Privacy Policy
Please note: This is a courtesy translation. The legally authoritative version of this privacy policy is the German one; in the event of any discrepancy, the German text prevails.
This website is aimed primarily at a German-speaking audience and presents my career, my sporting activities and my work as a speaker. It is deliberately data-minimising and free of consent-based tracking. Below I inform you about the processing of personal data when visiting this website and about your rights under the General Data Protection Regulation (GDPR).
1. Controller
The controller within the meaning of the GDPR is:
Lennart Sass, Fahrtgasse 12, 69117 Heidelberg, Germany
Phone: +49 156 78331975 · E-mail: sasslennart@gmail.com
2. Your rights as a data subject
With regard to your personal data, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and the right to object (Art. 21 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
3. Right to object
Where processing is based on a legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object at any time on grounds relating to your particular situation. I will then stop processing the data concerned unless I can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
4. Hosting
I host this website with IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes the data required to provide the website (in particular server log files, see section 5) as my processor. The legal basis is my legitimate interest in secure and efficient provision (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place; data is processed on servers within the European Union.
5. Server log files
Each time this website is accessed, information transmitted by your browser is automatically collected and temporarily stored in server log files: IP address, browser type and version, operating system, referring page, date and time of access and the volume of data transferred. This is technically necessary to display the website and to ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR. This data is not merged with other data sources.
6. SSL / TLS encryption
For security reasons this website uses SSL / TLS encryption, recognisable by "https://" in the browser address bar.
Please note that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps; complete protection of data against access by third parties is not possible.
7. Cookies – and why there is no cookie banner
This website is deliberately designed to be free of, or minimal in, cookies. I do not use any cookies for analytics, marketing or tracking, and I do not embed any services that require consent and transfer data to third parties without being asked. Only technically necessary cookies may be set – in particular the "pll_language" cookie of the Polylang multilingual system to store your language selection. Such technically necessary cookies are permitted without consent under Section 25 (2) no. 2 TDDDG; the legal basis is Art. 6 (1) (f) GDPR. As no consent-requiring cookies or services are used, a cookie consent banner is not legally required.
8. Contacting me
If you contact me via the contact form (provided by Elementor Pro) or by e-mail, I process the information you provide (e.g. name, e-mail address and your message) to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise my legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). Providing this data is voluntary; however, without at least one means of contact and your message I cannot process your enquiry. To send the e-mails triggered by the form I use the "Site Mailer" service of Elementor Ltd. (Tel Aviv, Israel) as a processor on the basis of a contract pursuant to Art. 28 GDPR; an adequacy decision of the European Commission exists for Israel (Decision 2011/61/EU). Should it cease to apply, the transfer additionally takes place on the basis of the standard contractual clauses (Art. 46 (2) (c) GDPR). I delete your data once the enquiry has been dealt with and no statutory retention obligations apply.
9. Reach measurement with Koko Analytics
For statistical analysis of website use I employ "Koko Analytics". Collection is cookieless; the data is processed exclusively locally in my own database and is not transferred to third parties. No personal profiles are created and IP addresses are not stored permanently. No access to information in your terminal equipment within the meaning of Section 25 (1) TDDDG takes place. Only aggregated metrics such as page views, approximate visitor numbers and referring pages are recorded. The legal basis is my legitimate interest in a needs-based design of the website (Art. 6 (1) (f) GDPR). As the measurement is cookieless and involves no transfer to third parties, no consent is required.
10. Embedding of YouTube videos (click-to-load)
On individual pages I embed YouTube videos. They are configured so that merely opening the page does not establish any connection to YouTube; initially only a preview is shown. Only when you actively click the video – thereby consenting to it loading – is a connection to YouTube established and your IP address and information about the content transmitted to the provider. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent: Google LLC, USA). The legal basis is your consent given by the click (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG); Google is certified under the EU-U.S. Data Privacy Framework. Should the adequacy decision cease to apply, the transfer additionally takes place on the basis of the standard contractual clauses (Art. 46 (2) (c) GDPR). No data is transmitted to Google before your click.
11. Accessibility assistant
To improve accessibility I use an assistance tool that lets you adjust display options (e.g. contrast or font size). The settings you actively choose are stored exclusively locally on your device (local storage); no transfer to third parties takes place. This storage is permitted without consent under Section 25 (2) no. 2 TDDDG, as it is required for the service you have expressly requested; the legal basis for the processing is my legitimate interest in an accessible website (Art. 6 (1) (f) GDPR).
12. Affiliate and recommendation links
My recommendations page may contain links to third-party offers designed as affiliate links; such links are marked as advertising. If you click such a link and conclude a transaction with the provider, I may receive a commission. Any data processing (e.g. cookies to attribute the purchase) takes place only after the click, on the provider's website and under its responsibility; its privacy policy then applies. The legal basis for providing the links is my legitimate interest (Art. 6 (1) (f) GDPR).
13. Links to social networks
I link to my social media profiles. Only when you click such a link are you forwarded to the respective network; no data is transferred to the networks merely by visiting my website. The respective network operator is responsible for processing after the click.
14. Storage period
Unless a more specific storage period is stated, I process personal data only for as long as necessary for the respective purpose or as required by statutory retention periods, after which it is deleted.
15. Currency and amendment
This privacy policy is currently valid. It may need to be amended as the website develops or due to changed legal requirements.
Last updated: 4 July 2026