Privacy policy

Last updated: October 2026

We take the protection of your personal data seriously. This policy explains which data we process when you visit this website, for what purpose and on what legal basis.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Woodwose Ltd.
Gregoriou Afxentiou 8/SHP19
6023 Larnaca, Cyprus
Represented by: Mr Oliver Klemm (Director)
Contact: see the details in the legal notice

2. General

Personal data is any data that can be used to identify you personally. We process your data only in accordance with the applicable data protection rules, in particular the GDPR. Processing only takes place where there is a legal basis, usually:

• Art. 6(1)(a) GDPR – your consent (e.g. joining the waitlist),
• Art. 6(1)(b) GDPR – preparing or performing a contract (e.g. booking a course),
• Art. 6(1)(c) GDPR – compliance with legal obligations,
• Art. 6(1)(f) GDPR – our legitimate interest in a secure, functioning website.

3. Hosting, Cloudflare and server log files

This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). On our behalf, Netlify processes technical data that your browser sends automatically so that the page can be delivered. These server log files include:

• IP address,
• date and time of access,
• page/file requested and amount of data transferred,
• browser type and operating system,
• referrer URL (the page visited before).

A data processing agreement is in place with Netlify. The transfer to the USA is based on appropriate safeguards (standard contractual clauses of the European Commission).

The name resolution (DNS) for our domain is handled by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare answers the technical request for the address at which the website can be reached. The website traffic itself does not pass through Cloudflare. A data processing agreement is in place with Cloudflare. The transfer to the USA is based on the EU-US Data Privacy Framework, under which Cloudflare is certified, and additionally on the standard contractual clauses of the European Commission. Details: cloudflare.com/privacypolicy.

The legal basis for hosting and name resolution is Art. 6(1)(f) GDPR. This data serves technical delivery, security and stability and is not combined with other data sources.

4. Encryption (SSL/TLS)

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar. This means the data you send to us cannot be read by third parties.

5. Cookies

This website does not set any cookies.

6. Waitlist and newsletter

If you join the waitlist for the "Market Profile Trading" course or sign up for our newsletter, we process your first name, your email address, the chosen course language and your consent in order to send you the information you requested – for the waitlist, in particular about the start of the course. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time, for example via the unsubscribe link in every email; withdrawing your consent does not affect the lawfulness of the processing carried out before the withdrawal.

The form data is received by our hosting provider Netlify (Netlify Forms, see section 3); we are also notified of every new entry by email. Sign-up uses a double opt-in procedure: you first receive an email with a confirmation link that is valid for 7 days; your sign-up only takes effect once you click it. We send this confirmation email through Resend (Resend, Inc., USA, standard contractual clauses).

Only after you confirm is your contact passed on to ActiveCampaign (ActiveCampaign, LLC, 1 North Dearborn Street, Chicago, IL 60602, USA), which we use to send and manage our emails. Your email address, your first name, the chosen course language, the time of sign-up and confirmation, and the open and click statistics of our emails are stored there. The transfer to the USA is based on appropriate safeguards (standard contractual clauses, data processing agreement). Details: activecampaign.com/legal/privacy-policy.

7. Contact by email

If you send us an email, we process your email address and the content of your message in order to reply. Our mailbox is operated by Google (Google Workspace, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A data processing agreement is in place with Google. Data may also be transferred to Google LLC in the USA; the transfer is based on the EU-US Data Privacy Framework and additionally on the standard contractual clauses of the European Commission. The legal basis is Art. 6(1)(b) or (f) GDPR.

8. Fonts

The fonts used are delivered together with the website by our hosting provider (no Google Fonts). No IP address is therefore sent to Google when the page loads.

9. No audience measurement

This website does not use any analytics or tracking tool (no Google Analytics, no Meta pixel or similar). We do not evaluate who visits which pages.

10. External links

We link to our website oliverklemm.com, including the registration page for our live workshops. These are simple links, not embedded content – only when you actively click one of these links are you taken to oliverklemm.com, where the oliverklemm.com privacy policy applies. Simply visiting this site does not send any data to oliverklemm.com.

11. Your rights

Under the GDPR you have the following rights:

• access to the data stored about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure ("right to be forgotten", Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• objection to processing (Art. 21),
• withdrawal of consent with effect for the future (Art. 7(3)).

An informal message to the controller named above is sufficient to exercise your rights.

12. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. As the controller is based in Cyprus, this is the Commissioner for Personal Data Protection of the Republic of Cyprus. If you reside in Germany, you can also contact the data protection authority of the federal state in which you live.

13. Storage period

Unless a more specific period is stated in this policy, your personal data remains with us until the purpose of processing no longer applies. If you make a justified request for erasure or withdraw your consent, your data will be deleted unless there are legally permitted reasons for retaining it.

14. Updates and changes

This privacy policy was last updated in October 2026. Further development of our website or changes in legal or regulatory requirements may make it necessary to update it. You can always find the current version on this page.