Privacy Policy

This English translation is provided for your convenience. Only the German version is legally binding.

Last updated: October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mahamid Martial Arts
Owner: Hassan Mahamid
Herrnstr. 16
63065 Offenbach am Main
Germany
Phone: +49 69 98192468
Email: sifu.mahamid@yahoo.com

2. General information on data processing

We only process personal data to the extent necessary to provide a functional website, our content and our services. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) and (f) GDPR (legitimate interest). Information is only stored on or accessed from your device with your consent pursuant to Section 25(1) TDDDG, unless this is strictly necessary pursuant to Section 25(2) TDDDG.

Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention periods prevent deletion.

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the website, the host processes technically necessary data (e.g. IP address, date and time of access, page requested, browser, operating system, referrer URL) in so-called server log files. This processing takes place to provide the website securely and reliably on the basis of Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

5. Cookies and consent management (Borlabs Cookie)

We use the consent management tool Borlabs Cookie by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. Borlabs Cookie stores your consent decision and a random ID in a cookie (borlabs-cookie) so that your choice can be taken into account and documented on further visits. The data is processed on our server; nothing is transferred to Borlabs. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR and Section 25(2) TDDDG. You can change or withdraw your consent at any time via the cookie settings on this website.

6. Contacting us

Contact form

If you send us an enquiry via the contact form, we process your details (name, phone number, email address, subject, message) to handle the enquiry and any follow-up questions. The details are sent to us by email. The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract or pre-contractual measures (e.g. trial class, membership), otherwise Art. 6(1)(f) GDPR. To protect against spam, we use an invisible honeypot method (WP Armour) that works without cookies and without transferring data to third parties.

Email and phone

If you contact us by email or phone, we process your details to handle your request on the same legal bases. We use the Yahoo Mail service (Yahoo EMEA Limited, Ireland) to receive emails.

You can also contact us via WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes your phone number, profile name, message content and metadata; a transfer to Meta Platforms Inc. in the USA cannot be ruled out. Contacting us via WhatsApp is voluntary; alternatively, you can use phone, email or the contact form. The legal basis is Art. 6(1)(a) or (b) GDPR. Further information: WhatsApp privacy policy.

7. Google Maps

On our contact page we may display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you have given your consent via Borlabs Cookie. In doing so, your IP address and usage data, among other things, are transferred to Google; a transfer to the USA is possible. Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG; you can withdraw it at any time. Further information: Google privacy policy.

8. Audience measurement with Independent Analytics

We use the WordPress plugin Independent Analytics to evaluate the use of our website statistically (e.g. pages viewed, time spent, referring page, device type, approximate country). The analysis works without cookies; IP addresses are not stored permanently but are only processed in shortened or hashed form. All data is stored exclusively on our own server and is not passed on to third parties. The legal basis is our legitimate interest in improving our services pursuant to Art. 6(1)(f) GDPR.

9. Security (Wordfence)

To protect the website against attacks, we use the security plugin Wordfence by Defiant Inc., 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA. For this purpose, Wordfence processes IP addresses and the time and type of requests and compares them with information about known attacks. In doing so, the IP address may be transferred to servers of Defiant Inc. in the USA. The legal basis is our legitimate interest in the security of the website pursuant to Art. 6(1)(f) GDPR. Further information: Wordfence privacy policy.

10. Fonts and icons

The fonts and icons used on this website are loaded locally from our server. No connection is made to servers of Google or other third-party providers.

11. Links to social networks

On our website we link to our profiles on Facebook and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are simple links; no data is transferred to these networks when you visit our website. The data protection provisions of the respective provider only apply once you follow a link.

12. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to withdraw consent with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.

13. Changes to this privacy policy

We update this privacy policy as soon as data processing on our website changes. The current version published on this page applies.