Last updated: April 2026
1. Data controller
Responsible for data processing on this website is:
Christian Weidl – Soul of Kung Fu
Grimmstraße 1, 80336 München
Email: [email protected]
Phone: +49 160 98052882
2. Overview: What data we process
This website is intentionally lean. We do not use cookies, tracking pixels, social-media plugins or other data-collecting third-party services. Specifically, the following data is processed:
- Connection data (automatically by our hosting provider Cloudflare)
- Contact enquiries by email or via the trial class form (see §4a)
- Reach measurement via Umami Cloud – cookieless and anonymous (see §5)
There are no cookies on this website that require your consent. A cookie banner is therefore not necessary.
We use only functionally necessary local browser storage (localStorage) for user-selected preferences such as colour scheme (light/dark mode). This information is stored exclusively in your browser and is not transmitted to us.
3. Hosting and connection data
When you access the website, our hosting provider Cloudflare Pages / Workers processes connection data for technical reasons:
- IP address
- Date and time of the request
- Page requested (URL)
- Browser and operating system used (user agent)
- Referrer URL (previously visited page, if transmitted)
As website operator we have no direct access to raw server logs; the processing occurs edge-side at Cloudflare as part of content delivery. Details on Cloudflare's data processing are available at cloudflare.com/privacypolicy/.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and delivery). Data transfer to the USA takes place on the basis of the EU Standard Contractual Clauses and Cloudflare's EU-US Data Privacy Framework certification.
4. Email communication
If you contact us by email, your details (email address, name, message) are stored to process your enquiry and for any follow-up questions. Our email hosting is provided by Mailbox.org (Heinlein Support GmbH, Schwedter Str. 8/9A, 10119 Berlin) with servers located in Germany.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. The data is deleted once your enquiry has been fully processed – statutory retention periods remain unaffected.
4a. Trial class form
If you use the enquiry form on the trial class page, we process the details you enter there: selected class, name, email address and, optionally, phone number and message. We also store the language, form variant and page from which the enquiry was sent. The data is used exclusively to answer your enquiry and is stored in our own infrastructure with our hosting provider Cloudflare (see §3); in addition, the delivery service Resend, Inc. notifies us of your enquiry by email (see §10). Your IP address and browser identifier (user agent) are not stored by us.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). The technical D1 intake copy is deleted regularly and no later than 90 days after receipt. The resulting email correspondence is deleted once your enquiry has been fully processed – statutory retention periods remain unaffected. To prevent automated spam submissions we rely solely on invisible technical checks, without cookies and without third-party CAPTCHAs.
5. Reach measurement with Umami Cloud
We use Umami Cloud for reach measurement – a cookieless, privacy-friendly analytics tool. Only anonymised visit statistics are collected (no IP address, no fingerprinting, no personal profiles).
Because no personal tracking or cookie takes place, no consent is required. Legal basis: Art. 6(1)(f) GDPR.
Provider: Umami Software, Inc. Details on data processing: umami.is/privacy.
6. Videos via Cloudflare Stream
Some pages embed videos via Cloudflare Stream (Cloudflare, Inc., USA). Videos are loaded only after an active click on the play button — before that, no connection to the video server exists. On the page you initially see only a static thumbnail image, delivered locally by our hosting.
Cloudflare Stream works without tracking cookies. When you start playback, only technical connection data (IP, user agent) is transmitted to Cloudflare — as with any other asset of the page.
Legal basis: Art. 6(1)(f) GDPR, or from the click onwards Art. 6(1)(a) GDPR (implicit consent through active interaction).
7. External content (maps, links)
Individual pages embed static map images (own image material, hosted locally). Clicking the map leads to an external map service (Google Maps) — only then is data transmitted to that service. Before the click, no third-party communication takes place.
8. Your rights under the GDPR
You have the following rights in relation to us:
- Access to your stored data (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
To exercise these rights, an informal message to [email protected] is sufficient.
9. Right to complain to the supervisory authority
You have the right to complain to a data-protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent authority in our case is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Data processors
For the technical operation of this website we use an external service provider. This provider processes data exclusively on our behalf and on the basis of a data processing agreement pursuant to Art. 28 GDPR. The core sub-processors are named above (Cloudflare, Mailbox.org, Umami, and Resend, Inc. for form notification emails).
11. Changes to this privacy policy
We update this statement when technology or the legal situation changes. The current version is always available at this URL.