1. Data Controller

The data controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

​

Dragoon Gecko – Rebecca Büchner

c/o Online-Impressum.de #4775
Europaring 90
53757 Sankt Augustin
Germany

Email: dragoongecko@gmail.com
Contact: Contact form available on this website

​

2. Scope of this Privacy Policy

This Privacy Policy explains the nature, scope and purpose of the processing of personal data when using this website, including:

• visiting the website

• registering for a members area

• posting blog comments

• contacting us

• purchasing digital products

• booking services

• subscribing to newsletters

Personal data is processed exclusively in accordance with the GDPR and applicable German data protection laws.

​

3. Legal Bases for Processing (Art. 6 GDPR)

Personal data is processed on the following legal bases:

• Art. 6(1)(a) GDPR – consent

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures

• Art. 6(1)(c) GDPR – compliance with legal obligations

• Art. 6(1)(f) GDPR – legitimate interests (e.g. website security, prevention of misuse, improvement of services)​

​

4. Hosting & Website Infrastructure (Wix)

This website is hosted by Wix.com Ltd.

Wix processes personal data on our behalf as a data processor under a Data Processing Agreement (Art. 28 GDPR).

Data processed by Wix may include:

• IP address

• browser and device information

• date and time of access

• usage data

Wix operates servers in the European Union, Israel and the United States.
International data transfers are safeguarded by EU adequacy decisions and/or Standard Contractual Clauses (SCCs).

Where providers are certified under the EU-U.S. Data Privacy Framework,
data transfers are additionally based on adequacy decisions.
​

5. SSL / TLS Encryption

This website uses SSL/TLS encryption to protect the transmission of confidential data.
Encrypted connections can be identified by the “https://” prefix in the browser address bar.

​

6. Server Log Files

When visiting the website, the hosting provider automatically collects server log files, including:

• IP address

• date and time of access

• browser type and version

• operating system

• referrer URL

This data is processed for security and technical stability and is not merged with other data sources.

​

7. Cookies & Consent Management

This website uses cookies.

Technically necessary cookies ensure basic website functionality
(e.g. page navigation, shopping cart functions, login areas).

The legal basis for the use of technically necessary cookies
is Art. 6(1)(f) GDPR (legitimate interest in secure and functional website operation).

Analytics and marketing cookies are only used with your explicit consent.

The legal basis for the use of such cookies is Art. 6(1)(a) GDPR (consent).

Consent is obtained via a cookie banner and can be changed
or withdrawn at any time via the Cookie Settings in the website footer.
 

​

8. Members Area / User Registration

Users may register for a members area.
During registration and use, we process:

• name or username

• email address

• login credentials

• account-related activity

Data is processed solely to provide the members area and is deleted upon account deletion unless statutory retention periods apply.

​

9. Blog Comments

When users post comments on blog articles, we process:

• name or nickname

• email address

• IP address

• comment content

This data is used to display comments, prevent misuse and moderate content.
Comments remain stored unless deletion is requested or legally required.

​

10. Contact Forms & Inquiries

When contacting us via forms (including animal inquiries and coaching inquiries), we process the information provided, including uploaded files if applicable.

Data is processed exclusively to respond to your inquiry and is deleted once the purpose has been fulfilled, unless legal retention obligations apply.

The legal basis for processing is Art. 6(1)(b) GDPR
(pre-contractual measures) or Art. 6(1)(f) GDPR
(legitimate interest in responding to inquiries).

​

11. Communication via Email & Messaging Services

If you contact us via email or messaging services (e.g. WhatsApp Provider: Meta Platforms Ireland Ltd.
), personal data is processed solely to handle your inquiry.

Please note that communication via third-party messaging services may involve data processing outside the EU under the responsibility of the respective provider.

​

12. Newsletter & Email Marketing

If you subscribe to our newsletter:

• registration takes place via double opt-in

• your email address and subscription data are stored

You may unsubscribe at any time using the unsubscribe link in each email.

Newsletter services may process data in third countries (e.g. USA) under appropriate safeguards.

Newsletter tracking (open rates, click rates)
is carried out based on your consent pursuant to Art. 6(1)(a) GDPR.

​

13. Automated Email Processing

We use automated email workflows (e.g. confirmations, follow-ups or informational emails).

These processes do not involve automated decision-making within the meaning of Art. 22 GDPR and have no legal or similarly significant effects on users.

