for the future via the banner. The legal basis is Art. 6(1)(c) GDPR (our legal obligation to make non-essential cookies dependent on consent) and Art. 6(1)(f) GDPR (our legitimate interest in legally compliant consent management).

6. Orders, customer account and delivery of the training
When you place an order and create a customer account, we process the personal data required for this purpose (in particular company name, company address, email address, where applicable the VAT identification number, and the name and email address of the participants designated by you). The legal basis is Art. 6(1)(b) GDPR (initiation and performance of the contract). You can delete your customer account at any time by sending a message to the controller's address above. After deletion, your data is erased provided that all contracts have been fully performed, no statutory retention periods apply and there is no legitimate interest in further storage.

7. Payment processing
Credit card payments are processed via "Shopify Payments" using the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Data may be transferred to Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. We additionally offer the "Google Pay" service of Google Ireland Limited; data may be transferred to Google LLC, USA. The legal basis for the processing is Art. 6(1)(b) GDPR. For data transfers to the USA, the providers have certified under the EU-US Data Privacy Framework.

8. Delivery of the training via Google Meet
The trainings we offer are delivered as virtual, instructor-led live events via the "Google Meet" service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For this purpose, we transmit the participants' contact details provided at the time of order (in particular name and email address) to Google so that they receive the calendar invitation with the access link to the respective training event. Data may be transferred to Google LLC, USA (EU-US Data Privacy Framework). The legal basis is Art. 6(1)(b) GDPR.

9. Contacting us
If you contact us via our contact form or by email, we process the data you provide (in particular your name, email address and the content of your message) in order to handle your request. The legal basis is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR; if the request relates to a contract, Art. 6(1)(b) GDPR is an additional legal basis. Your data is deleted once the circumstances indicate that the matter has been conclusively resolved, provided no statutory retention obligations apply.

10. Google Analytics 4
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By default, no cookies are used by Google Analytics 4 when the website is visited, unless you expressly consent to cookies. Instead, information about your usage behaviour is collected and processed by means of so-called pings (small data packets). Google Analytics 4 may use the "demographic characteristics" function to create statistics about the age, gender and interests of site visitors. As an extension, "Google Signals" may be used to generate cross-device reports, and user IDs may be used to analyse activities, including conversions, across devices. Subject to your express consent, within the scope of a user-provided data function we also transmit one or more files containing customer data aggregated for you (in particular email address and telephone number) electronically to Google. All of the above processing operations, including the transmission of data via "pings" and any setting of cookies, are carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Data may be transferred to Google LLC, USA (EU-US Data Privacy Framework). The data collected in connection with the use of Google Analytics 4 is stored for a period of two months and then deleted. You can withdraw your consent at any time with effect for the future by deactivating this service via the cookie banner provided on this website.

11. Google Ads and conversion tracking
This website uses "Google Ads", an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, including Google Ads conversion tracking. We use Google Ads to draw attention to our offers through advertisements on external websites. Conversion tracking allows us to measure how effective individual ads are by recording whether users who clicked one of our ads subsequently complete a defined action (e.g. submitting a contact request or placing an order). For this purpose, after you click one of our ads, cookies and/or comparable technologies (such as an identifier stored in your browser) are used to recognise your device. These technologies — and the associated transmission of data to Google, including to Google LLC in the USA (EU-US Data Privacy Framework) — are used only if you have given your express consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The data processed does not enable us to identify you personally. You can withdraw your consent at any time with effect for the future by deactivating this service via the cookie banner.

12. Google reCAPTCHA
To protect against abusive and automated access and spam, we use the "Google reCAPTCHA" service of Google Ireland Limited. The service checks whether an entry is made by a natural person or abusively by automated machine processing. In doing so, the provider collects in particular the IP address of the device used, identification data of the browser and operating system type, and the date and duration of the visit. This processing is based on our legitimate interest in the security of our website pursuant to Art. 6(1)(f) GDPR. Insofar as cookies or comparable technologies are used in this context, they are only set if you have given us your express consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Data may be transferred to Google LLC, USA (EU-US Data Privacy Framework).

13. SSL/TLS encryption
For security reasons and to protect the transmission of personal data, this website uses SSL/TLS encryption. The processing is based on Art. 6(1)(f) GDPR.

14. Transfers to third countries
Insofar as we transfer data to services based in or processing data in the USA (in particular Google and Stripe), this is done — where consent is required — on the basis of your consent, and otherwise on the respective legal bases stated above. The providers named have certified under the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

15. Your rights as a data subject
With regard to the processing of your personal data, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), notification (Art. 19 GDPR), data portability (Art. 20 GDPR), and the right to withdraw consents granted with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR).

16. Right to object (Art. 21 GDPR)
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING, WITH EFFECT FOR THE FUTURE, ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS. IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING.

17. Storage period
The period for which personal data is stored is determined by the relevant legal basis, the purpose of processing and — where applicable — the statutory retention periods. Data processed on the basis of consent (Art. 6(1)(a) GDPR) is stored until you withdraw your consent. Data processed for the performance of a contract (Art. 6(1)(b) GDPR) is deleted once it is no longer required for that purpose and no statutory retention periods apply. Invoices and accounting-relevant documents are retained for the statutory periods of up to ten years due to commercial and tax-law obligations (Art. 6(1)(c) GDPR, in particular Section 147 AO and Section 257 HGB). Data processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR) is stored until you exercise your right to object, unless there are compelling legitimate grounds for further processing.

18. Currency and changes to this privacy policy
This privacy policy is currently valid. As our website develops or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.
Version: 1 June 2026