exburnout.com

Privacy policy

Which data is processed when visiting exburnout.com.

Who is responsible for data processing?

Johannes Faupel
Hasselhorstweg 6
60599 Frankfurt am Main
Germany
Email: info@johannesfaupel.com

This privacy policy applies to exburnout.com.

Where is the website hosted?

The website is hosted by ALL-INKL.COM, Hauptstraße 68, 02742 Friedersdorf, Germany. Each time a page is accessed, the server processes technically necessary data in server log files: IP address, date and time, requested address, referrer URL, browser and operating system. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in the secure and error-free operation of the website. A data processing agreement is in place with the host.

Is the connection encrypted?

The website uses TLS encryption, recognisable by “https://” in the address bar.

On the first visit, a notice about cookies and analytics appears. The choice made is stored in the browser’s local storage under the name “exb_consent” so that the notice does not reappear on every page. This storage is technically necessary; the legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (c) GDPR. The choice can be changed or withdrawn at any time via “Cookie settings” at the bottom of every page.

How is Google Analytics used?

Only after explicit consent does this website use Google Analytics 4 (measurement ID G-XKGNQY7SFX). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before consent, the Google tag is neither loaded nor is any data transferred to Google.

After consent, Google Analytics records how the website is used, for example pages visited, time spent, origin of the visit, device type and approximate location. For this, Google Analytics sets cookies (_ga and _ga_XKGNQY7SFX). Because exburnout.com deals with health topics, the pages visited can allow conclusions about health.

The legal basis is consent under Art. 6 (1) (a) GDPR, for data allowing conclusions about health under Art. 9 (2) (a) GDPR, and § 25 (1) TDDDG. Consent can be withdrawn at any time with effect for the future via “Cookie settings”; on withdrawal, the analytics cookies are deleted.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision of 10 July 2023.

Are third-party fonts loaded?

All fonts are stored on the website’s own server. No connection to Google Fonts or other font providers is made.

The website links to sources such as the WHO, gesund.bund.de, the NHS and medical societies, to helplines, to johannesfaupel.com, to theonesession.com, to Springer and the German Patent and Trade Mark Office, and to the AI services Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), Grok (xAI), Perplexity and Microsoft Copilot. With the “Continue with …” buttons, the displayed prompt is transferred to the chosen service as part of the address; it contains no personal details. Data is only transferred to the respective provider when such a link is clicked; that provider’s privacy notice applies there.

What happens with an enquiry by email?

For an enquiry by email, the information provided is stored to process the enquiry. The legal basis is Art. 6 (1) (b) GDPR if the enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR. Health information contained in an enquiry is used only to answer it (Art. 9 (2) (a) GDPR). The data is deleted once the purpose no longer applies and no statutory retention obligations exist.

Which rights do data subjects have?

Data subjects have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). Consent given can be withdrawn at any time with effect for the future (Art. 7 (3) GDPR). An informal email to info@johannesfaupel.com is sufficient.

There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information.

As of October 2026