Privacy Policy

Last Updated: June 2026

  1. Data Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Avaton Consulting Ltd.
Represented by Perry Germani
12 Iliyantsi Boulevard
1220 Sofia
Bulgaria

Email: admin@avatonconsulting.com

Website: https://www.simplysuccessful.net

  1. General Information

Protecting your privacy and personal data is important to us.

This Privacy Policy explains how we collect, process, use, store and protect your personal information when you visit our website, purchase our products or services, subscribe to our newsletter, book appointments, join our online community or otherwise interact with us.

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable national data protection laws, and this Privacy Policy.

By using our website, you acknowledge that your personal data may be processed as described in this Privacy Policy.

  1. Scope of this Privacy Policy

This Privacy Policy applies to all services, products and digital offerings available through https://www.simplysuccessful.net, including but not limited to:

  1. Definitions

This Privacy Policy uses the terminology defined by the General Data Protection Regulation (GDPR).

Personal Data

“Personal Data” means any information relating to an identified or identifiable natural person.

An identifiable person is one who can be identified directly or indirectly by reference to information such as:

Processing

“Processing” means any operation performed on Personal Data, whether or not by automated means.

This includes, among other things:

Controller

The “Controller” is the natural or legal person who determines the purposes and means of processing Personal Data.

Processor

A “Processor” is a natural or legal person that processes Personal Data on behalf of the Controller.

  1. Legal Basis for Processing

We process Personal Data only where a lawful basis exists under Article 6 GDPR.

Consent – Article 6(1)(a) GDPR

Processing based on your freely given consent, including:

You may withdraw your consent at any time with future effect.

Performance of a Contract – Article 6(1)(b) GDPR

Processing necessary for:

Legal Obligation – Article 6(1)(c) GDPR

Processing necessary for compliance with legal obligations, including:

Legitimate Interests – Article 6(1)(f) GDPR

Processing necessary for our legitimate business interests, including:

  1. Data Security

We implement appropriate technical and organizational measures designed to protect Personal Data against accidental loss, destruction, unauthorized disclosure, unauthorized access, alteration, misuse and unlawful processing.

Our security measures are continuously reviewed and updated in accordance with technological developments and industry best practices.

  1. SSL / TLS Encryption

This website uses SSL/TLS encryption to ensure the secure transmission of confidential information.

An encrypted connection is indicated by:

SSL/TLS encryption protects all data transmitted between your device and our servers against unauthorized access.

  1. Website Hosting

Our website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

For the purpose of providing a secure, reliable and efficient website, our hosting provider processes technical information on our behalf.

This information may include:

This processing is necessary to ensure website availability, technical functionality, cybersecurity, system stability, troubleshooting and abuse prevention.

The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR.

Where required by law, a Data Processing Agreement pursuant to Article 28 GDPR has been concluded with our hosting provider.

  1. Server Log Files

Whenever you visit our website, our web server automatically records certain technical information in server log files.

The information collected may include:

These data are processed exclusively for ensuring secure website operation, preventing cyber attacks, detecting misuse, maintaining system integrity, identifying technical issues and improving website performance.

These data are not merged with other personal data unless required for security investigations.

The legal basis is Article 6(1)(f) GDPR.

 

  1. Cookies

Our website uses cookies and similar technologies to ensure the proper functioning of the website, improve user experience, analyze website traffic and support our marketing activities.

Cookies are small text files stored on your device that enable certain website functions and recognize your browser during future visits.

Depending on their purpose, we may use the following categories of cookies:

Strictly necessary cookies are essential for the operation of the website and cannot be disabled.

All other cookies are only placed after you have provided your consent through our Consent Management Platform.

The legal basis for processing is:

You may modify or withdraw your cookie preferences at any time through our Cookie Settings.

  1. Consent Management Platform

To comply with applicable privacy laws, we use a Consent Management Platform (CMP) to obtain, manage and document your consent for the use of cookies and similar technologies.

When you first visit our website, you are given the opportunity to accept or reject different categories of cookies.

Your consent preferences are securely stored and may include:

You may change or withdraw your consent at any time by reopening the Cookie Settings on our website.

