EN | DE

Privacy Policy

Last updated: 25 February 2026

1. Responsible Party

Ivica Kopcalija
Warnemünder Str. 7
13059 Berlin, Germany
Email: [email protected]

2. Data We Collect

When you place an order for a personalized meal plan through our order form, we collect the following information:

  • Name and email address
  • Age, weight (kg), height (cm), body fat percentage (optional)
  • Fitness goal, activity level, diet preference, diet mode, protein preference
  • Billing information (processed by Stripe — we do not store card details)
  • IP address and server log data (automatically collected when you visit the site)

3. Purpose of Processing

We use your data exclusively for the following purposes:

  • Creating and delivering your personalized meal plan (contract fulfillment)
  • Processing your payment through Stripe
  • Communicating about your order (confirmation email, follow-up questions)
  • Meeting legal record-keeping obligations (tax and commercial law)

Legal basis: Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest in business operations).

4. Payment Processing (Stripe)

We use Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland) as our payment processor. When you place an order, you are redirected to a secure Stripe Checkout page.

Stripe processes your payment data (card number, expiry date, CVC) as an independent data controller. We only receive confirmation that the payment was successful — no card data is stored on our servers.

More information: Stripe Privacy Policy.

5. Data Retention

  • Invoice and contract data (name, email, payment confirmation): retained for up to 10 years as required by German tax law (§ 147 AO, § 257 HGB).
  • Body-related data (weight, height, age, body fat, activity level): deleted no later than 30 days after your plan is delivered, unless a legal retention obligation applies.

6. Your Rights (GDPR)

You have the right to:

  • Access the personal data we hold about you (Art. 15 GDPR)
  • Correction of inaccurate data (Art. 16 GDPR)
  • Deletion of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence.

7. Contact

For any privacy-related questions, please contact us at:
[email protected]