Privacy Policy

1. Controller & contact

Controller: Buziness Digital, Nino Pischke, Lange Straße 14, 29451 Dannenberg, Germany

Email: privacy@buziness.digital

2. Scope

This Privacy Policy applies to:

• our main website buziness.digital and the web-based online guide (the “Service”),
• the checkout, order processing, and delivery of the guide via our partner Payhip, including any optional Payhip customer account,
• our newsletter (customers are added through the Payhip checkout; sent via the newsletter service EmailOctopus),
• messages you send us through the contact form or by email.

Note about Russia: We do not offer sales to users located in Russia.

3. What data we process

3.1 Website access (technical data)

• IP address
• Date/time of access
• Requested pages/files
• Referrer URL (if provided by your browser)
• Browser/device information (user agent), operating system
• Error logs

3.2 Guide access via Payhip

• Email address (used by Payhip to deliver your access link and, if you choose to create one, your Payhip customer account)
• Login credentials for your optional Payhip customer account (created and stored by Payhip, not by us)
• Order and access status for the purchased guide (e.g., whether access is active), as provided to us by Payhip
• Support messages you send us

3.3 Purchase and order references

When you purchase access, we store limited order-related references needed to grant and maintain access, such as the order identifier, purchase date/time, and payment status.

3.4 Checkout & payment data (Payhip, PayPal / Stripe)

Checkout for the guide is provided by Payhip (Payhip Limited, 85 Great Portland Street, First Floor, London, United Kingdom, W1W 7LT, company no. 08386910), which acts as our checkout and delivery processor under a data processing agreement. Through the Payhip checkout, we use our own PayPal and/or Stripe account to process payments. When you pay, the relevant payment provider processes payment and transaction information (such as payment method details and transaction identifiers), and Payhip processes order data (such as your email address, the product purchased, order ID, and device/browser information) on our behalf to deliver the guide and to provide checkout functionality, fraud prevention, and support tooling.

We do not store full card details on our servers, and neither Payhip nor PayPal/Stripe share full card details with us. We store limited payment- and order-related references needed to grant and manage access (e.g., payment status, order ID, and transaction identifiers).

Payhip may also process some of this data as an independent controller for its own purposes (for example, fraud prevention, securing its platform, and generating its own aggregate analytics) under Payhip's Privacy Policy.

3.5 Newsletter data

• Name and email address (entered by you at the Payhip checkout and passed on by Payhip, see Section 8)
• Subscription status (subscribed/unsubscribed) and the date you were added to our list
• Data about how you use our emails (for example opens and clicks), if our newsletter service measures them (see Section 8)

No payment details or other order data are passed on to the newsletter service.

3.6 Contact form

• Name, email address, topic and message text (as entered by you)
• Time of sending
• Technical records for spam protection: a signed time stamp, a random form number and a counter of blocked attempts per hour and reason (they contain no names, email addresses or IP addresses)

The form does not store your IP address. As with every page view, your IP address is processed in the server logs (see Section 3.1). Details are in Section 9.

4. Purposes & legal bases (GDPR)

• Contract performance / pre-contractual steps (Art. 6(1)(b) GDPR): account creation, providing access to purchased content, customer support.
• Legal obligations (Art. 6(1)(c) GDPR): accounting/tax obligations (where applicable).
• Legitimate interests (Art. 6(1)(f) GDPR): IT security, fraud prevention, and basic usage/statistics via server logs/GoAccess, handling of contact requests, and direct marketing by email to our customers in countries where the law does not require prior consent (see Section 8).
• Consent (Art. 6(1)(a) GDPR): the newsletter, where you tick the consent checkbox at the Payhip checkout (shown to customers in the EU), and (where applicable) certain regional consent requirements.

5. Hosting & delivery (IONOS & Payhip)

Our main website (buziness.digital) is hosted with IONOS in Germany. In the course of hosting, technical data (including server logs) may be processed to provide hosting, maintenance, and security.

The checkout page and delivery of the online guide are provided by Payhip Limited, a company registered in England and Wales (company no. 08386910), registered office: 85 Great Portland Street, First Floor, London, United Kingdom, W1W 7LT. We have a data processing agreement with Payhip covering the personal data it processes on our behalf (see Sections 3.2 and 3.4). Payhip's own privacy and cookie information is available at payhip.com/privacy and payhip.com/cookies-policy.

6. Guide access via Payhip

Access to the guide is granted after successful purchase through Payhip and is provided as lifetime access (for the lifetime of the Service, see our Terms & Conditions, Section 6). You may optionally create a free Payhip customer account (email address and password) to view all your Payhip purchases in one place; this account is created and stored by Payhip, not by us. We store limited access status and order references needed to grant and maintain access and to prevent abuse (for example, account sharing).

