Page Street Performance — Privacy Policy

Last updated: August 16, 2026

This Privacy Policy explains how Page Street Performance UG (haftungsbeschränkt), operating under the brand name Page Street Performance (“PSP,” “we,” “us,” or “our”), collects, uses, stores, and protects personal data.

PSP is a global coaching service, legally domiciled in Germany and open to athletes anywhere in the world. We handle personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German law — and we apply that standard of care to every athlete, wherever you live, not only where the law requires it.

1. Who This Policy Applies To

This Privacy Policy applies to individuals who:

  • Visit PSP websites or digital platforms
  • Enroll in PSP programs or subscriptions
  • Participate in PSP community spaces (online or in person)
  • Communicate with PSP or its coaches
  • Use PSP tools, content, or services

2. Data Controller

The data controller responsible for processing your personal data is:

Page Street Performance UG (haftungsbeschränkt)
c/o Betahaus
Rudi-Dutschke-Straße 23
10969 Berlin
Germany
legal@pagestreetperformance.com

3. What Personal Data We Collect

Depending on how you interact with PSP, we may collect the following categories of data:

a. Information You Provide Directly

  • Name, email address, and contact details
  • Account and subscription information
  • Onboarding responses and stated preferences
  • Training, movement, nutrition, or lifestyle information you choose to share
  • Communications with PSP or its coaches

b. Health & Performance Information

To coach you safely and effectively, PSP may process information you share about:

  • Physical activity, training habits, and training availability
  • Health screening responses, declared conditions, and contraindications to exercise
  • Self-reported injuries, pain, and physical limitations
  • Subjective readiness — energy, sleep, stress, perceived exertion, and recovery
  • Nutrition and fueling information, including appetite and intake reporting and, with separate consent, allergies and intolerances
  • Menstrual-health information, where you separately consent to share it
  • Body metrics such as weight or measurements, where you choose to share them
  • Your goals, in your own words, and reflections related to mindset or stress

Some of this information is health data and therefore special category data under Article 9 GDPR — see section 4. It is processed solely to support coaching, education, and service delivery, never for advertising, and is visible only to you and the coaching staff responsible for you.

c. Information We Derive

PSP’s software organizes what you self-report into summaries for your coach — for example, training-load and effort trends, adherence patterns, and readiness or mindset indicators derived from your check-ins and reflections. These derived indicators exist to help your coach see when something deserves attention; they do not trigger automated decisions about you (see section 7).

d. Technical & Usage Data

  • Device and browser information
  • Log data and usage patterns
  • Interaction with digital tools or platforms

The PSP website uses cookieless, privacy-preserving analytics and sets no advertising or cross-site tracking cookies. The PSP app sets a single strictly necessary session cookie to keep you signed in.

4. Special Categories of Data

Health-related information you share with PSP (see section 3.b) is special category data under Article 9 GDPR.

PSP processes such data on the basis of your explicit consent (Article 9(2)(a)), and only to the extent necessary to deliver the coaching services you have requested. Consent is requested as a distinct, affirmative step — never a pre-ticked box — and particularly sensitive categories (for example, allergies and intolerances, or menstrual health) carry their own separate consents in the app, so you can share some categories and not others.

You can withdraw any consent at any time in the app or by contacting us. Withdrawal stops the related processing going forward and, where the consent copy promises it, leads to deletion of the related data. Because health screening exists to keep coaching safe, declining it may mean PSP cannot responsibly provide health-responsive coaching — we will always tell you plainly when that is the case.

5. How We Use Your Data

PSP processes personal data for the following purposes:

  • Providing and delivering PSP services
  • Personalizing coaching, content, and system delivery
  • Managing subscriptions, payments, and access
  • Communicating with you about services, updates, or support
  • Sending the PSP newsletter and waitlist updates you have signed up for (you can unsubscribe at any time)
  • Maintaining community safety and integrity
  • Improving PSP programs, tools, and systems
  • Meeting legal and regulatory obligations

6. Legal Bases for Processing

Under GDPR, PSP processes personal data based on one or more of the following legal grounds:

  • Performance of a contract (Article 6(1)(b))
  • Your consent (Article 6(1)(a); Article 9(2)(a) for special category data)
  • Legitimate interests, where appropriate (Article 6(1)(f))
  • Legal obligations (Article 6(1)(c))

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

7. Software & Automated Processing

PSP uses purpose-built, deterministic, rule-based software to prepare training and fueling plans and to organize your self-reported information into summaries and indicators for your coach. This software applies coaching standards defined by PSP’s coaches; it does not learn from or train on your personal data.

