Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Yin and Yang Nutrition (operated by Tomislav Winkler, "we," "us," or "our") collects, uses, and protects your personal data when you visit yinandyangmethod.com or purchase any of our digital products.

We take your privacy seriously. We do not sell your data. Period.

1. Who We Are

Yin and Yang Nutrition is operated as a sole proprietorship (Einzelunternehmer) by:

Tomislav Winkler
Yin and Yang Nutrition
Galileistraße 85, 14480 Potsdam, Brandenburg, Germany
Email: tommy@yinandyangmethod.com

2. What Data We Collect

We collect the following types of data:

Purchase data: Name, email address, and billing information — collected and processed by our payment processor (ThriveCart). We do not store your payment card details.
Usage data: Anonymous data about how visitors interact with our website, collected via Google Analytics 4 (through Google Tag Manager). This includes pages visited, time on site, device type, and approximate location (country/region level).
Communications: If you email us, we retain that correspondence to respond to you.

3. How We Use Your Data

To fulfill your purchase and deliver your digital products
To send transactional emails related to your order
To improve our website based on anonymous usage analytics
To run and optimize advertising campaigns (Google Ads)
To comply with legal obligations

4. Google Tag Manager & Analytics

We use Google Tag Manager (GTM) to manage tracking scripts on this website. Through GTM, we run Google Analytics 4 (GA4), which collects anonymized behavioral data about site visits. This data is processed by Google and subject to Google's Privacy Policy.

Google Analytics uses cookies to distinguish unique visitors. IP addresses are anonymized. We do not use GA4 to identify you personally.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-Out Browser Add-on.

5. Cookies

This site uses cookies. A cookie is a small text file stored on your device. We use:

Analytics cookies (Google Analytics via GTM) — to understand site usage. These are non-essential and require your consent under EU law.
Functional cookies — set by ThriveCart to manage your checkout session.

You can manage or withdraw cookie consent at any time via your browser settings or the cookie banner on this site.

6. Legal Basis for Processing (GDPR)

For visitors from the European Union, we process your data on the following legal bases:

Contract performance (Art. 6(1)(b) GDPR) — to fulfill your purchase
Legitimate interests (Art. 6(1)(f) GDPR) — for website analytics and fraud prevention
Consent (Art. 6(1)(a) GDPR) — for non-essential cookies and marketing tracking
Legal obligation (Art. 6(1)(c) GDPR) — where required by law

7. Data Retention

We retain purchase records for the duration required by German commercial and tax law (typically 10 years). Analytics data is retained according to Google's default retention settings (up to 14 months). Email correspondence is kept for as long as reasonably necessary.

8. Your Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights:

Right to access your personal data
Right to correct inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise any of these rights, email us at tommy@yinandyangmethod.com. We will respond within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority — in Germany, this is the relevant state authority (for Brandenburg: LDA Brandenburg).

9. Third-Party Services

We use the following third-party services that may process your data:

ThriveCart — payment processing and checkout
Google Analytics / GTM — website analytics
Google Ads — advertising and conversion tracking
Netlify — website hosting

Each of these services operates under their own privacy policy. We do not share your data with third parties for their own marketing purposes.

10. Data Transfers Outside the EU

Some of our third-party service providers (including Google) process data in the United States. These transfers are covered by Standard Contractual Clauses (SCCs) as approved by the European Commission, or equivalent safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy? Reach us at:

tommy@yinandyangmethod.com
Yin and Yang Nutrition — Tomislav Winkler
Galileistraße 85, 14480 Potsdam, Germany