kerstin.bieberfit.shop

Privacy policy

As at 7 September 2026
This is a translation for convenience. The German version is the authoritative one.

This website consists of static pages with text and images. It sets no cookies, embeds no fonts, maps, videos or social media components from third-party servers, and carries out no audience measurement. What is described below is only what actually happens.

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is:

Controller Kerstin Bieber
Nizzastraße 9, 90451 Nürnberg, Germany
kerstin@bieber.onl
Legal notice

No data protection officer has been appointed; the conditions of § 38 BDSG are not met.

2. Visiting the website (server log files)

When you open a page, your browser transmits technically necessary data which the server logs:

Purpose: delivering the page, operational security, and being able to trace faults and attempted attacks.
Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in secure and trouble-free operation.
Retention period: 7 days. The logs are then deleted automatically; the period is configured in the web server and expires without anyone having to act.

3. Hosting

The website is operated at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. Hetzner processes the data listed above exclusively on my behalf; a data processing agreement under Art. 28 GDPR is in place.

4. Encryption

The connection is encrypted with TLS. The certificate is issued automatically via Let’s Encrypt (Internet Security Research Group, USA). Only the domain name is transmitted in the process, no visitor data.

5. Fonts

The Inter typeface used here is stored on the same server as this page and delivered from there. There is no connection to a third-party font service and no IP address is transmitted to one.

6. Contact by email

If you write to the address given above, I process your details in order to handle your enquiry.

Legal basis: Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR.
Retention period: until the enquiry has been dealt with conclusively, at most 24 months; statutory retention obligations remain unaffected.

The mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur – likewise as a processor.

7. Contact form

Only the fields you fill in are transmitted: name, email address and message, plus the subject you select. The details are not stored on this website but delivered directly to me as an email. From that point on, the same applies as under number 6.

So that the form cannot be misused for bulk messages, the sending service keeps the IP address of the submitting connection in memory for one hour in order to limit the number of submissions. It is never written to any storage medium and is gone after an hour – at the latest when the service restarts.

Purpose: receiving and answering your message, and preventing automated bulk submissions.
Legal basis: Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR; for abuse prevention Art. 6 (1) (f) GDPR.
Recipients: delivery runs through the mailbox at IONOS SE (see number 6). There are no other recipients – in particular, no third-party form service and no third-party spam protection is embedded.
Retention period: as under number 6.

8. Assistant (chat)

The assistant at the bottom right runs entirely in your browser. It consists of a fixed list of questions and answers together with product data from the FitLine catalogue. There is no language model behind it, there is no connection to a server, and what you type there does not leave your device. Nothing is stored and nothing is logged; when you close the page, the conversation is gone.

Only when you click a link to WhatsApp or to the contact form inside the assistant does what is described under number 7 or number 9 apply.

9. WhatsApp

There is a link to WhatsApp on this site. No component and no tracking pixel is embedded – simply opening this page tells WhatsApp nothing.

If you click the link, WhatsApp opens with a prepared text. From that moment WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, processes your data under its own responsibility and its own terms. A message you send me there then sits on your device and on mine; I delete it once the enquiry has been dealt with.

10. Forwarding to the FitLine shop

The „Shop“ buttons lead to the partner shop of PM-International AG, An der Hofweide 17, 67346 Speyer. No components of that provider are embedded; a request only takes place when you click.

The address contains the parameter sponsor=22284542. It attributes the visit and any later order to me as a distribution partner – that is the basis of my commission. No information about you is transmitted in the process, only my partner number. PM-International is responsible for everything that happens in the shop afterwards; their privacy notice applies there.

11. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). A message to the address given above is enough.

Independently of this, you may lodge a complaint with a supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.

12. What is not here

No newsletter, no analytics or advertising services, no embedded fonts or videos, no cookies, no consent banner – because there is nothing to consent to. No transfer to third countries beyond the cases named. Should any such processing be added later, this text has to be extended beforehand – not afterwards.