Privacy Policy

This Privacy Policy explains which personal data we process when you use kravmaga-online.com, for what purposes, on which legal basis, and which rights you have.

1. Controller

2. Hosting and Server Log Files

Our website and learning platform are hosted on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit our website, the server automatically records technical data that your browser transmits: IP address, date and time of the request, requested page, referrer URL, browser type and version, and operating system.

This data is processed to deliver the website and to ensure its stability and security (legal basis: Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of our website). Log files are deleted as soon as they are no longer required for these purposes. Hetzner processes this data on our behalf on the basis of a data processing agreement (Art. 28 GDPR).

3. Cookies and Consent

We use technically necessary cookies that are required to operate the website, e.g. to keep you logged in, to protect forms against misuse, and to store your cookie settings. The legal basis is § 25(2) TDDDG and Art. 6(1)(b) and (f) GDPR.

Analytics cookies (Google Analytics, see section 8) are only set if you have given your consent in our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time with effect for the future via the cookie settings button at the bottom left of every page.

4. Contact Form and Email

If you contact us via our contact form or by email, we process the data you provide (e.g. name, email address, message) to answer your request. Messages from the contact form are sent to our mailbox info@kravmaga-online.com. Our mailboxes are hosted by Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany, on the basis of a data processing agreement (Art. 28 GDPR).

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or to pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries). We delete your data once your request has been fully processed, unless statutory retention obligations apply.

5. Purchases via Paddle

Our courses are sold through our reseller and Merchant of Record Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom ("Paddle"). When you start a purchase, the Paddle checkout is loaded and the data you enter there (e.g. name, email address, country, billing and payment details) is processed by Paddle under its own responsibility to handle payment, invoicing, taxes, fraud prevention and refunds. Before opening the checkout, we also pass on the name you entered and the selected course to Paddle. Further information can be found in Paddle's Privacy Policy. Data transfers to the United Kingdom are based on an adequacy decision of the European Commission.

After a successful purchase, Paddle provides us with your name, email address and the transaction details (course, amount, currency, date). We use this data to create your user account, activate your course access and process withdrawals and refunds (legal basis: Art. 6(1)(b) GDPR). We store transaction data for as long as required by commercial and tax retention obligations (Art. 6(1)(c) GDPR).

6. User Account and Course Participation

To provide your course, we process your account data (name, email address, password in encrypted form), your course progress, the homework videos you upload, and the feedback videos our trainers create for you. Homework and feedback videos are only accessible to you and to our trainers.

Uploaded videos are stored in an object storage of Hetzner Online GmbH (address see section 2) on the basis of a data processing agreement (Art. 28 GDPR).

When you upload a homework video, we receive a notification at info@kravmaga-online.com. When a trainer uploads a feedback video for you, you are notified by email. You will also receive emails that are necessary for your account, e.g. your access data or password reset links.

The legal basis is Art. 6(1)(b) GDPR (performance of the contract). Providing this data is necessary to participate in a course; without it, we cannot provide the course. We store your account and course data, including your videos, for as long as your user account exists. You can request deletion of your account at any time; afterwards, your data will be deleted unless statutory retention obligations apply.

7. Promotional Use of Homework Videos (Only With Consent)

We only use excerpts of your homework videos for promotional purposes (e.g. on our website or our social media channels) if you have given us your separate, explicit consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no effect on your course participation. You can withdraw your consent at any time with effect for the future, e.g. by email to info@kravmaga-online.com. The lawfulness of processing carried out before the withdrawal remains unaffected. After a withdrawal, we will not publish the videos again and will remove them from our website and our own social media channels.

8. Google Analytics

If you have given your consent, we use Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to analyze and improve the use of our website. Google Analytics uses cookies and similar technologies to collect information about your use of the website, e.g. pages visited, time spent on pages, device and browser information, and approximate location. IP addresses are not stored by Google Analytics.

The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has adopted an adequacy decision. We have concluded a data processing agreement with Google. Further information can be found in Google's Privacy Policy.

9. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, simply contact us at info@kravmaga-online.com. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Germany.

Last updated: November 2026