Privacy Policy

Last updated on August 18, 2026

This privacy policy applies to our website co-trainer.ai (B42 CoachZone). If you use the B42 App, the separate privacy policy for the B42 App applies.

1. General information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the full privacy policy below.

2. Data collection on our website

2.1. Who is responsible for data collection?

Data processing on this website is carried out by the website operator. Contact details can be found in section 3.2.

2.2. How do we collect your data?

Your data is collected, on the one hand, when you actively provide it to us — for example, by entering your email address in our newsletter form. Technical data is also collected automatically as soon as you visit our website (e.g. browser, operating system, time of page access).

2.3. What data do we collect and what do we use it for?

On our website, we process the following categories of personal data:

Contact details

Email address that you provide to us via the newsletter form on our website. We use this data to send you the requested information. You can withdraw your consent at any time, e.g. via the unsubscribe link in our emails or by informal notice to us.

Device information and technical data

When you visit our website, technical data is automatically collected, including IP address, browser type and version, operating system, referrer URL, pages visited, date and time of the visit, and time spent on the site. This data is required for the secure operation of the website.

Behavioral and usage data

With your consent, we analyze your usage behavior on our website (e.g. clicked areas, page views, session duration). The legal basis is Art. 6 (1) (a) GDPR. The tools we use are described in section 6.

2.4. What rights do you have regarding your data?

You have the right, at any time, to obtain information free of charge about the origin, recipient, and purpose of your stored personal data, as well as the right to rectification or deletion. If you have further questions, you can contact us at any time. You also have the right to lodge a complaint with the competent supervisory authority.

2.5. Analysis tools and third parties

When you visit our website, your usage behavior may be statistically evaluated — but only with your express consent. Detailed information on the tools used can be found in section 6.

3. General information and mandatory disclosures

3.1. Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

We would like to point out that data transmission over the internet may have security gaps. It is not possible to completely protect data from access by third parties.

3.2. Controller

The controller responsible for data processing on this website is:

SFY GmbH
Industriestraße 15
84149 Velden
Germany
Phone: +49 160 97978139
Email: info@b-42.com

Represented by managing director Andreas Gschaider.

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time — e.g. via the cookie settings in the footer of our website. An informal email to us is sufficient. The lawfulness of data processing carried out prior to the withdrawal remains unaffected.

3.4. Right to lodge a complaint with the competent supervisory authority

In the event of a breach of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent authority is the data protection officer of the federal state in which our company is headquartered. A list of supervisory authorities can be found at www.bfdi.bund.de.

3.5. Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.

3.6. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” in your browser’s address bar and the lock icon.

3.7. Access, rectification, and deletion

Within the scope of applicable legal provisions, you have the right, at any time, to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as, where applicable, a right to rectification or deletion. Please contact us at any time for this purpose.

3.8. Objection to promotional emails

We hereby object to the use of contact data published under the legal notice requirement for the purpose of sending unsolicited advertising. We reserve the right to take legal action in the event of unsolicited advertising.

3.9. Third-country transfers

Some of the services used on this website are based in the USA. Where we transfer data to the USA, this is done on the basis of the European Commission’s adequacy decision for the EU-US Data Privacy Framework (DPF) of July 10, 2023, provided the respective provider is certified under the DPF. The respective legal bases are indicated with the individual services.

4. Technical data collection

Our website uses cookies and comparable storage technologies (local storage). These are used to store certain settings and data for exchange with our system.

We distinguish between technically necessary functions required for the operation of the website, and optional analytics or marketing tools that we only load with your express consent. On your first visit to our website, you are shown a cookie banner developed by us, through which you can separately consent to or decline “Analytics” (PostHog) and “Marketing” (Google Tag Manager). Your consent decision is stored locally in your browser (local storage); no transmission to third parties takes place. You can withdraw your consent at any time with effect for the future by reopening the cookie settings via the corresponding link in our website’s footer.

