Privacy

Controller

The controller responsible for data processing on this website is:

HYPERATHLETE Lukas & Jonas Lüder GbR, represented by the partners Lukas Lüder and Jonas Lüder, Feldstraße 12, 25355 Barmstedt, Germany. Email: kontakt@hyperathlete.de.

In short

This website sets no cookies. We count visits with Vercel Web Analytics (see below). Fonts are served from our own server.

Visiting the site (server logs)

When you open the page, our host processes technically necessary connection data: IP address, time, requested address, volume of data transferred, browser type and operating system — for as long as it takes to run the site and fend off attacks.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in operating the site securely.

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA; the waiting-list and contact forms are transmitted via Vercel as well. Data may be transferred to the USA. Vercel is certified under the EU-US Data Privacy Framework; transfers are additionally covered by standard contractual clauses under Art. 46 GDPR.

To see how many people visit the site and which pages they view, we use Vercel Web Analytics. No cookies are set and no profiles are created; visits are only counted in aggregate. The legal basis is our legitimate interest in measuring the reach of our site (Art. 6(1)(f) GDPR). Storage period: for our plan, Vercel keeps this data for at least twelve months; Vercel does not state a fixed deletion period.

Invitation and waiting list

If you join the waiting list, we process your email address and your first and last name in order to let you know when applications for the Hyperathlete Program open, and to send you news about it. Providing them is voluntary; without them we simply cannot put you on the list. If you signed up before 1 October 2026, you receive messages within the scope of the consent you gave then: news about the reveal on 1 October 2026 and what follows. If you sign up with an invitation code, we store the code together with your entry so that we know which invitation you came through.

We use the double opt-in procedure: after submitting, you receive an email with a confirmation link. Only once you click it are you on the list. If you do not click, we do not write to you.

Until you confirm, we store your address and IP address on the basis of our legitimate interest in a sign-up procedure that resists abuse (Art. 6(1)(f) GDPR); we also use the IP address to slow down mass sign-ups. Unconfirmed entries are deleted once the confirmation link has expired.

To prove your consent, we store the wording you agreed to, the times of sign-up and confirmation, and the IP addresses used (Art. 7(1) GDPR). After you confirm, we receive an internal notification containing your address.

The legal basis for sending you news is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — by replying to one of our emails or informally to kontakt@hyperathlete.de. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Retention: we store your address until you withdraw. Beyond that, we keep the proof of your consent for as long as we may need it to defend against claims (statutory limitation period; Art. 6(1)(f) GDPR).

News by email

If you sign up for news at the bottom of the home page, we process your email address and your first name in order to send you news on the topics you agreed to: the Hyperathlete Program and its cohorts, the HYPERATHLETE® Studio, the HYPERATHLETE app, our events and our content on healthspan and longevity. Providing them is voluntary. This list is separate from the invitation list.

We use the double opt-in procedure: after submitting, you receive an email with a link. Only once you select “Confirm sign-up” on the page behind it are you on the list.

Until you confirm, we store your address, first name and IP address on the basis of our legitimate interest in a sign-up procedure that resists abuse (Art. 6(1)(f) GDPR). Unconfirmed entries are deleted after 7 days.

To prove your consent, we store the wording you agreed to, the times of sign-up and confirmation, and the IP addresses used (Art. 7(1) GDPR).

The legal basis for sending you news is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — by replying to one of our emails or informally to kontakt@hyperathlete.de. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Retention: we store your address until you withdraw. Beyond that, we keep the proof of your consent for as long as we may need it to defend against claims (statutory limitation period; Art. 6(1)(f) GDPR).

Contact form and email

If you write to us via the contact form or by email, we process your details in order to answer your enquiry. Via the form, these are your email address, your message and, if you provide it, your name. The form sends your message as an email to our mailbox kontakt@hyperathlete.de; we keep no further copy.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or steps prior to entering into one, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Retention: we delete your enquiry once it has been dealt with, unless statutory retention obligations require otherwise.

Recipients of your data

The entries of both lists are stored in a Supabase database in the Frankfurt am Main data centre. The provider is Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Access from third countries is covered by standard contractual clauses under Art. 46 GDPR. You can request a copy of these safeguards from us.

Emails are sent by our email provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, which also hosts the mailbox that receives messages from the contact form. Processing takes place in Germany.

Data processing agreements under Art. 28 GDPR are in place with Supabase, Strato and Vercel. Beyond this we do not pass on your data.

Our presence on Instagram

We operate profiles on the social network Instagram. This privacy policy applies to this website; the following applies in addition to processing on Instagram itself.

The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. When you visit one of our profiles, Meta processes your usage data and generates statistics on the use of our profiles, among other things. For these statistics we are joint controllers with Meta (Art. 26 GDPR). We can neither inspect nor influence which data Meta processes in detail.

The legal basis is our legitimate interest in presenting ourselves and communicating via social networks (Art. 6(1)(f) GDPR). Meta may also transfer data to the USA.

The arrangement under Art. 26(2) GDPR and Meta's own information on processing are available in Meta's privacy policy. You may also assert your rights under the GDPR directly against Meta; Meta has assumed primary responsibility for them.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). An informal email to kontakt@hyperathlete.de is enough.

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority.