Privacy Policy
Datenschutzerklärung for the Second Brain website
Who is responsible for your data
Stefan Khuc, sole proprietor, Stettiner Str. 7, 76437 Rastatt, Germany, is the controller for this website. Contact stefan@stefankhuc.com
Hosting and audience measurement
Framer B.V. (Amsterdam, Netherlands) hosts the website. Serving pages requires technical request information such as your IP address and browser details. Framer’s built-in analytics uses a rotating identifier to produce aggregate site statistics and does not set analytics cookies. We use these statistics to understand page visits and clicks. Operating and improving the site are legitimate interests under Article 6(1)(f) GDPR.
See Framer’s privacy information
Cookie settings and optional analytics
Our cookie banner stores your choice in your browser’s local storage so we don’t ask again on every page. This storage is strictly necessary to respect your choice (§ 25(2) no. 2 TDDDG; Article 6(1)(c) and (f) GDPR).
Only if you allow analytics in the cookie settings do we load Microsoft Clarity (Microsoft Ireland Operations Limited, Ireland). Clarity sets cookies or similar identifiers and processes pseudonymous usage data such as pages visited, clicks, scrolling, mouse movement, device and browser information, and an approximate location derived from your IP address. It may record how you interact with a page as a session replay and create heatmaps; text you type into forms is masked. We use this to understand and improve the site. The legal basis is your consent under § 25(1) TDDDG and Article 6(1)(a) GDPR. You can withdraw consent at any time with the “Cookie Settings” link on every page. Microsoft may transfer data to Microsoft Corporation in the USA, which is certified under the EU-U.S. Data Privacy Framework.
See Microsoft’s privacy statement and the Clarity privacy FAQ
Free templates and emails
When you request a free template, Kit processes your email address, the form you used, and the confirmation and delivery activity. We use this information to confirm the request and deliver the selected template and, if you agree on the form, to send you occasional emails about AI and Notion. You confirm your sign-up through a link in a confirmation email (double opt-in). Kit records when you signed up and confirmed, and measures whether our emails are opened and which links are clicked, so we can improve them. The legal basis is your consent under Article 6(1)(a) GDPR and § 7(2) UWG. You can withdraw it at any time with the unsubscribe link in every email or by contacting us. The email address is needed for this delivery method.
Kit may show a Google reCAPTCHA challenge to protect the form against abusive submissions. It may use technical device and interaction information. Preventing abuse is our legitimate interest under Article 6(1)(f) GDPR.
Support form and email contact
When you use the support form or email us, we process your name, email address, and message to answer your request. Support form submissions are stored by Framer and forwarded to us by email. If your request relates to a purchase or a possible contract, the legal basis is Article 6(1)(b) GDPR; otherwise it is our legitimate interest in answering enquiries under Article 6(1)(f). We delete your messages once your request is resolved, unless statutory retention periods apply.
Booking a call
The booking calendar on our audit page is provided by Cal.com, Inc. (USA). When the calendar loads, Cal.com receives technical information such as your IP address and browser details. When you book, Cal.com processes your name, email address, the selected time, and any answers you enter, and sends booking confirmations and reminders. We use this information to prepare and hold the call under Article 6(1)(b) GDPR (steps prior to entering into a contract).
Purchases and template access
The purchase button takes you to Notion Marketplace. Notion processes checkout, payment, and receipts, and handles refund requests under its Marketplace refund policy. We receive the order details Notion shares with sellers, which we need to support customers and keep required records. We use these details to carry out the purchase under Article 6(1)(b) GDPR and to meet applicable legal obligations under Article 6(1)(c).
The template is added to your Notion workspace when you buy it. Notion handles its own site and account data when you use its service.
See Notion’s Marketplace refund policy
Retention and international processing
We keep request, confirmation, and support information for the time needed to deliver the template, resolve delivery or support issues, and document requests. We retain purchase records for applicable statutory periods. Service providers may process data outside the EEA. Their data-processing terms describe the safeguards they use, including standard contractual clauses where applicable. Contact us if you would like more information about the safeguards that apply.
Your rights
You may request access, correction, erasure, restriction, and portability where applicable. You may object to processing based on legitimate interests and withdraw consent at any time. Withdrawal applies to future processing. To exercise a right, contact us at the address above. You may also complain to a data protection supervisory authority, including LfDI Baden-Württemberg
Right to object (Article 21 GDPR)
Where we process your data on the basis of legitimate interests under Article 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. Where we use your data for direct marketing, you can object at any time without giving reasons, and we will stop using it for that purpose.
Automated decisions
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
Last updated: November 2026