Privacy Policy

1. Controller

Maximilian Sperl
Wilhelmstraße 1e
79098 Freiburg
Germany
Email: max.sperl@googlemail.com
Phone: +49 (0) 15158714340

2. General information

I only process personal data to the extent necessary to provide a functioning website, respond to inquiries and deliver my coaching. The legal bases are the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting by Squarespace

This website is hosted by Squarespace. The provider for users in the EU is Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland. When you visit the site, data is processed automatically (e.g. IP address, date and time, page visited, browser, operating system). This is necessary to deliver the website and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Data may also be transferred to Squarespace, Inc. in the USA.

4. Cookies and consent

I use essential cookies so that the website works (legal basis: Section 25(2) TDDDG, Art. 6(1)(f) GDPR). All other cookies (e.g. analytics, marketing) are only set if you consent via the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via "Cookie settings". Apart from Squarespace's built-in visitor statistics, which are only activated with your consent, I do not use any analytics or marketing tools.

5. Contact form and email

If you contact me via the contact form or by email, I process your details (name, email, subject, message) in order to respond to your inquiry. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (general inquiries). The data is deleted once the inquiry has been dealt with, unless statutory retention obligations apply. Form submissions are stored by Squarespace and forwarded to me by email.

To protect against spam, the forms use Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the process, data such as your IP address and usage behaviour is transmitted to Google, possibly also to the USA. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the forms from spam and abuse).

6. Coaching inquiry

Through the coaching inquiry form, I ask for the information I need to assess whether and how I can coach you: name, email, preferred package, current performance level, target race and date, weekly training time, preferred start date and, optionally, a message. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and your consent via the privacy checkbox (Art. 6(1)(a) GDPR), which you can withdraw at any time by email.

I deliberately do not ask for health data (e.g. injuries, pre-existing conditions) in the form, and I ask you not to enter any there. We will only talk about this in the intro call or during the coaching (see section 7).

If no coaching agreement is concluded, I will delete your inquiry after 6 months at the latest.

7. Delivering the coaching

During the coaching, I process training and performance data (e.g. heart rate, power, pace, training volume) and, where applicable, health information if you share it with me. Legal basis: the coaching contract (Art. 6(1)(b) GDPR) and, for health data, your consent (Art. 9(2)(a) GDPR). For training planning and feedback I use TrainingPeaks, a service of TrainingPeaks, LLC, Boulder, Colorado, USA. Your training data is stored there and therefore also processed in the USA. Legal basis: Art. 6(1)(b) GDPR.

8. External links (Instagram, Spotify, Google Photos, partners)

This website links to Instagram, Spotify, Google Photos and partner websites. These are simple links: data is only transferred once you click on them. The privacy policy of the respective provider then applies.

9. Embedded YouTube videos

Some pages contain embedded videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The videos are embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com). According to YouTube, no cookies are stored in this mode until you play a video. However, when the page loads, a connection to Google's servers is established and data such as your IP address is transmitted to Google, possibly also to the USA. When you play a video, YouTube may store cookies and collect further usage data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation) or, where required, your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR), as well as the right to withdraw consent you have given (Art. 7(3) GDPR). To exercise these rights, simply write to max.sperl@googlemail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

11. Last updated

Last updated: October 2026