Privacy Policy

Last updated: 30.09.2026

  1. Data Controller

The entity responsible for data processing on this website is:

Jana Ceylan Bittmann
c/o POSTFLEX PFX-573-365
Emsdettener Straße 10
48268 Greven
Germany

Email: support@janaceylan.de

  1. Overview of Data Protection

When visiting this website, personal data may be collected. Personal data refers to any data that can be used to identify you personally.

This may include:

  • technical data (e.g. browser type, operating system, IP address)
  • data you actively provide (e.g. contact forms, email communication)
  • Detailed information about how your data is processed can be found in this privacy policy.
  1. Hosting and Content Delivery

This website is hosted by:

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

Strato stores IP addresses to ensure the technical operation and security of the website.

Legal basis:

  • Art. 6(1)(f) GDPR – legitimate interest in secure and stable website operation.

A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting provider.

Hosting of our readings and tools (Netlify)

Our Destiny Matrix readings, calculators and other tools on subdomains of janaceylan.de are hosted by:

Netlify, Inc.
101 2nd Street
San Francisco, CA 94105
USA

When you visit these pages, Netlify processes technical data (e.g. IP address, date and time of access, browser type) to deliver the website and ensure its security. Forms on these pages (e.g. sign-ups) are processed via Netlify’s server functions; the data is passed directly to our newsletter provider Brevo and is not stored by Netlify beyond short-term technical logs.

Legal basis:

  • Art. 6(1)(f) GDPR – legitimate interest in secure and stable website operation.

Netlify is certified under the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses apply. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Netlify.

  1. SSL / TLS Encryption

This website uses SSL/TLS encryption to protect the transmission of confidential content.

You can recognize an encrypted connection by the https:// in your browser’s address bar and the lock symbol.

  1. General Information on Data Processing

We process personal data only when necessary to:

  • provide this website
  • fulfill contractual obligations
  • respond to inquiries
  • pursue legitimate business interests

Legal bases according to Art. 6 GDPR:

  • Art. 6(1)(b) – contract fulfillment or pre-contractual measures
  • Art. 6(1)(a) – consent (e.g. newsletters or tracking)
  • Art. 6(1)(f) – legitimate interests (e.g. website security, analytics)
  • Art. 6(1)(c) – legal obligations
  1. Cookie Management (CookieYes)

We use CookieYes (GDPR Cookie Consent Plugin) to manage cookie consent.
When you first visit this website, only essential cookies are activated until you give consent.

Legal basis:

  • Art. 6(1)(c) GDPR (legal obligation to manage consent).

You can change your cookie settings at any time via the cookie banner.

  1. Contacting Us

If you contact us via:

  • contact form
  • email
  • messenger services
  • telephone

the information you provide will be stored for the purpose of processing your request.

Legal basis:

  • Art. 6(1)(b) GDPR – processing necessary for pre-contractual or contractual purposes.

Data will be stored only as long as necessary to process the request or comply with legal obligations.

  1. Tools and Services

8.1 ThriveCart (Checkout & Digital Products)

We use ThriveCart Ltd. to process purchases and provide digital products.

Data processing occurs for:

  • order processing
  • payment status verification
  • access to digital products

Legal basis:

  • Art. 6(1)(b) GDPR – contract fulfillment.

ThriveCart may process data in third countries (e.g. USA). Transfers are based on Standard Contractual Clauses.

Payment providers via ThriveCart:

  • Stripe Payments Europe Ltd., Ireland
  • PayPal (Europe) S.à r.l., Luxembourg

8.2 Brevo (Newsletter & Free Readings)

We use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) to send our emails and newsletter.

When you sign up for our newsletter or a free reading, we process:

  • first name
  • email address
  • date of birth (for free readings)
  • the Destiny Matrix numbers calculated from your date of birth
  • your personal link to the reading
  • time of sign-up and confirmation, and IP address (as proof of consent)

Registration uses the double opt-in procedure: after signing up, you receive an email asking you to confirm your address. Only after confirmation will you be added to our list.