We also process limited technical and usage data that Payhip makes available to us (for example: order timestamps and, where relevant, IP address and device/browser information) to secure access, prevent fraud and abuse (including account sharing or attempts to extract content), and to ensure the stability of the Service. Legal basis: Art. 6(1)(f) GDPR (legitimate interests: security, abuse prevention, and service integrity).

You can request deletion of your Payhip customer account directly with Payhip, or contact us (see Section 1) and we will assist. If we must retain certain order data for legal reasons, we will retain only what is required and restrict further processing.

7. Checkout & payments (Payhip, PayPal / Stripe)

You complete your purchase on a checkout page provided by Payhip. When you click “Pay now,” you are redirected to PayPal or Stripe (depending on the option you choose, both connected to our own accounts) to complete the payment. Depending on the checkout configuration, payment may take place on a provider-hosted page or within an embedded checkout. The payment provider processes the payment and transaction information. Payhip and we receive a confirmation and limited transaction references (for example: payment status, transaction identifier, timestamp) in order to grant access to the Service. For consumers in the EU, UK, USA, or Canada, Payhip acts as reseller/marketplace facilitator (as applicable) and also processes VAT/sales-tax-related data to calculate, collect, and remit the applicable tax on this digital purchase, as described in our Terms & Conditions.

PayPal, Stripe, and Payhip may act as independent controllers for parts of their processing (for example, fraud prevention or securing their own platforms). Please review their privacy information as well: PayPal Privacy Statement, Stripe Privacy Policy, and Payhip Privacy Policy.

Newsletter at checkout: Through the Payhip checkout, we can add customers to our mailing list. If you are located in the EU, Payhip shows a checkbox (“Send me product updates and offers via email”) and passes your name and email address on to our mailing list only if you tick it. For customers in other countries, see Section 8.

8. Newsletter

We send a newsletter with information about updates, content, and offers related to our online guide. There is no sign-up form on our website. Customers are added to our mailing list through the checkout of our partner Payhip: after a purchase, Payhip passes your name and email address to our account at the external newsletter service EmailOctopus (emailoctopus.com), using an interface that we have connected to our Payhip account (new contacts are transferred about every ten minutes). No payment details or other order data are passed on.

EmailOctopus is operated by Three Hearts Digital Ltd (company no. 09897211), 86-90 Paul Street, Shoreditch, London EC2A 4NE, United Kingdom. It processes your name, email address and subscription data on our behalf as a processor (Art. 28 GDPR). The data processing agreement forms part of EmailOctopus's terms of use (Schedule 2) and applies to our account; see also emailoctopus.com/legal/gdpr. EmailOctopus's own privacy policy applies to its processing as an independent controller (for example, for visitors of its own websites).

• Customers in the EU: Payhip shows a checkbox at checkout (“Send me product updates and offers via email”). Only if you tick it, your name and email address are passed on to our mailing list. If you do not tick it, you are not added.
• Customers in other countries: where the law of your country does not require your prior consent for marketing emails to customers, Payhip passes your name and email address on automatically after your purchase, and you are added to our list with the status “subscribed”.
• Legal basis: where you tick the checkbox, your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time with effect for the future. For customers who are added automatically, our legitimate interest in direct marketing to our customers (Art. 6(1)(f) GDPR) together with the rules of your country. You can object at any time (Art. 21(2) GDPR): simply unsubscribe or contact us.
• Who receives marketing emails: only contacts with the status “subscribed” on our list. If you unsubscribe or object, you receive no further marketing emails.
• Records: our newsletter service stores the date on which you were added to the list and your subscription status.
• Statistics: if our provider measures opens or clicks, we use this only where legally permitted and, where required, with your consent. You can object at any time.
• Identification & unsubscribe: each newsletter identifies us as sender and includes an easy unsubscribe option.
• Processing opt-outs: we process unsubscribe requests promptly and keep a minimal suppression record to ensure we respect your choice.
• Provider: EmailOctopus (Three Hearts Digital Ltd, London, United Kingdom; privacy policy). According to EmailOctopus, contact lists and content are stored with Amazon Web Services in the EU (primarily Ireland) and emails are sent from EU servers. Further information: emailoctopus.com/legal/gdpr.

9. Contact

You can contact us by email to support@buziness.digital (or privacy@buziness.digital) or with the contact form on our website (buziness.digital/info/contact.php). We process your name, your email address, the topic you chose, the content of your message, and the technical data that accompanies it (e.g., sender address, timestamp) to handle your request (e.g., answering questions, support, or business inquiries). Providing this information is voluntary, but all fields of the contact form are required because we need them to answer you. Please do not include sensitive information (such as health data) or payment details in your message.

• Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps (e.g., questions about the guide or an order); otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries and in protecting the contact form against spam and misuse).
• Contact form: your entries are sent over an encrypted connection (HTTPS) to our server, which forwards them to our mailbox as an email. The form does not save your message on the website, sets no cookies, and uses no CAPTCHA or other third-party service. Before you send the form, you confirm that you have read this Privacy Policy; this confirmation is not a consent.
• Spam protection: to protect the form against automated misuse, our server checks a hidden form field, the time between opening and sending the form (with a signed time stamp), a random one-time form number, the number of links in your message, whether your text contains code or markup, and the number of messages sent per hour. These checks run on our own server and are not linked to your name, email address or IP address. We also count how many attempts were blocked per hour and reason, without any personal data, to see whether the protection works. If a form submission looks automated, we may refuse to process it.
• Recipients: your message is received by us. Technical service providers (e.g., our hosting and email provider) process it on our behalf only to the extent necessary to operate our mailbox.
• Retention: we delete your request once it has been dealt with and no further questions are expected, unless statutory retention duties apply (see Section 13).
• Email security: unencrypted email can be read by third parties in transit. Please do not send confidential data by regular email.
• No automated decisions: we do not use these data for automated decision-making or profiling.

10. Server logs & GoAccess

We use GoAccess (server-side), an extension of our hosting control panel (Plesk), to create aggregated statistics from server log files (e.g., page views, referrers, browser types, error rates). We do not use third-party advertising pixels or behavioral advertising on our website.

GoAccess runs on our own server and analyzes our server log files locally. We do not share GoAccess analytics data or raw server log files with third-party analytics providers, and GoAccess does not set marketing/analytics cookies. Server log files can contain IP addresses; the evaluation is used only by us for security, stability, and basic statistics.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests: security, stability, and basic statistical evaluation).

11. Cookies / device storage

Our website does not set cookies. It also does not use local storage or similar technologies to store information on your device or to read information from it, apart from the ordinary caching of files by your browser. We do not use advertising, tracking, or analytics cookies, and we do not load third-party content such as social media plugins, embedded videos, or tracking pixels. Fonts and scripts are delivered from our own server. For this reason, we do not use a cookie banner on our own website.

GoAccess is based on server logs and does not rely on analytics cookies (see Section 10).

Links to other services (for example the share buttons for Facebook, X, and WhatsApp, or our social media profiles) only open the respective service after you click them. From that point on, the privacy policy of the respective provider applies.

When you proceed to checkout, you leave our website and land on a page operated by Payhip. Payhip sets its own technically necessary cookies there (for example, to manage your shopping cart/session and for fraud prevention) and, unless disabled in the store's cookie settings, may send a "purchase" event to Google Analytics once checkout is completed. These cookies are governed by Payhip's Cookies Policy. If we add non-essential tracking on our own website in the future, we will request consent and update this policy.

12. International processing / transfers

Our main website is hosted in Germany. Checkout and delivery of the guide are provided by Payhip, based in the United Kingdom; transfers of personal data from the EU/EEA to the UK are covered by the European Commission's UK adequacy decision, so no additional safeguards are required for this specific transfer. In addition, PayPal and Stripe are international services, so payment-related data may be processed in countries outside the EU/EEA/UK (for example, in the United States). Where required, transfers may rely on recognized safeguards (such as Standard Contractual Clauses). Our newsletter service EmailOctopus is based in the United Kingdom (covered by the EU adequacy decision for the UK) and, according to its own information, stores subscriber data with Amazon Web Services in the EU (primarily Ireland). EmailOctopus also uses sub-processors, some of which are located in the United States. According to EmailOctopus, such transfers are based on the UK-US Data Bridge or on the International Data Transfer Agreement / UK Addendum; where EU data protection law applies, additional safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses may apply. You can request further information from us.

13. Retention

We store personal data only as long as necessary for the purposes described in this Privacy Policy and as required by applicable law.

