This privacy policy explains which personal data we process, for which purposes and to what extent, when you visit our website or get in touch with us. This English version is a translation for your convenience. The German version is the legally binding one.
Last updated: 14 November 2026
CFT Mainz GmbH
Karoline-Stern-Platz 7
55118 Mainz, Germany
Email: info@cft-mainz.de
Phone: 0177 4481586
Types of data processed: contact data (e.g. name, email address, phone number), content data (e.g. entries in forms), usage data (e.g. pages visited, access times) and meta/communication data (e.g. IP address).
Purposes of processing: providing the website and its functions, handling contact requests and appointments, audience measurement (only with your consent) and the security and stability of operations.
We process personal data on the basis of the GDPR, in particular: consent (Art. 6(1)(a) GDPR), performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR) and legitimate interests (Art. 6(1)(f) GDPR), for example in the secure and stable operation of the website.
For storing information on your device or accessing it (e.g. cookies or local storage), § 25 TDDDG applies in addition: technically necessary storage under § 25(2) no. 2 TDDDG, everything else only with your consent under § 25(1) TDDDG.
In accordance with Art. 32 GDPR we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. This website is transmitted in encrypted form via HTTPS/TLS.
Our website is operated on Microsoft Azure infrastructure (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) in a data centre in Germany (region Germany West Central, Frankfurt am Main). Data processing agreements are in place with the technical service providers we use.
When the website is accessed, the web server automatically processes server log files (IP address, date and time, requested resource, status code, user agent). This processing serves the provision, stability and security of the website (Art. 6(1)(f) GDPR). The log data is deleted automatically after a short time.
Only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics 4 uses cookies and processes usage data (e.g. pages visited, device data, truncated IP address) to evaluate the use of the website. Google Analytics 4 does not log IP addresses. They are only used for coarse location and are processed in truncated form.
Where data is transferred to the USA, this is based on the certification of Google LLC under the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via "Cookie Settings" in the footer. More information: https://policies.google.com/privacy.
On our contact page we embed a map from Google Maps (Google Ireland Limited). The map is only loaded when you actively click on it. Only then is data (including your IP address) transmitted to Google (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Transfers to the USA are covered by the certification of Google LLC under the EU-U.S. Data Privacy Framework.
For online appointment booking (e.g. a free trial session) we use Calendly, a service of Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA. The booking widget is only loaded when you click a booking button (Art. 6(1)(a) GDPR, § 25(1) TDDDG). When you book, Calendly processes the data you provide (name, email address, preferred appointment) on our behalf.
The transfer to the USA is based on appropriate safeguards under Art. 46 GDPR (EU standard contractual clauses) or the certification under the EU-U.S. Data Privacy Framework. More information: https://calendly.com/privacy.
When you contact us via the contact form, by email or by phone, we process your details (name, email address, phone number and message where provided) to handle your enquiry (Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR).
Form enquiries are received by our server and delivered to us by email. The email is sent via our email provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The data is deleted as soon as it is no longer needed to handle the enquiry and no statutory retention obligations apply.
To protect the contact form against automated requests (spam) we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is only loaded when you use the contact form. Cloudflare then processes technical data of your browser and device (including IP address and browser and device characteristics) to check whether the request comes from a human. According to Cloudflare, this data is not used for advertising purposes. The legal basis is our legitimate interest in protection against misuse (Art. 6(1)(f) GDPR). The access to your device required for this is technically necessary (§ 25(2) no. 2 TDDDG). Transfers to the USA are covered by the certification of Cloudflare, Inc. under the EU-U.S. Data Privacy Framework. More information: https://www.cloudflare.com/privacypolicy/.
For booking our courses (e.g. Hybrid Boost) we use the booking platform Fyndery (fyndery.de). The Fyndery booking window is only loaded when you click a booking button and have agreed to it being loaded (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Only then is data (including your IP address) transmitted to Fyndery. The booking itself is subject to Fyndery's privacy notice. We receive the booking data (name, email address, booked session) in order to run the course (Art. 6(1)(b) GDPR).
We link to our Instagram profile (Meta Platforms Ireland Limited). No social media plugins or pixels are embedded on our website. Data is only processed when you open Instagram yourself. Instagram's privacy notice also applies to our profile there. Where Instagram provides us with page statistics, we are joint controllers with Meta in that respect.
We delete personal data as soon as the purpose of the processing no longer applies and no statutory retention obligations (e.g. under commercial or tax law) prevent this. Until then, processing is restricted where necessary.
Under the GDPR you have in particular the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.
CFT Mainz GmbH
Karoline-Stern-Platz 7
55118 Mainz
Monday - Thursday: 07:00 – 21:00
Friday: 07:00 – 19:00
Webdesign by 
Novosky