We use this data to send you your reading and further impulses by email. Brevo evaluates whether emails are opened and which links are clicked, so we can improve our content.

Legal basis:

  • Art. 6(1)(a) GDPR – consent.
  • Art. 6(1)(f) GDPR – legitimate interest in being able to prove your consent (double opt-in record).

You can withdraw your consent at any time using the unsubscribe link included in every email. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Brevo.

8.3 ManyChat (Messenger Automation)

We use ManyChat Inc., USA for automated messaging services (e.g. Instagram or Facebook messages).

Personal data may be processed to deliver automated messages.

Legal basis:

  • Art. 6(1)(a) GDPR – consent.

Data transfers to the USA are based on Standard Contractual Clauses.

8.4 Video Conferencing Tools

For coaching sessions and online meetings we may use:

  • Zoom Video Communications Inc., USA
  • Google Meet (Google Ireland Limited)

Legal basis:

  • Art. 6(1)(b) GDPR – contract fulfillment

Data transfers to third countries occur based on Standard Contractual Clauses.

8.5 Telegram

We may use Telegram groups or channels for community access and program content.

Provider:

Telegram Messenger Inc., Dubai

Telegram may process data outside the EU.

Legal basis:

  • Art. 6(1)(b) GDPR – contract fulfillment.

8.6 Embedded Videos (YouTube / Vimeo)

Videos may be embedded using YouTube or Vimeo.
Videos are loaded only after user consent via a two-click solution.

Legal basis:

  • Art. 6(1)(a) GDPR – consent.

Data may be transferred to the USA based on Standard Contractual Clauses.

8.7 Google Drive

We use Google Drive (Google Ireland Limited) to store and manage documents related to our services, which may include client-related materials.

Data processing occurs for:

  • storing and organizing documents
  • sharing materials relevant to coaching or program delivery

Legal basis:

  • Art. 6(1)(b) GDPR – contract fulfillment.

Data may be transferred to third countries (e.g. the USA) based on Standard Contractual Clauses.

8.8 Destiny Matrix Readings & Calculators

When you use our Destiny Matrix calculators or readings, the date of birth you enter is used to calculate your personal Destiny Matrix energies.

If you request a free reading, you receive a personal link after confirming your email address. This link contains your first name and date of birth in encoded form, so please do not share it publicly. Personal reading pages are excluded from search engines.

Our reading and calculator pages do not use cookies or tracking tools.

Legal basis:

  • Art. 6(1)(a) GDPR – consent.
  1. Cookies

Cookies are small text files stored on your device.

They may be used for:

  • technical functionality
  • website security
  • analytics or marketing

Non-essential cookies are only activated with your consent.
You can delete or block cookies at any time in your browser settings.

  1. International Data Transfers

Some tools used on this website are operated by companies outside the European Union.

When transferring personal data to third countries (e.g. the USA), the transfer is based on Standard Contractual Clauses pursuant to Art. 46 GDPR.

However, a data protection level equivalent to the EU cannot always be guaranteed.

  1. Your Rights

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent (Art. 7 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Responsible supervisory authority in Rhineland-Palatinate:

https://www.datenschutz.rlp.de/

  1. Data Retention

Personal data is stored only as long as necessary for the purposes described in this policy or as required by law.

Typical storage periods include:

  • Contract and billing data: 10 years (due to tax and commercial law requirements)
  • Contact requests: Until the request has been fully processed or legal claims may arise.
  • Newsletter data: Until consent is withdrawn.
  • Free reading data (first name, date of birth, email address, matrix numbers): Until you unsubscribe.
    Proof of double opt-in consent: Up to three years after unsubscribing, to be able to prove that consent was given.
  • Server log files and security logs: From a few days up to several weeks.
  1. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy if legal or technical changes occur.
The current version is always available on this website.

Data Controller

Jana Ceylan Bittmann
c/o POSTFLEX PFX-573-365
Emsdettener Straße 10
48268 Greven
Germany

Email: support@janaceylan.de