Dr. Ulrich Winkler ("we", "us", or "our") operates the website drulrichwinkler.com. We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, why we collect it, how we process it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Spanish law.

1. Data Controller

The controller responsible for data processing on this website is:

Dr. Ulrich Winkler
Carrer Menhir No. 1, Casa E6B
07160 Camp de Mar, Spain
Email: impressum@drulrichwinkler.com

2. Data We Collect

We only collect personal data that you voluntarily provide to us through forms on this website. We do not use cookies, tracking pixels, analytics services, or any automated profiling.

2.1 Contact & Inquiry Forms

When you submit a contact or inquiry form, we may collect:

• Name (title, first name, middle name, last name)
• Email address
• Phone number (optional)
• Country
• Organisation and role (optional)
• Your message and subject line
• The program you are inquiring about

2.2 Event Registration Forms

When you register for an event (e.g. UNLEASHED), we additionally collect:

• Postal address (street, city, postal code, country)
• Billing information (billing name, billing address, city, postal code, country)
• Tax identification number (optional)
• Referral source (optional)
• Promotional code (optional)

2.3 Server Logs

When you visit our website, our hosting provider may automatically collect technical data such as your IP address, browser type, operating system, and the date and time of your visit. This data is used solely for ensuring the security and functionality of the website and is not combined with other data sources.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

4. Third-Party Service Providers

We use a limited number of trusted third-party services to operate this website. Each provider processes data only as necessary and is bound by their own privacy obligations.

4.1 Stripe (Payment Processing)

When you register for a paid event, your payment is processed by Stripe, Inc. We do not store your credit card or bank details on our servers. Stripe processes your payment data under their own privacy policy.

Stripe Privacy Policy: https://stripe.com/privacy

4.2 Google (Data Storage & Email)

Submitted form data is stored in Google Sheets, and email notifications are sent via Gmail. These services are provided by Google LLC and are subject to Google's privacy practices. Where data is transferred outside the EU/EEA, it is protected by the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

Google Privacy Policy: https://policies.google.com/privacy

5. Data Sharing

We do not sell, rent, or trade your personal data. We do not share your data with third parties for marketing purposes. Data is only shared with the service providers described in Section 4, solely for the purposes stated in this policy.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Inquiries: Until your inquiry has been resolved, and for a reasonable period thereafter for follow-up purposes.
• Registrations and payments: For the duration required by applicable tax and commercial law (typically up to 10 years for financial records under Spanish law).
• Server logs: Automatically deleted by our hosting provider according to their retention schedule.

You may request deletion of your data at any time, subject to legal retention obligations.

7. Your Rights Under the GDPR

As a data subject, you have the following rights under the GDPR. You may exercise these rights at any time by contacting us at impressum@drulrichwinkler.com.

• Right of access (Art. 15) — obtain a copy of the data we hold about you
• Right to rectification (Art. 16) — correct inaccurate or incomplete data
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18) — limit how we process your data
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Spain is the Agencia Española de Protección de Datos (AEPD).

8. Cookies and Tracking

This website does not use cookies for tracking, advertising, or analytics purposes. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology.

Essential technical cookies may be set by our hosting infrastructure to ensure correct website functionality. These do not contain personal data and cannot be used to identify you.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is encrypted using TLS/SSL.

10. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "last updated" date. We encourage you to review this page periodically.

12. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Dr. Ulrich Winkler
Carrer Menhir No. 1, Casa E6B
07160 Camp de Mar, Spain
Email: impressum@drulrichwinkler.com