Privacy

Privacy Policy.

Last updated: DD MMM 2026 — please fill in

Template for legal review. This document reflects the current technical setup of this website (Netlify Hosting, Netlify Forms, Google Fonts, Calendly, Gumroad, Substack). Please have it reviewed by a lawyer familiar with GDPR before going live. All highlighted spots are placeholders and need to be filled in individually.

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

Cathy Wietelmann
Velper Esch 23, 49492 Westerkappeln, Germany — please verify
Email: hello@theclearingbycathy.com

For further contact information, see the Imprint.

2. General Information

The protection of your personal data is important to me. I process personal data exclusively on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This privacy policy informs you about the type, scope, and purpose of the processing of personal data on this website.

3. Hosting

This website is hosted with Netlify:

Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.

When accessing this website, technical data is automatically processed (server log files), including:

IP address (truncated)
Date and time of access
Browser type and operating system
Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website).

Transfer to third countries: Netlify processes data in the USA. A Data Processing Agreement (DPA) is in place with Netlify, and Netlify is certified under the EU-US Data Privacy Framework.

4. Contact via Email

If you contact me via email, your information will be stored for the purpose of processing your inquiry and for any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).

5. Free Workbook & Sunday Letter (Newsletter)

If you sign up for the workbook or the Sunday Letter, I process the following data:

Email address
Time of registration (form timestamp)
Consent (consent checkbox)

Purpose: Sending the workbook as a PDF download link and regular delivery of the Sunday Letter.

Legal basis: Art. 6(1)(a) GDPR (consent).

Storage duration: As long as you are subscribed to the newsletter. After unsubscribing, your data will be deleted, unless there are statutory retention obligations.

Withdrawal: You can withdraw your consent at any time. Every newsletter email contains an unsubscribe link. Alternatively, contact hello@theclearingbycathy.com.

Note: Currently, form submissions are processed via Netlify Forms. A dedicated email service for regular newsletter delivery is planned. Once a newsletter provider (e.g. Substack, ConvertKit, MailerLite) is in use, it needs to be added here.

6. Forms (Netlify Forms)

The forms on this website (workbook signup, Sunday Letter signup) are processed by Netlify Forms. Your input is stored on Netlify's servers.

Legal basis: Art. 6(1)(a) GDPR (consent).

For more information, see Netlify's privacy policy: https://www.netlify.com/privacy/

7. Discovery Calls (Calendly)

For free discovery calls, I use Calendly:

Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, GA 30363, USA.

When you book an appointment, your name, email address, and selected time slot are transmitted to Calendly.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

Transfer to third countries: Calendly processes data in the USA and is certified under the EU-US Data Privacy Framework.

Calendly privacy policy: https://calendly.com/privacy

8. Payment Processing & Digital Products (Gumroad)

For selling digital products (posters, workbooks, other downloads), I use Gumroad:

Gumroad, Inc., 548 Market St., PMB 63862, San Francisco, CA 94104-5401, USA.

When you purchase a product via a shop link, you are redirected to Gumroad. The following data is processed there:

Name (if you provide it)
Email address
Payment information (credit card, PayPal, SEPA — depending on your choice)
IP address and technical connection data
Billing address and VAT-relevant information where applicable

Purpose: Processing of the purchase contract, provision of the digital product, legally required invoicing.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal obligations).

Transfer to third countries: Gumroad processes data in the USA and is certified under the EU-US Data Privacy Framework. For sales to EU customers, Gumroad legally acts as a reseller — VAT is remitted directly by Gumroad in the respective EU country.

Gumroad privacy policy: https://gumroad.com/privacy

9. Substack (Sunday Letter Archive)

This website links to my Substack profile. If you follow the link and subscribe there, Substack's privacy policy applies.

Substack, Inc., 548 Market St., PMB 72296, San Francisco, CA 94104-5401, USA.

Substack privacy policy: https://substack.com/privacy

10. Google Fonts

This website uses Google Fonts (Cormorant Garamond, Inter) for consistent typography. The fonts are loaded from Google's servers when the site is accessed. Your IP address is transmitted to Google in the process.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a visually consistent presentation of the website).

Google privacy policy: https://policies.google.com/privacy

Optional / stricter GDPR compliance: If preferred, host fonts locally (self-hosted) instead of loading from Google. This eliminates data transfer to Google entirely.

11. Cookies

This website does not use tracking cookies and no web analytics tool (no Google Analytics, no Meta Pixel, no Hotjar).

If cookies or analytics tools are added in the future, a cookie consent banner will be required and this section must be updated.

12. Links to Social Networks

This website contains links to Instagram (Meta Platforms Ireland Limited) and Substack. These are plain text links — no social media plugins are embedded. Only when you click one of these links are you redirected, at which point the respective provider's privacy policy applies.

13. Your Rights as a Data Subject

You have the right to:

Request information about your data stored by me (Art. 15 GDPR)
Request the correction of your data stored by me (Art. 16 GDPR)
Request the deletion of your data stored by me (Art. 17 GDPR)
Request restriction of the processing of your data (Art. 18 GDPR)
Receive your data in a structured format — data portability (Art. 20 GDPR)
Withdraw a previously given consent at any time (Art. 7(3) GDPR)
Object to the processing of your data (Art. 21 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

For any of the above, contact me at hello@theclearingbycathy.com.

14. Supervisory Authority

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

Jurisdiction depends on the registered address. Please verify or adjust if the address is not in North Rhine-Westphalia.

15. Changes to This Privacy Policy

This privacy policy will be adapted to reflect legal or technical changes. The most current version will always be available on this page.