Last updated: April 2026
1. Data controller
Responsible for data processing on this website is:
Christian Weidl – Soul of Kung Fu
Grimmstraße 1, 80336 München
Email: info@soul-of-kungfu.com
Phone: +49 160 98052882
2. Overview: What data we process
This website is intentionally lean. We do not use cookies, tracking pixels, social-media plugins or other data-collecting third-party services. Specifically, the following data is processed:
- Connection data (automatically by our hosting provider Cloudflare)
- Contact enquiries by email (if you write to us)
- Reach measurement via Umami Cloud – cookieless and anonymous (planned; see §5)
There are no cookies on this website that require your consent. A cookie banner is therefore not necessary.
We use only functionally necessary local browser storage (localStorage) for user-selected preferences such as colour scheme (light/dark mode). This information is stored exclusively in your browser and is not transmitted to us.
3. Hosting and connection data
When you access the website, our hosting provider Cloudflare Pages / Workers processes connection data for technical reasons:
- IP address
- Date and time of the request
- Page requested (URL)
- Browser and operating system used (user agent)
- Referrer URL (previously visited page, if transmitted)
As website operator we have no direct access to raw server logs; the processing occurs edge-side at Cloudflare as part of content delivery. Details on Cloudflare's data processing are available at cloudflare.com/privacypolicy/.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and delivery). Data transfer to the USA takes place on the basis of the EU Standard Contractual Clauses and Cloudflare's EU-US Data Privacy Framework certification.
4. Email communication
If you contact us by email, your details (email address, name, message) are stored to process your enquiry and for any follow-up questions. Our email hosting is provided by Mailbox.org (Heinlein Support GmbH, Schwedter Str. 8/9A, 10119 Berlin) with servers located in Germany.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. The data is deleted once your enquiry has been fully processed – statutory retention periods remain unaffected.
5. Reach measurement with Umami Cloud (planned)
We plan to use Umami Cloud for reach measurement – a cookieless, privacy-friendly analytics tool. Only anonymised visit statistics are collected (no IP address, no fingerprinting, no personal profiles).
Because no personal tracking or cookie takes place, no consent is required. Legal basis: Art. 6(1)(f) GDPR.
Provider: Umami Software, Inc. Details on data processing: umami.is/privacy.
6. Videos via Cloudflare Stream
Some pages embed videos via Cloudflare Stream (Cloudflare, Inc., USA). Videos are loaded only after an active click on the play button — before that, no connection to the video server exists. On the page you initially see only a static thumbnail image, delivered locally by our hosting.
Cloudflare Stream works without tracking cookies. When you start playback, only technical connection data (IP, user agent) is transmitted to Cloudflare — as with any other asset of the page.
Legal basis: Art. 6(1)(f) GDPR, or from the click onwards Art. 6(1)(a) GDPR (implicit consent through active interaction).
7. External content (maps, links)
Individual pages embed static map images (own image material, hosted locally). Clicking the map leads to an external map service (Google Maps) — only then is data transmitted to that service. Before the click, no third-party communication takes place.
8. Your rights under the GDPR
You have the following rights in relation to us:
- Access to your stored data (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
To exercise these rights, an informal message to info@soul-of-kungfu.com is sufficient.
9. Right to complain to the supervisory authority
You have the right to complain to a data-protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent authority in our case is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Data processors
For the technical operation of this website we use an external service provider. This provider processes data exclusively on our behalf and on the basis of a data processing agreement pursuant to Art. 28 GDPR. The core sub-processors are named above (Cloudflare, Mailbox.org, possibly Umami).
11. Changes to this privacy policy
We update this statement when technology or the legal situation changes. The current version is always available at this URL.