Technically necessary functions are used on the basis of Art. 6 (1) (f) GDPR. PostHog and Google Tag Manager are loaded exclusively on the basis of your consent under Art. 6 (1) (a) GDPR.

4.2. Server log files

When you visit our website, information is automatically stored in server log files transmitted by your browser:

Browser type and version
Operating system used
Referrer URL
Time of the server request
IP address

This data is not merged with data from other sources. The legal basis is Art. 6 (1) (f) GDPR.

5. Hosting

5.1. Vercel

Our website is hosted with Vercel. The provider is Vercel Inc., 340 Pine Street, Suite 603, San Francisco, CA 94104, USA.

Vercel automatically processes technical data (in particular server log files as described in section 4.2) while operating the website. The data is processed on Vercel’s servers in the USA. Transfer is based on the EU-US Data Privacy Framework; Vercel is certified under the DPF.

The use of Vercel is based on Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with Vercel. Further information: vercel.com/legal/privacy-policy.

6. Analytics tools

6.1. PostHog

This website uses PostHog, a product and web analytics tool by PostHog Inc. We use the EU cloud variant of PostHog; all data is processed and stored exclusively on servers within the European Union. No transfer of personal data to third countries takes place.

PostHog allows us to analyze how visitors use our website (e.g. pages viewed, click paths, session duration) in order to improve our offering.

PostHog is only used with your express consent. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings on our website.

We have concluded a data processing agreement with PostHog. Further information: posthog.com/privacy.

6.2. Google Tag Manager

This website uses Google Tag Manager by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is a tool for managing website tags through a central interface. The Tag Manager itself does not set cookies and does not collect personal data. However, it enables other marketing tags to fire, which may in turn collect data.

Google Tag Manager is only loaded with your express consent. The legal basis is Art. 6 (1) (a) GDPR. Further information: Google Tag Manager use policy.

7. Plugins and tools

7.1. YouTube

Our website uses embedded videos from the Google-operated platform YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA — in privacy-enhanced mode (youtube-nocookie.com). Videos are only loaded once you click play; only then is a connection to YouTube’s servers established.

When you play a video, YouTube learns that you have visited this page. If you are logged into your YouTube account, YouTube can associate your browsing behavior directly with your profile. You can prevent this by logging out of your YouTube account beforehand.

The legal basis is Art. 6 (1) (f) GDPR. Transfer to the USA is based on the EU-US Data Privacy Framework; Google LLC is certified under the DPF. Further information: policies.google.com/privacy.

8. Links to other B42 services

Our website links to further B42 services, in particular for registration at teams.b-42.com and to our support portal at support.b-42.com. Data processing on those services is governed by their own privacy policies.

9. Your rights

9.1. Data subject rights

As a data subject, you have the following rights:

Right of access (Art. 15 GDPR): You can request information about the data we process about you.
Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
Right to erasure (Art. 17 GDPR): Under certain conditions, you can request the deletion of your data.
Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
Right to data portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
Right to object (Art. 21 GDPR): You can object to the processing of your data.

The restrictions under §§ 34 and 35 BDSG apply to the right of access and the right to erasure.

9.2. Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection supervisory authority about our processing of your personal data.

You can withdraw a consent you have given at any time with effect for the future. Processing carried out before the withdrawal is not affected.

9.4. Objection to direct marketing

Under Art. 21 (2) GDPR, you have the right to object at any time to the processing of your personal data for the purpose of direct marketing. Following your objection, we will no longer process your data for this purpose.

9.5. Links to other websites

Our website may contain links to offerings from other providers, including other B42 services (see section 8). This privacy policy applies exclusively to co-trainer.ai. We have no influence over the data protection practices of other providers.

9.6. Changes to this privacy policy

We reserve the right to amend this privacy policy at any time in compliance with applicable data protection regulations. The current version is available on this page.

9.7. Contact

If you have questions about the collection, processing, or use of your personal data, please contact:

SFY GmbH
Industriestraße 15
84149 Velden
Germany
Email: info@b-42.com