Privacy Policy
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Authentic Athletes
Kristin Behr
Am Bild 5
97941 Tauberbischofsheim
Germany
Email: krissibehr@authenticathletes.de
2. General information on data processing
2.1 Scope of processing
We process personal data only to the extent necessary to provide and operate this website, respond to enquiries and provide our services.
Where processing requires consent, Art. 6(1)(a) GDPR serves as the legal basis.
Where processing is necessary for the performance of a contract or for pre-contractual measures, Art. 6(1)(b) GDPR serves as the legal basis.
Where processing is necessary to protect our legitimate interests or those of a third party, Art. 6(1)(f) GDPR serves as the legal basis, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests.
2.2 Storage period
Personal data is deleted as soon as the purpose for which it was collected no longer applies, unless statutory retention obligations require longer storage.
3. Hosting with Squarespace
This website is hosted by Squarespace.
The provider for users based in the European Economic Area is:
Squarespace Ireland Ltd.
2nd Floor, The Anchorage
17–19 Sir John Rogerson's Quay
Dublin 2
Ireland
In connection with the provision of the website, data may also be processed by Squarespace, Inc. in the United States.
When accessing the website, technical information may be processed, including in particular:
IP address
browser type and version
operating system
date and time of access
requested pages or files
referrer URL
This processing is necessary to provide the website securely and reliably.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
Squarespace provides a Data Processing Addendum governing processing carried out on behalf of its customers.
Further information can be found in Squarespace's Privacy Policy.
4. Contact form and email contact
This website provides a contact form through which visitors can contact Authentic Athletes electronically.
When using the contact form, the information entered by the user is transmitted and processed. Depending on the information provided, this may include:
name
email address
message
date and time of submission
The data is processed solely for the purpose of responding to and handling the respective enquiry.
The technical processing of the contact form is carried out through Squarespace.
Alternatively, visitors may contact us directly via email. In this case, the personal data transmitted with the email is processed for the purpose of responding to the enquiry.
Legal basis: Art. 6(1)(f) GDPR. Where the enquiry relates to a potential or existing contractual relationship, Art. 6(1)(b) GDPR also applies.
Data is deleted when it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply.
5. Cookies and consent management
This website uses cookies and similar technologies.
Some cookies are technically necessary for the operation and security of the website. These may be used without separate consent where legally permitted.
Other cookies, particularly analytics or performance cookies, are only used where the visitor has given consent through the cookie consent banner.
Visitors can accept or reject non-essential cookies through the cookie banner and may change or withdraw their consent at any time.
Legal basis for consent-based processing: Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.
Where technically necessary cookies or similar technologies are used, processing is based on the applicable statutory provisions and, insofar as personal data is processed, Art. 6(1)(f) GDPR.
6. Squarespace Analytics
This website may use Squarespace Analytics to obtain information about how visitors use the website.
Depending on the visitor's consent settings, this may include information such as:
pages viewed
approximate visitor source
device and browser information
visits and interactions with the website
Where Squarespace Analytics uses non-essential cookies or similar technologies, these are only activated after the visitor has given consent via the cookie banner.
Legal basis: Art. 6(1)(a) GDPR.
Consent can be withdrawn at any time through the website's cookie settings.
Further information about Squarespace's processing of personal data can be found in Squarespace's Privacy Policy.
7. External links and social media
This website may contain links to external websites and social media platforms, including Instagram.
When visitors follow such a link, they leave this website. The respective third-party provider is responsible for any processing of personal data that takes place after accessing its website or platform.
No personal data is transmitted to these providers merely by displaying a standard external link on this website.
8. Rights of data subjects
If personal data relating to you is processed, you have the following rights under the GDPR, subject to the relevant statutory requirements:
Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure, Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR
Right to object, Art. 21 GDPR
Right to withdraw consent, Art. 7(3) GDPR
Right to lodge a complaint with a competent supervisory authority, Art. 77 GDPR
To exercise your rights, you can contact:
krissibehr@auhenticathletes.de
Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential information, this website uses SSL/TLS encryption.
An encrypted connection can generally be identified by the use of “https://” in the browser address bar and the corresponding security indicator in the browser.
10. Changes to this Privacy Policy
This Privacy Policy is current as of September 2026.
We may update this Privacy Policy if our website, services, technical infrastructure or applicable legal requirements change.