← Back

Privacy policy

Last updated: 18 October 2026. Deutsche Fassung: Datenschutzerklärung. If the two versions differ, the German version applies. "GDPR" means the EU General Data Protection Regulation.

1. Who is responsible

Luca Yves Martini, Planegger Str. 57 c, 82110 Germering, Germany
Phone: +49 176 84620726
Email: luca@martiniliving.com

2. Hosting

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open a page, Cloudflare processes technically necessary data such as your IP address, date and time, the page you open and browser information, to deliver the page and protect it from attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Cloudflare is certified under the EU-US Data Privacy Framework.

3. Visitor statistics

I use Cloudflare Web Analytics to see how often the site is visited and where visitors come from. No cookies are set and no profiles of individual visitors are built; only combined figures such as page views, referring page, country and device type are evaluated. Legal basis: Art. 6(1)(f) GDPR.

4. Fonts

The fonts are stored on this website. No connection to Google or other font providers is made when you open a page.

5. Applying for coaching

When you apply for coaching, I process what you enter in the application: your goal, what bothers you most right now, your training time, how fast you want results and how much support you want, first name, email address, optionally your Instagram or TikTok name, age, height and weight. I also store which link you came through (for example from an Instagram message), to see which ways work.

Purpose: to review your application and contact you about possible coaching.
Legal basis: Art. 6(1)(b) GDPR (steps before a contract) and your consent under Art. 6(1)(a) GDPR. Where details such as height and weight are health data, I process them based on your explicit consent under Art. 9(2)(a) GDPR.
Saving while you fill it in: Your answers are saved while you fill in the application, so it isn't lost if you stop halfway. The application tells you this at the start. Height and weight are the exception: they are only sent when you submit, after you have given your consent.
Where the data is stored: The answers are written into a Google spreadsheet in my Google account through Google Apps Script, and I get an email notification (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to Google LLC in the USA is possible; Google is certified under the EU-US Data Privacy Framework).
Reminder if you stop halfway: If you stop the application after entering your email address, I remind you to finish it by email, at most twice. The link in the reminder loads your answers so far, so you can continue where you left off; it works for at most 21 days. Legal basis: Art. 6(1)(b) GDPR (your request about coaching). Just reply "stop" and you won't get another reminder.
How long: If no coaching comes about, I delete the application after 6 months at the latest. If you become a client, the periods in section 9 and the statutory retention duties apply.

So that you can continue an unfinished application later, the page also stores your answers in your browser's storage (local storage). This data stays on your device and is deleted as soon as you submit the application.

6. Free call (booking and video call)

You book the free call through Cal.com (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA). Cal.com processes your name, email address, the time you choose and, if you add one, your note. The appointment is transferred to my Apple iCloud calendar (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). The call takes place as a video call via Cal Video.

Purpose: to organise the appointment, remind you and hold the call.
Legal basis: Art. 6(1)(b) GDPR (steps before a contract).
Transfer to the USA: Cal.com is certified under the EU-US Data Privacy Framework and additionally uses EU standard contractual clauses.
How long: as for the application (section 5).

7. Booking on the start page

When you click "Book with obligation to pay" on your personal start page, I store which program and payment option you chose, the time, your agreement to the Coaching Terms, whether you asked for the coaching to start right away, and a booking number. The booking number is passed to Stripe so I can match it to your payment.

Purpose: to be able to show that you agreed to the terms and, where relevant, asked for an immediate start (this matters for your right of withdrawal).
Legal basis: Art. 6(1)(b) GDPR (conclusion of the contract) and Art. 6(1)(f) GDPR (legitimate interest in being able to prove it).
Where the data is stored: in the Google spreadsheet from section 5.
How long: 3 years after the end of the year in which the coaching ends (standard limitation period).

8. Payment and invoices

Payments are handled by Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). In the checkout you enter your name, email address, billing address and payment details. Card and other payment details go directly to Stripe; I don't see your full card number, for example. Stripe creates the invoices on my behalf, sends them to you by email and, for installments, reminds you of the next payment or of a failed payment.

Purpose: to process payments, collect installments, create invoices and keep my accounts.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (tax retention duties).
Stripe as a separate controller: For fraud prevention and its own legal duties, Stripe processes data (for example device and IP data) under its own responsibility. Stripe's privacy policy applies to that. A transfer to Stripe, Inc. in the USA is possible; Stripe bases it on the EU-US Data Privacy Framework and EU standard contractual clauses.
Other payment methods: If you choose for example Klarna (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden), Apple Pay or Amazon Pay in the checkout, the data needed for it goes to that provider, which processes it under its own responsibility and may check your creditworthiness for pay-later options. Its privacy notice applies.
How long: I keep invoices and accounting records for as long as German tax law requires (§ 147 AO, 6, 8 or 10 years depending on the document).