The legal basis for this processing is Articles 6(1)(a), 6(1)(c) and 6(1)(f) GDPR.

  1. WordPress

Our website is built on the WordPress Content Management System.

WordPress processes certain technical information required to ensure the secure and reliable operation of the website.

Such information may include:

These data are processed solely for the operation, maintenance and security of the website.

The legal basis is Article 6(1)(f) GDPR.

  1. Elementor and Elementor Pro

We use Elementor and Elementor Pro to design, manage and maintain our website.

Elementor enables us to display website content, create landing pages, contact forms and other interactive website elements.

During the technical delivery of website content, certain technical information may be processed, including:

This processing is necessary to ensure proper website functionality.

The legal basis is Article 6(1)(f) GDPR.

  1. Google Fonts

To provide a consistent and visually appealing user experience, our website may use Google Fonts.

Depending on the technical configuration of the website, Google Fonts may be:

Where fonts are loaded from Google servers, your browser may establish a direct connection with Google.

In this case, Google may receive technical information including:

Where legally required, Google Fonts are loaded only after you have provided your consent through our Consent Management Platform.

The legal basis is Article 6(1)(a) GDPR where consent is required and Article 6(1)(f) GDPR where fonts are hosted locally.

For additional information, please visit:

https://policies.google.com/privacy

  1. Custom Fonts

We may use custom fonts that are installed directly on our servers or licensed from third-party font providers.

Where fonts are hosted locally, no personal data are transmitted to external font providers.

Should externally hosted fonts be introduced in the future, they will only be used in compliance with applicable data protection laws and, where required, based on your prior consent.

  1. Contact Forms

Our website provides contact forms that allow visitors to communicate with us.

When you submit a contact form, we may process:

We process this information solely for the purpose of responding to your enquiry and providing the requested services.

The legal basis is:

Your data will not be shared with third parties unless required by law or necessary to process your request.

 

  1. User Accounts

Certain areas of our website may require you to create a user account in order to access protected content, online courses, digital products or community features.

When you register, we may collect and process the following information:

Your password is stored in encrypted form and is never visible to us.

The legal basis for processing is Article 6(1)(b) GDPR.

  1. Comments

Where commenting functionality is available, visitors may leave comments on articles or other content published on our website.

When submitting a comment, we may process:

The IP address is processed for security reasons and to prevent spam and abuse.

Comments may remain publicly visible until they are deleted by the website administrator or at your request where legally applicable.

The legal basis is Article 6(1)(f) GDPR.

  1. Media Uploads

Where users are permitted to upload images or other files to our website, we recommend removing embedded location data (EXIF GPS) before uploading.

Visitors to the website may be able to download uploaded images and extract any embedded location data.

Users are responsible for ensuring that uploaded content does not contain confidential or unnecessary personal information.

  1. Digital Downloads

Our website may provide access to free or paid digital resources, including:

When requesting or purchasing digital content, we may process:

The processing is necessary for delivering the requested content, maintaining download records, customer support and fraud prevention.

The legal basis is Article 6(1)(b) GDPR and, where applicable, Article 6(1)(a) GDPR.

  1. Membership Areas

Our website may provide access to protected membership areas containing educational materials, coaching resources, digital products and exclusive content.

When using these services we may process:

These data are processed exclusively to provide the requested services, improve our educational offerings and ensure the secure operation of our membership platform.

The legal basis is Article 6(1)(b) GDPR.

  1. Community Platforms

We may provide access to online communities hosted on third-party platforms, including Skool and similar learning environments.

Participation in such communities is voluntary.

Depending on your activity, the following information may be processed:

The respective platform provider processes personal data in accordance with its own Privacy Policy.

We recommend reviewing the privacy policies of any third-party platform before creating an account.

  1. Communication with Us

If you contact us via email, contact forms, social media, messaging services or any other communication channel, we process the information you voluntarily provide to us.

Depending on the nature of your enquiry, this may include:

Your information is processed solely for the purpose of responding to your enquiry, providing customer support and maintaining our business relationship.

The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

 

  1. Newsletter

You may subscribe to our newsletter to receive updates about our products, services, online courses, workshops, coaching programs, events, promotions and other business-related information.

