Last updated: 25 June 2026
This Privacy Policy explains how No Work On Monday (a sole proprietorship of Johannes Vogt) collects, uses, and protects personal data when you visit noworkonmonday.com, interact with our Instagram and Facebook accounts, or otherwise engage with our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Controller
Johannes Vogt ("No Work On Monday")
Tiroler Straße 103
60596 Frankfurt am Main, Germany
Email: joe@noworkonmonday.com
VAT ID (USt-IdNr.): DE412446665
2. What data we process and why
a) Website and online store (noworkonmonday.com)
Our online store and checkout run on Shopify; some content and legacy course or file delivery runs via Kajabi. When you visit, our hosting and infrastructure providers automatically process server log data (IP address, browser type, date and time, pages viewed) to deliver the site securely and reliably.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure website).
When you buy a product or download a free resource, we process the data you provide (name, email address, billing details, order history) to fulfil the contract and provide support. Orders and checkout are processed by Shopify.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Payments are handled by Shopify (Shopify Payments and the payment methods you choose at checkout); we do not store full payment-card data.
b) Instagram and Facebook (Meta platforms)
We operate the Instagram account @noworkonmonday and the Facebook Page No Work On Monday. To manage our own accounts, we use an internal tool that accesses the Meta Graph API. Through it we process:
- Direct messages you send to our accounts,
- comments you leave on our posts,
- aggregate account insights (reach, follower counts; no individual profiling).
We use this data solely to read and respond to your messages and comments and to keep an overview of conversations with our audience. Messaging and comment data is processed locally on the owner's own device, is not sold, not shared with third parties, and not used for advertising or any unrelated purpose.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communicating with our audience and customers) and, where you contact us about a purchase, Art. 6(1)(b) GDPR.
Your use of Instagram and Facebook themselves is governed by Meta's own privacy policy (https://www.facebook.com/privacy/policy).
c) Email marketing
If you sign up for our email list (e.g. via a free guide or newsletter form), we process your email address and name to send you content, product updates, and offers. Email is sent via Brevo. Every email contains an unsubscribe link.
Legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time.
d) Advertising
We run ads on Meta (Instagram and Facebook). These platforms may use cookies and similar technologies to measure and target ads. Where required, this is based on your consent (Art. 6(1)(a) GDPR) collected via our cookie banner, and is otherwise governed by the platform's privacy policy.
3. Recipients and processors
We use carefully selected service providers who process data on our behalf under data processing agreements, including:
- Shopify: online store, checkout and payment processing,
- Kajabi: website content and legacy digital product or course delivery,
- Brevo (Sendinblue): email newsletter and transactional email,
- Cloudflare: DNS, content delivery and security (incl. server logs),
- Meta Platforms Ireland Ltd.: social accounts and advertising.
Some providers may process data outside the EU or EEA. Where they do, transfers are safeguarded by EU Standard Contractual Clauses or an adequacy decision.
4. Retention
We keep personal data only as long as necessary for the purposes described above or as required by law (e.g. tax and commercial retention periods in Germany, up to 10 years for invoices). Message and comment data is retained only as long as needed to handle the conversation, then deleted or anonymised.
5. Your rights
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.
To exercise any right, email joe@noworkonmonday.com.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit, Wiesbaden.
6. Data security
We use appropriate technical and organisational measures to protect your data. Data accessed through the Meta API is processed locally and protected by access controls on the owner's own device.
7. Changes to this policy
We may update this policy to reflect changes in our services or legal requirements. The current version is always available at noworkonmonday.com/privacy.