9. The coaching itself

When you become a client, I process the data I need for your individual coaching:

contact and contract data: name, email address, booked program, appointments;
your answers in the onboarding questionnaire: goal, everyday life and time, training experience, food preferences, age, height, weight and information about your health (for example conditions, medication, injuries, pregnancy);
your check-ins: weight, photos and videos of you and your exercises, hunger, energy, sleep, steps, training numbers;
your food diary, your messages to me and my notes from our calls.

Purpose: to create and adjust your training and nutrition plan, answer your check-ins, hold the calls, and notice when something isn't safe for you.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract). Weight, body photos, food and information about your health are health data (Art. 9 GDPR). I only process them with your explicit consent under Art. 9(2)(a) GDPR, which you give in the onboarding questionnaire. You can withdraw it at any time with effect for the future; individual coaching based on this data is then no longer possible.
Do you have to provide it? Without this information I can't coach you. You don't have to provide it, but then the coaching can't start or continue.
Everfit (training app): Your training plan, check-ins, photos, videos and the chat run in the Everfit app (Everfit Technologies, Inc., c/o Gamma Law, PO Box 136, San Francisco, CA 94104-0136, USA). For the data I enter about you there, Everfit is my processor (Art. 28 GDPR) under Everfit's data processing agreement. The data is processed in the USA; the transfer is protected by the EU standard contractual clauses (Decision (EU) 2021/914), which are part of that agreement. For data you enter yourself in your Everfit account, Everfit is also responsible itself under its terms; Everfit's privacy policy applies to that.
MyFitnessPal (food diary): If you share your MyFitnessPal diary with me, I see the entries you make there. You use your MyFitnessPal account (MyFitnessPal, Inc., USA) yourself, under its terms and privacy notice; I don't create any data about you there. Instead, you can also send me screenshots from another app.
Onboarding questionnaire and client overview: You fill in the questionnaire on this website. Your answers and consents are written into my Google spreadsheet (section 5) through Google Apps Script, and I get a short email notification. I also keep your name, program, appointments and coaching status there.
Calls and emails: Our calls are video calls (Cal Video, section 6, or another service we agree on); emails as in section 12.
How long: I delete the coaching data, in particular the health data, 12 months after the coaching ends at the latest, unless you book again within that time or agree to a longer storage. Contract and payment records are kept for the periods in sections 7 and 8.

10. Photos and testimonials

I only show your photos, results, name or words in public (for example a before and after on Instagram, TikTok, YouTube, Facebook or this website) if you give me separate, voluntary consent (Art. 6(1)(a) and, where health data is involved, Art. 9(2)(a) GDPR). Whether you agree changes nothing about your coaching. You can withdraw your consent at any time with effect for the future; I then take the content off my channels as far as I can.

11. Withdrawal and cancellation on this website

If you use the function "Withdraw from contract" or "Cancel contract here" on this website, I process your name, email address, the details of your contract, for a cancellation also its type, reason and the end date you want, and the date and time it was received. The details are written into my Google spreadsheet (section 5) through Google Apps Script, and you automatically get an acknowledgement of receipt by email.

Purpose: to handle your withdrawal or cancellation and confirm that I received it.
Legal basis: Art. 6(1)(c) GDPR (legal duty under §§ 356a, 312k of the German Civil Code) and Art. 6(1)(b) GDPR.
How long: 3 years after the end of the year in which the contract ends.

12. Contact by email or Instagram

When you write to me, I process your message and contact details to answer you (Art. 6(1)(b) or (f) GDPR). Emails to luca@martiniliving.com are forwarded by Cloudflare (section 2) to my Google mailbox (section 5). For messages on Instagram, Meta's privacy policy also applies.

13. Links to social networks

This site only has simple links to Instagram, TikTok, YouTube, Facebook and Gumroad, no embedded plugins. Data is only transferred when you click a link; then the privacy policy of that provider applies.

14. Your rights

You have the right to access, correction, deletion, restriction of processing and data portability. You can withdraw any consent at any time with effect for the future, for example by email to luca@martiniliving.com. You can also complain to a data protection authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany).

Right to object: Where I process your data based on legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). Just write to luca@martiniliving.com.

Datenschutz (Deutsch)Impressum Coaching Terms Right of withdrawal