• Payhip account data: stored by Payhip while your optional Payhip customer account exists; please refer to Payhip's Privacy Policy for their retention periods. We separately retain a short buffer of related order references for support and abuse prevention (e.g., 30 days) after purchase or account deletion, then delete or anonymize them unless we must retain them longer.
• Access status / order references: stored to grant and maintain access; removed when no longer needed (for example, after account deletion), unless we must retain records for legal obligations.
• Contact requests (emails and contact form messages): deleted once the request has been handled and no further questions are expected (typically within a few months), unless we must retain them longer for legal reasons (e.g., business correspondence subject to statutory retention periods).
• Contact form (technical records): for the spam protection, the server keeps time stamps and random form numbers; entries older than two hours are no longer used and are removed automatically. Counters of blocked attempts (per hour and reason) are removed automatically after 14 days. None of these records contains names, email addresses or IP addresses.
• Newsletter data: kept in our mailing list while you are subscribed. If you unsubscribe, we stop sending marketing emails and keep only a minimal suppression record so that we respect your choice (see Section 8). You can ask us to delete your data from the list at any time (see Section 14).
• Server logs: typically stored for a limited period (e.g., 30 days) and then deleted or anonymized, unless needed longer for security investigations.
• Payment & order references: we keep limited transaction and order references (e.g., payment status, transaction ID, Payhip order ID) as needed for access provisioning, accounting, and dispute handling. Neither we nor Payhip store full payment card details.
• Legal retention: certain records may be retained longer where we are legally required to do so (e.g., tax/accounting record-keeping obligations).

14. Your rights

If you are in the EU/EEA, you have rights under the GDPR, including the right of access, rectification, erasure, restriction, data portability, and the right to object. Where processing is based on consent, you can withdraw consent at any time.

To exercise your rights, contact us at privacy@buziness.digital.

15. Supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

16. Updates

We may update this Privacy Policy from time to time. The current version is always published on this page.

17. Language versions

This Privacy Policy is currently available in English only. Should we provide translations in the future, the English version shall prevail in case of differences, unless mandatory local law requires otherwise.

18. Additional regional information

The following information is provided at a high level for some jurisdictions where we may have users. This section does not replace local legal advice.

18.1 United States

The United States has sector and state-specific privacy laws. If a state privacy law applies to us (for example, California’s CCPA when thresholds are met), you may have additional rights and disclosures. You can contact us using Section 1 to submit requests.

For marketing emails, we aim to comply with the CAN-SPAM Act (including clear opt-out, identifying us as the sender, and honoring opt-out requests).

18.2 Canada

If you are located in Canada, Canada’s Anti-Spam Legislation (CASL) may apply to commercial electronic messages. Our newsletter is sent based on your consent or on an existing business relationship with you as a customer, includes identification information, and provides an unsubscribe mechanism.

18.3 Brazil (LGPD)

If you are located in Brazil, you may have rights under LGPD. You can request assistance using the contact details in Section 1.

18.4 China (PIPL)

If you are located in the People’s Republic of China, China’s Personal Information Protection Law (PIPL) and related rules may apply, including rules on cross-border transfers. Because the Service is hosted in Germany and the United Kingdom (via Payhip) and payments are processed by international providers, personal information may be processed outside China. Where required, we will seek any necessary consents and provide the disclosures required by applicable rules (including information about overseas recipients and how to exercise rights).

China representative: We have not appointed a representative in China at this time. If applicable law requires us to appoint one, we will update this section with the representative’s details.

18.5 Vietnam

If you are located in Vietnam, Vietnam’s personal data protection rules may apply, including rules regarding cross-border processing. Because the Service is hosted in Germany and the United Kingdom (via Payhip) and payments are processed by international providers, personal information may be processed outside Vietnam. Where required, we will collect appropriate consent and maintain any documentation required for cross-border processing.

18.6 Japan

If you are located in Japan, certain disclosures may apply to overseas transfers under Japanese rules. For checkout, delivery, and payment processing and related transfers, please also review the privacy information of Payhip, PayPal, and Stripe.

18.7 Thailand

If you are located in Thailand, you may have rights under Thailand’s PDPA. Transfers outside Thailand may be subject to additional conditions depending on the legal basis and provider.

18.8 Indonesia

If you are located in Indonesia, additional requirements can apply to international data transfers and processing. You can contact us for details about our processing and transfers.

18.9 Philippines

If you are located in the Philippines, processing may be subject to the Philippines Data Privacy Act and guidance of the National Privacy Commission.

18.10 Australia

If you are located in Australia, Australian anti-spam rules require your consent (express, or inferred from our business relationship, for example because you bought from us) and a functional unsubscribe option for marketing messages. Our newsletter includes an unsubscribe option.

18.11 United Kingdom

If you are located in the United Kingdom, cookie and similar technology rules are governed by PECR alongside UK GDPR. If we add non-essential cookies or tracking, we will request consent and update this policy.

For marketing emails, PECR applies as well: we send them on the basis of your consent or, where PECR allows it, the so-called soft opt-in for existing customers, and every email contains an unsubscribe option.