​

14. Analytics & Tracking Tools

Subject to consent, we use analytics and marketing tools, including:

• Wix Analytics

• Google Analytics

• Meta (Facebook) Pixel

These tools analyze website usage to improve content and services.
Where required, IP anonymization and consent-based activation are applied.

​

15. Embedded Third-Party Content

Our website may embed content from third parties, including:

• Instagram

• YouTube

• Google Maps

• social media buttons

When such content is accessed, personal data may be transmitted to the respective providers.
This occurs only after user interaction or consent where legally required.

​

16. Online Shop, Digital Products & Payments

When purchasing digital products or booking services, personal data required for contract execution is processed.

Payment processing is carried out exclusively by external providers, including:

• PayPal

• Wise

• SumUp

We do not store payment or credit card data.

​

Payment Processing via PayPal

If you choose PayPal as your payment method, payment processing is carried out by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.  
22–24 Boulevard Royal  
L-2449 Luxembourg

When making a payment via PayPal, personal data required for the payment transaction is transmitted to PayPal.

This may include in particular:

• Name  
• Billing address  
• Email address  
• Payment amount  
• Transaction details  
• IP address  
• Device and usage data  

The processing of this data is carried out for the purpose of payment execution in accordance with Art. 6(1)(b) GDPR (performance of a contract).

PayPal may also process the transmitted data for fraud prevention, risk assessment and identity verification purposes on the basis of its own legitimate interests pursuant to Art. 6(1)(f) GDPR.

Please note that PayPal may transfer personal data to affiliated companies and service providers in third countries, including the United States.

Such data transfers are safeguarded by:

• EU adequacy decisions, where applicable  
• Standard Contractual Clauses (SCCs)  

Further information on data processing by PayPal can be found in PayPal’s Privacy Policy:  
https://www.paypal.com/privacy
 

​

Payment Processing (Wise)

Payments may also be processed via Wise Payments Ltd.,
6th Floor, The Tea Building,
56 Shoreditch High Street,
London, E1 6JJ, United Kingdom.

Wise processes payment data on its own responsibility
in accordance with applicable data protection laws.

​

Payment Processing (SumUp)

Card payments at events or trade fairs may be processed via
SumUp Limited, Block 8, Harcourt Centre,
Charlotte Way, Dublin 2, Ireland.

SumUp processes payment data on its own responsibility.
We do not store card data.
 

​

17. International Data Transfers

Some service providers process data in third countries (e.g. USA).
Such transfers are safeguarded by:

• EU adequacy decisions

• Standard Contractual Clauses (SCCs)

• ​

18. Planned Use of Artificial Intelligence (AI)

In the future, AI-supported tools may be used to improve customer communication and services.

At present, no automated decision-making with legal or similarly significant effects takes place.
Any future use of AI will comply fully with GDPR requirements.

​

19. Data Retention & Deletion

Personal data is stored only for as long as necessary to fulfill the respective processing purpose or to comply with statutory retention obligations.

In particular:

• Contract and order data are stored for the duration of the contractual relationship and thereafter in accordance with statutory retention periods under tax and commercial law (generally 6–10 years).

• Inquiry and correspondence data are stored for up to 3 years after completion of the request, unless longer retention is required for legal defense.

• Newsletter data is stored until consent is withdrawn or the subscription is cancelled.

​

Newsletter & Email Marketing (Mailchimp)

For sending newsletters and email marketing, we use the service provider
Intuit Mailchimp, 405 N Angier Ave NE, Atlanta, GA 30308, USA.

Mailchimp processes personal data (e.g. email address, usage data, open rates, click behavior)
on our behalf under a Data Processing Agreement pursuant to Art. 28 GDPR.

Data processing may take place on servers in the United States.
International data transfers are safeguarded by Standard Contractual Clauses (SCCs)
and, where applicable, adequacy decisions.

You may unsubscribe from the newsletter at any time via the unsubscribe link
in each email.

​

• Members area account data is stored for the duration of the user account and deleted upon account deletion, unless statutory retention obligations apply.

After expiration of the respective retention periods, the data will be deleted or anonymized.
 

20. Rights of Data Subjects

You have the right to:

• access your personal data

• rectification of inaccurate data

• erasure of data

• restriction of processing

• data portability

• object to processing

• withdraw consent at any time

Requests may be sent to: dragoongecko@gmail.com

​

21. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU member state of your habitual residence or place of alleged infringement.

​

Competent supervisory authority:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

​

22. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal or technical changes.
The current version published on this website shall apply.