We use Brevo (formerly Sendinblue) as our email marketing platform.

Provider:

Brevo SAS
106 Boulevard Haussmann
75008 Paris
France

When you subscribe to our newsletter, we may process:

Our newsletter registration uses the Double Opt-In procedure.

After submitting the registration form, you will receive an email requesting confirmation of your subscription. Your subscription will only become active after clicking the confirmation link.

Brevo also collects statistical information regarding newsletter performance, including:

These statistics help us improve the quality and relevance of our newsletters.

The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR.

You may unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every email or by contacting us directly.

For further information please visit:

https://www.brevo.com/legal/privacypolicy/

  1. Google Analytics 4

Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors interact with our website in order to improve its functionality and performance.

Google Analytics may process information such as:

Google Analytics uses cookies and similar technologies.

Analytics tracking is activated only after you have provided your consent through our Consent Management Platform.

Where available, IP anonymization is enabled.

The legal basis is Article 6(1)(a) GDPR.

More information is available at:

https://policies.google.com/privacy

  1. Google Tag Manager

Our website may use Google Tag Manager.

Google Tag Manager is a tag management system that enables us to manage website tags through a single interface.

Google Tag Manager itself does not collect personal data. It merely triggers other tags, which may collect data independently.

Where tags require consent, they are only activated after your consent has been obtained.

The legal basis is Article 6(1)(a) GDPR where applicable.

  1. Google Ads and Remarketing

We may use Google Ads and Google Remarketing services to advertise our products and services.

Google may use cookies and similar technologies to:

The legal basis is Article 6(1)(a) GDPR.

  1. Meta Pixel

Our website uses the Meta Pixel provided by Meta Platforms Ireland Limited.

Provider:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

Meta Pixel enables us to measure the effectiveness of our advertising campaigns and improve our marketing activities.

The following information may be processed:

If you are logged into Facebook or Instagram, Meta may associate this information with your account.

Meta Pixel is activated only after you have provided your consent.

The legal basis is Article 6(1)(a) GDPR.

Further information is available at:

https://www.facebook.com/privacy/policy

  1. Meta Conversions API

To improve conversion tracking and marketing performance, we may also use the Meta Conversions API.

Unlike browser-based tracking, the Conversions API allows certain events to be transmitted securely from our server to Meta.

The use of this service is subject to your prior consent where required by applicable law.

The legal basis is Article 6(1)(a) GDPR.

  1. LinkedIn

Our website may include LinkedIn features or use LinkedIn advertising services.

Provider:

LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland

Depending on your interaction, LinkedIn may process personal data in accordance with its own Privacy Policy.

Further information:

https://www.linkedin.com/legal/privacy-policy

  1. YouTube

Our website may embed videos from YouTube.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When you visit a page containing embedded YouTube videos, your browser may establish a connection to YouTube servers.

This may result in the processing of:

Where technically possible, we use YouTube’s Enhanced Privacy Mode.

Embedded videos requiring cookies are only activated after your consent through our Consent Management Platform.

The legal basis is Article 6(1)(a) GDPR.

 

  1. Calendly

To facilitate the scheduling of appointments, consultations and coaching sessions, we use Calendly.

Provider:

Calendly LLC
Atlanta, Georgia
United States

When you book an appointment through Calendly, the following personal data may be processed:

Your personal data are processed exclusively for the purpose of organizing, confirming and conducting the requested appointment.

The legal basis for processing is:

For further information, please visit:

https://calendly.com/privacy

  1. Skool

We use Skool to provide our online community, educational content, digital courses, membership areas and related services.

Participation in our community is voluntary.

Depending on your activity within the platform, the following personal data may be processed:

Skool processes personal data in accordance with its own Privacy Policy.

We recommend reviewing Skool’s Privacy Policy before creating an account.

Further information is available at:

https://www.skool.com/privacy

  1. CopeCart

For the sale of digital products, coaching programs and online services, we use CopeCart as our payment and order processing platform.

Provider:

CopeCart GmbH
Rosenstraße 2
10178 Berlin
Germany

When you purchase one of our products or services, personal data necessary for order processing may be transferred to CopeCart.

