Privacy Policy

1. Controller

The controller responsible for the processing described in this policy is:

Email: sana_399@icloud.com

2. Scope

This policy applies to the website haki.fitness and to personal data that HAKI receives and uses through its creator account on the Playbook platform. Playbook's own processing of user accounts, checkout, payments and platform activity is additionally governed by Playbook's privacy policy.

3. Website hosting by Netlify

This website is delivered through Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When the website is requested, Netlify processes technical request information required to deliver and secure the site. This may include the IP address, requested file, date and time of access, referrer, browser and device information, operating system, and diagnostic or security information.

The processing is necessary to provide a secure, stable and efficient website. The legal basis is Article 6(1)(f) GDPR. HAKI's legitimate interests are the reliable delivery, security and technical optimization of the website.

HAKI does not maintain a separate copy of Netlify's delivery logs. Technical information is retained according to Netlify's service configuration and for as long as necessary to operate and secure the service, comply with legal obligations and resolve security incidents.

Netlify may process data in the United States and other countries. Netlify states that it uses the EU-US Data Privacy Framework and, where required, the European Commission's Standard Contractual Clauses for international transfers. Further information is available in the Netlify Privacy Statement.

4. Domain and DNS services

The domain haki.fitness and its DNS configuration are managed through IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS does not host or deliver this website and IONOS WebAnalytics is not used on this website. Technical data may be processed where necessary to provide and secure domain and DNS services. The legal basis is Article 6(1)(f) GDPR.

Further information is available in the IONOS Privacy Policy.

5. Local fonts

The Archivo and Inter fonts used by this website are stored locally with the website. No connection to Google Fonts or another font provider is established when a page is loaded.

6. Netlify Web Analytics

HAKI uses Netlify Web Analytics to understand aggregate website traffic and improve the performance and content of the site. The statistics are generated from Netlify's content delivery network server logs. According to Netlify, this feature does not use client-side tracking code, cookies or personally identifying visitor profiles.

The legal basis is Article 6(1)(f) GDPR. HAKI's legitimate interest is measuring aggregate reach and improving the website without tracking individual visitors. More information is available in Netlify's Web Analytics documentation.

7. Playbook subscriptions and community

The subscription, user account, checkout, payment, training and community platform is provided by Playbook Technology, Inc., a Delaware corporation based in the United States. The HAKI website links to Playbook but does not automatically transmit data to Playbook merely because you visit haki.fitness. Data is transmitted when you follow a Playbook link, create an account or use the Playbook platform.

Playbook may process account information, profile information, communications, device and usage data, subscription and limited transaction information. Payments may be processed by Stripe, Apple or Google. HAKI does not receive or store full payment card details.

Through Playbook's creator tools, HAKI may receive and use the following information:

• name;
• email address;
• subscription status; and
• community posts, comments or other community contributions.

HAKI uses this information only to provide and administer the HAKI creator offering, support subscribers, manage access, operate and moderate the community, respond to user requests, and protect the service against misuse. The legal bases are Article 6(1)(b) GDPR where processing is necessary to provide the requested creator service, Article 6(1)(f) GDPR for community administration, security and abuse prevention, and Article 6(1)(c) GDPR where processing is required by law.

HAKI does not use email addresses made available through Playbook for external advertising or newsletters and does not sell or transfer Playbook user contact data. User information is retained only for as long as it is needed for an active subscription, user support, community administration or the establishment, exercise or defence of legal claims, and is then deleted or anonymized unless a legal retention obligation applies.

Playbook states that platform data may be processed in the United States or other jurisdictions. For details about Playbook's processing, retention, international transfers and user choices, please review the Playbook Privacy Policy and Playbook Terms of Service.

8. Email contact

If you contact HAKI by email, the information you provide, including your email address and message, is processed to respond to your request. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual requests and Article 6(1)(f) GDPR for other inquiries. The legitimate interest is responding to communications concerning HAKI.

Messages are deleted when the request has been conclusively resolved unless continued retention is necessary for contractual documentation, legal obligations or legal claims.

9. Instagram

This website contains an external link to the HAKI Instagram profile. Selected HAKI videos shown on this website are stored locally and delivered from haki.fitness. No Instagram feed, tracking pixel or social-media plugin is embedded, and viewing these videos does not establish a connection to Instagram or Meta. Data is transmitted to Instagram or Meta only when you follow the external profile link. The subsequent processing is controlled by the respective platform provider.

More information is available in Instagram's Privacy Policy.

10. Cookies and tracking

HAKI does not use advertising pixels, marketing cookies or client-side analytics on this website. Netlify Web Analytics operates without cookies or client-side tracking code. Because no optional tracking technology is currently used, the website does not display a consent banner.

11. Recipients and international transfers

Personal data is disclosed only where this is necessary to provide the website and HAKI services, fulfil legal obligations or protect legitimate interests. Relevant recipients may include Netlify, IONOS, Playbook and the payment providers used within Playbook.

Where personal data is transferred outside the European Economic Area, HAKI relies on an applicable adequacy decision or appropriate safeguards under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses, where required.

12. Your rights

Subject to the applicable legal requirements, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• receive data you provided in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent at any time where processing is based on consent.

To exercise a right relating to HAKI's own processing, contact sana_399@icloud.com. Requests concerning a Playbook account or Playbook's independent processing can also be submitted through Playbook's account tools or to Playbook support.

13. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for HAKI's establishment is:

14. Automated decisions and children

HAKI does not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.

The HAKI website does not offer direct account registration and does not knowingly collect personal data directly from children. Playbook's terms state that platform users must be at least 13 years old and that users under 18 require permission from a parent or legal guardian.

15. Changes to this policy

This policy may be updated when the website, the services used or legal requirements change. The current version is always published on this page.