Privacy Policy

1. Who is responsible

Joshua Warrilow
Mitterhof 15
83122 Samerberg, Germany
Email: hello@americanoclub.com

We are not legally required to appoint a data protection officer and have not appointed one.

2. Hosting and server logs

This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you open a page, Vercel processes technically necessary connection data in server logs: your IP address, the date and time, the page or file requested, the amount of data transferred, the referrer URL, your browser type and operating system.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in running the site securely and defending against attacks. A data processing agreement under Art. 28 GDPR is in place with Vercel, and EU Standard Contractual Clauses cover transfers to the USA. Logs are stored briefly and deleted automatically.

3. Contact and review forms

The contact form collects your name, email address, optionally your group size, and your message. The review form collects an optional name, a star rating and your text. We use this only to answer your enquiry or to review your feedback.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns joining a session or booking a team day, and otherwise Art. 6(1)(f) GDPR (answering enquiries). Reviews are published only after we read them, and only with the name you gave. Data is deleted once your enquiry is closed, unless a statutory retention period applies.

Emails are delivered by Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, as our processor, again covered by EU Standard Contractual Clauses.

4. Fonts

All fonts are served from our own server. No connection to Google's servers is made and your IP address is not passed to a third party for fonts.

5. Cookieless measurement

We measure traffic with Vercel Web Analytics, provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. It records only aggregate information: the page opened, the referring source, device type and country.

It sets no cookies and stores no persistent identifier on your device. There is no tracking across other websites and no profiling — which is why this site needs neither a cookie banner nor your consent.

The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in understanding, in aggregate, which content people read so we can improve the site. You can object at any time under Art. 21 GDPR by emailing us.

6. WhatsApp group, Instagram and Google Maps

This site only contains links to our WhatsApp group, our Instagram profile and Google Maps — nothing from those services is embedded. No data reaches those providers until you actively click a link, after which their own privacy policies apply: WhatsApp (Meta), Instagram (Meta) and Google. If you join the WhatsApp group, your phone number and profile name are visible to the other members.

7. Photos and video at sessions

We occasionally take photos and video at sessions and team days for social media. Anything published rests on your consent under Art. 6(1)(a) GDPR. Tell us on court or by email if you'd rather not be filmed — at any time, with no awkwardness, and we'll remove anything already posted on request.

8. Your rights

At any time you have the right to:

• access the data we hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent with future effect (Art. 7(3) GDPR)

Email hello@americanoclub.com and we'll handle it. You also have the right to complain to a supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

9. Encryption and automated decisions

The site is served exclusively over an encrypted HTTPS connection. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.