Legal & compliance
Privacy Policy
This statement explains how we process personal data when you visit this website, contact support, create a member account, or purchase a digital masterclass. We process data in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act.
1. Data controller
The controller is the service provider named in the Legal Notice:
ClarityPeak Academy
Heinestrasse 2, 1020 Vienna, Austria
Email: support@claritypeak.de
Phone: +43 650 779 88 24
2. Categories of data and purposes
We process the following data, as applicable:
- Website usage: IP address, browser type, device information, pages viewed, and timestamps, to operate, secure, and improve the website (Art. 6(1)(f) GDPR).
- Enquiries: name, email, message content, to respond to support and pre-contract questions (Art. 6(1)(b) and (f) GDPR).
- Purchases and member access: name, email, billing country, purchased products, access logs, and transaction references, to perform the contract, grant streaming access, and keep accounting records (Art. 6(1)(b) and (c) GDPR).
3. Payment service provider Stripe
Payment data is transmitted to Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, for payment processing, fraud detection, and transaction security.
When you complete checkout, Stripe processes payment details such as card number, expiry date, CVC, payment method tokens (for example Apple Pay), IBAN for SEPA where used, billing name, and fraud-prevention signals. We do not store full card numbers on our own servers. Stripe acts as an independent controller or as a processor depending on the processing activity; details are set out in Stripe’s privacy policy at stripe.com/privacy.
The legal bases are performance of the contract (Art. 6(1)(b) GDPR), compliance with legal obligations in payment and accounting law (Art. 6(1)(c) GDPR), and our legitimate interest in secure, fraud-resistant payments (Art. 6(1)(f) GDPR).
4. Recipients and international transfers
Recipients may include our hosting provider, email delivery provider, and Stripe as described above. If a provider processes data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.
5. Data retention
Support correspondence is retained for as long as needed to handle your request and any follow-up, typically up to 3 years. Contract and invoice data is retained for the statutory retention periods under Austrian commercial and tax law (generally 7 years). Payment records held by Stripe are retained according to Stripe’s policies and legal obligations. Access logs that are no longer required for security are deleted or anonymised on a rolling basis.
6. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR);
- rectification of inaccurate data (Art. 16 GDPR);
- erasure, where the legal conditions are met (Art. 17 GDPR);
- restriction of processing (Art. 18 GDPR);
- data portability (Art. 20 GDPR);
- object to processing based on legitimate interests (Art. 21 GDPR);
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, contact the controller at support@claritypeak.de. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) or another competent EU supervisory authority.
7. Cookies and analytics
This website may use strictly necessary cookies to keep sessions secure and remember essential preferences. If optional analytics cookies are introduced, we will request consent where required and update this notice.
8. No automated decision-making
We do not use your data for automated decision-making or profiling that produces legal effects concerning you, other than Stripe’s standard fraud checks during payment.