BE METHOD

Privacy Policy

Datenschutzerklärung · last updated 2026-10-14

This policy explains what personal data is processed when you visit be-method.com, when you contact us and when you buy a product offered here. In short: this website does not use analytics, tracking or advertising tools, and our own code sets no cookies. Data is processed to deliver the website, to answer your messages, and to sell and deliver your purchase.

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Penelope Sieper
BE METHOD
Kurt-Schumacher-Str. 3
57271 Hilchenbach
Germany
Email: penelope@be-method.com

2. Hosting, security and server logs

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, your browser sends technical data that Cloudflare processes to deliver the page and to protect the website against attacks and misuse:

Cloudflare also asks browsers to report failed connections to it (Network Error Logging). Such a report contains technical details of the failed request, including the IP address, and helps detect network problems.

We use this data only to deliver a secure, working website (legitimate interest, Art. 6 (1) (f) GDPR). We don’t combine it with other data or use it to identify you. Cloudflare processes it on our behalf; its data processing addendum is part of Cloudflare’s terms of service (Art. 28 GDPR). Cloudflare may process data in the USA and other countries outside the EU; its data processing addendum provides safeguards for such transfers. More information: cloudflare.com/privacypolicy.

3. Cookies, scripts and fonts

Our own code sets no cookies and stores nothing in your browser. The two small scripts on this website only show the buy bar on phones and send the contact form. Cloudflare’s security features may in individual cases set a strictly necessary cookie (for example “__cf_bm” or “cf_clearance”) to tell people apart from automated traffic. Such cookies are not used for tracking and don’t require consent (§ 25 (2) TDDDG). Fonts are loaded from this website’s own server, not from Google or another font service.

4. Contact form and email

If you use the contact form, we process your name, your email address and your message to answer you. The form is sent to this website’s own server function (Cloudflare Pages Functions), which checks it and passes it on as an email to our mailbox. It doesn’t store your message. To keep out spam, the form contains a hidden field and notes when the page was opened; no other spam service is used.

To send this email, we use the transactional email service of Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, part of the Sendinblue SAS group (Paris, France). Brevo processes your name, your email address and your message on our behalf, as our processor under a data processing agreement (Art. 28 GDPR), and only to deliver the email to us. Brevo stores data on servers in the EU (France and Belgium). Brevo group companies and service providers outside the EU, including in the USA and India, may access data, for example for support and maintenance. According to Brevo, these transfers are safeguarded by EU Standard Contractual Clauses and, for its US company, the EU-U.S. Data Privacy Framework (Art. 45 and 46 GDPR). Brevo keeps a log of each email it sends for us (delivery data such as sender and recipient address, subject line, time and delivery status; the subject line contains your name) and deletes it after one month. Brevo does not store a preview of the email. More information: brevo.com/legal/privacypolicy.

If you email us directly, we process your email address, your message and any details you include in the same way.

Our mailbox is hosted on Microsoft 365, provided to us through GoDaddy. Microsoft processes the emails on our behalf as a processor. Microsoft may process data outside the EU; its data processing terms provide safeguards for such transfers.

Legal basis: Art. 6 (1) (b) GDPR if your message relates to a purchase or a contract, otherwise our legitimate interest in answering your message (Art. 6 (1) (f) GDPR). We delete messages when your request has been dealt with, unless we have to keep them by law (for example as business correspondence).

5. Buying a product: Digistore24

When you click a buy button, you leave this website and go to the order form of Digistore24. Digistore24 sells and delivers our products as reseller: it is your contract partner and processes your order data (such as name, email address, billing address and payment details) as a separate controller for payment, invoicing, VAT, delivery of your download, refunds and its legal obligations. The order form names the Digistore24 company you buy from (for example Digistore24 GmbH, St.‑Godehard-Straße 32, 31139 Hildesheim, Germany) and links to its privacy policy.

Each buy button link contains a short campaign code (for example “aos-hero”) that tells us which button on the page was used. It contains no personal data.

After a purchase, Digistore24 shares order data with us as the product’s vendor, such as your name, email address, the product and the order date. We use it to answer your questions, to help with access to your download, and to meet our own accounting and tax obligations (Art. 6 (1) (b) and (c) GDPR, and our legitimate interest in customer service, Art. 6 (1) (f) GDPR). We keep it for as long as German commercial and tax law requires and delete it afterwards.

We don’t currently send newsletters or marketing emails. If that changes, it will only be with your separate consent, and this policy will be updated first.

6. Your rights

You have the right to:

Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interest, you can object at any time for reasons arising from your particular situation. We will then stop, unless we have compelling legitimate grounds or need the data to establish, exercise or defend legal claims.

To use any of these rights, email penelope@be-method.com. For data Digistore24 holds about your order, you can also contact Digistore24 directly.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work, or where the alleged infringement took place. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

7. Do you have to provide data?

You can browse this website without providing any personal data beyond the technical data your browser sends. To get an answer from us, we need a way to reply, usually your email address. To buy a product, Digistore24 needs the details requested on its order form; without them it cannot process the order.

We don’t use automated decision-making or profiling.

8. Security

This website is served over an encrypted connection (HTTPS); requests to the unencrypted address are redirected to it.

9. Changes

We update this policy when the website or our services change. The current version is always available on this page.