  • Plans and derived indicators exist to support human coaching judgment, and your coach can review, adjust, or override them at any time
  • Indicators that warrant attention are routed to your coach — the software never delivers psychological or medical advice on its own
  • PSP does not engage in automated decision-making that produces legal or similarly significant effects concerning you (Article 22 GDPR)

8. Data Sharing & Third-Party Providers

PSP does not sell personal data or disclose it to third parties for their own independent purposes.

PSP may share personal data only where necessary to provide the services you have requested, with the following categories of recipients:

  • Coaching staff and contractors working under PSP’s instructions and confidentiality obligations, with access scoped to the athletes they are responsible for
  • Payment processing providers — subscription billing; PSP never stores your card details
  • Hosting and infrastructure providers — application hosting, database, and content delivery
  • Email delivery providers — transactional email such as sign-in links, and the newsletter if you subscribe

Data sharing is limited to what is necessary and proportionate for the relevant purpose. All third-party providers process personal data solely on PSP’s instructions under data processing agreements, and are subject to appropriate data protection and confidentiality obligations.

9. A Global Service, One Standard of Care

PSP serves athletes around the world, and the team and tools behind PSP are international too. Rather than applying different privacy standards in different places, PSP applies one standard everywhere — GDPR, the strictest widely adopted data protection framework. Wherever your data is processed, it travels under that standard.

In practice, this means some processing happens outside the European Union — by the infrastructure and service providers listed in section 8, and by members of PSP’s international coaching and operations team. Every such recipient is bound to the same GDPR standard through:

  • Adequacy decisions issued by the European Commission, including the EU–U.S. Data Privacy Framework where the provider is certified
  • EU Standard Contractual Clauses (SCCs), including for PSP’s own contractors — the same contractual protections, wherever the person or provider sits

You can obtain a copy of the relevant safeguards (with commercial terms redacted) by writing to legal@pagestreetperformance.com.

10. Data Retention

PSP retains personal data only for as long as necessary for the purpose it was collected. In outline:

  • Account and coaching data — retained while your account is active; deleted or anonymized following account closure or a deletion request, through a documented erasure process
  • Billing and contract records — retained for the statutory periods under German commercial and tax law (up to ten years)
  • Access and security logs — retained on a tiered schedule (routine access logs up to one year; security events up to two years; records evidencing that we honored your data-protection requests up to five years), then automatically pruned
  • Backups — encrypted and rotated on a fixed schedule; deleted data ages out of backups as they rotate

When data is no longer required, it is securely deleted or anonymized.

11. Your Rights

PSP extends the rights below to all users worldwide, regardless of whether GDPR applies to you by law.

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

To exercise your rights, contact: legal@pagestreetperformance.com. We respond to requests within one month, as required by GDPR.

The supervisory authority competent for PSP is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information). You may also complain to the supervisory authority of your own EU member state.

12. Data Security

PSP’s security model is designed for the sensitivity of coaching data. Key measures:

  • Data minimization — we collect only what coaching requires, and run no advertising or third-party tracking code. Data we never hold is data that can never be breached
  • Passwordless sign-in — you authenticate with a one-time link or code sent to your email. PSP holds no password database, so there are no PSP passwords to steal, leak, or reuse
  • Encryption of data in transit and at rest; PSP never stores your payment card details
  • Least-privilege access — role-based controls scope every staff member to only the athletes they are responsible for
  • Multi-factor authentication required for all staff accounts
  • Access auditing — every staff access to athlete data is individually logged and monitored, with automated anomaly detection and alerting
  • Hardened surfaces — strict content-security policies, bot protection, and rate limiting across public endpoints
  • Immediate session revocation — active sessions can be terminated at once if an account or device is ever compromised
  • Automatic encrypted backups, so your coaching history survives infrastructure failure

Security is reviewed continuously as part of how PSP builds and ships software, not as a periodic afterthought. While no system is completely secure, if a breach affecting your data ever occurs, we will notify the supervisory authority and, where required, you, in accordance with Articles 33 and 34 GDPR.

13. Children’s Data

PSP services are intended for adults. PSP does not knowingly collect personal data from individuals under the age of 18.

If such data is identified, it will be deleted promptly.

14. Changes to This Policy

PSP may update this Privacy Policy from time to time.

Material changes will be communicated clearly. Continued use of PSP services after updates constitutes acceptance of the revised policy.

15. Contact

Questions or concerns regarding this Privacy Policy may be directed to:

Page Street Performance UG (haftungsbeschränkt)
c/o Betahaus
Rudi-Dutschke-Straße 23
10969 Berlin
Germany
legal@pagestreetperformance.com

Back to home