This may include:

The processing is necessary for contract fulfillment, payment processing, fraud prevention and legal compliance.

The legal basis is Article 6(1)(b) GDPR.

Further information:

https://www.copecart.com/privacy

  1. Payment Processing

Payments for our products and services may be processed through third-party payment providers.

Depending on the selected payment method, the respective payment provider may process:

Only the information necessary to complete the payment transaction is transmitted.

The legal basis is Article 6(1)(b) GDPR.

  1. Email Communication

If you contact us by email, we process the personal information you voluntarily provide.

This may include:

Your information is processed solely to respond to your enquiry, provide customer support and maintain our business relationship.

The legal basis is:

  1. Social Media

We maintain business profiles on various social media platforms, including:

When you visit our social media pages or interact with our content, the respective platform operators process personal data in accordance with their own Privacy Policies.

We may receive anonymous statistical information (“Insights”) regarding visitor interactions and audience engagement.

We have no control over the data processing activities carried out directly by these social media providers.

Please consult the privacy policies of the respective providers for additional information.

  1. Links to External Websites

Our website may contain links to external websites operated by third parties.

We are not responsible for the privacy practices or content of these external websites.

Once you leave our website, the privacy policy of the respective website applies.

We encourage you to review the privacy policies of all websites you visit.

  1. Recruitment and Job Applications

If you apply for a position with us, we process your application documents solely for the purpose of conducting the recruitment process.

Depending on the application, this may include:

If no employment relationship is established, your application documents will be deleted after the applicable legal retention period unless you have consented to a longer retention period.

The legal basis is Article 6(1)(b) GDPR.

 

  1. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which they were collected or to comply with applicable legal obligations.

The retention period depends on the nature of the data and the legal requirements applicable to the respective processing activity.

In particular, personal data may be retained:

Once the applicable retention period has expired or the purpose of processing no longer exists, personal data will be securely deleted or anonymized.

  1. Disclosure of Personal Data

We do not sell or rent your personal data.

Personal data may be disclosed only where necessary for the purposes described in this Privacy Policy.

Recipients may include:

Where external service providers process personal data on our behalf, they do so under Data Processing Agreements in accordance with Article 28 GDPR, where applicable.

  1. International Data Transfers

Some of the third-party services used on our website may transfer personal data to countries outside the European Economic Area (EEA), including the United States.

Whenever such transfers occur, we take appropriate safeguards to ensure that your personal data remain adequately protected.

These safeguards may include:

Additional information regarding international transfers can be found in the respective privacy policies of the relevant service providers.

  1. Your Rights under the GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data.

Right of Access

You have the right to request confirmation as to whether we process personal data concerning you and, where that is the case, to obtain access to such data.

(Article 15 GDPR)

Right to Rectification

You have the right to request that inaccurate or incomplete personal data be corrected without undue delay.

(Article 16 GDPR)

Right to Erasure (“Right to be Forgotten”)

You have the right to request the deletion of your personal data where the legal requirements for deletion are met.

(Article 17 GDPR)

Right to Restriction of Processing

You have the right to request restriction of processing under the circumstances set out in Article 18 GDPR.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have those data transmitted to another controller.

(Article 20 GDPR)

Right to Object

Where processing is based on our legitimate interests, you have the right to object to such processing at any time on grounds relating to your particular situation.

(Article 21 GDPR)

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

  1. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.

This right exists without prejudice to any other administrative or judicial remedies available to you.

Information about European supervisory authorities is available at:

https://edpb.europa.eu/

  1. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

Should this change in the future, this Privacy Policy will be updated accordingly.

  1. Changes to this Privacy Policy

We reserve the right to amend or update this Privacy Policy at any time to reflect:

The latest version published on our website shall always apply.

We recommend reviewing this Privacy Policy periodically.

  1. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, or if you wish to exercise any of your rights under the GDPR, please contact us:

Avaton Consulting Ltd.
Represented by Perry Germani
12 Iliyantsi Boulevard
1220 Sofia
Bulgaria

Email: admin@avatonconsulting.com

Website: https://www.simplysuccessful.net

Last Updated: June 2026