Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General principles

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing is generally carried out only after the user's consent or where a legal basis permits it.

This website deliberately avoids unnecessary third-party services. No cookies requiring consent for advertising or tracking purposes are set. Embedded third-party content (for example, our contact form) is loaded only after you actively consent. Before that, no data is transmitted to these providers.

3. Hosting and server log files (Cloudflare Pages)

Our website is hosted via the service “Cloudflare Pages.” The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. In the EU, Cloudflare is represented by Cloudflare Germany GmbH, Rosental 7, 80331 Munich. Cloudflare processes data on our behalf (processing on behalf under Art. 28 GDPR).

When the website is accessed, Cloudflare processes technically necessary access data, in particular the visitor's IP address, the date and time of the request, the page requested, and browser and system information. This is required in order to deliver the website and ensure its security and stability. The legal basis is our legitimate interest in a secure and efficient operation (Art. 6(1)(f) GDPR).

This may involve the transfer of personal data to the United States. Such transfers are based on the European Commission's adequacy decision regarding the EU-U.S. Data Privacy Framework, to which Cloudflare has self-certified, supplemented by the European Commission's Standard Contractual Clauses included in our data processing agreement with Cloudflare.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in the address bar of your browser and by the “https://” prefix.

5. Fonts (self-hosted)

This website uses the typefaces “Fraunces” and “Inter.” They are served exclusively from our own server. No connection to Google or other third parties is made; in particular, your IP address is not transmitted to Google. No consent is required for this.

6. Contact form (Jotform)

For written contact we use the form tool Jotform, provided by Jotform Inc., 111 Pine Street, Suite 1815, San Francisco, CA 94111, USA. Data submitted through the form is stored on European servers in Frankfurt am Main (EU data residency); Jotform acts as a processor on the basis of a data processing agreement that includes the EU Standard Contractual Clauses.

The form is not loaded automatically. It is embedded only after you have actively clicked “Load form” (two-click solution). With this click you consent to the loading of the form and the associated connection to Jotform (Art. 6(1)(a) GDPR). No connection to Jotform takes place before this.

Through the form we collect the data you submit — typically your name, email address, book title and publisher, approximate annual book sales, and optionally your message — solely to handle your enquiry. The legal basis for processing the enquiry is Art. 6(1)(b) GDPR (pre-contractual measures) or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). Data is deleted once it is no longer required for that purpose and no statutory retention obligations apply.

7. Appointment booking (Proton Calendar)

For booking strategy calls we link to a Proton Calendar booking page. The provider is Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva. Only when you click the booking link do you reach Proton's page; on our website itself, no Proton content is loaded and no data is transmitted to Proton.

If you then book an appointment, Proton processes the data necessary for the booking (for example, name, email address, chosen time). An adequacy decision of the European Commission applies to Proton's location (Art. 45 GDPR), so the level of data protection is comparable to that within the EU. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or your consent (Art. 6(1)(a) GDPR). Proton's own privacy policy applies in addition.

8. Your rights

You have the following rights against the controller with regard to the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time with future effect (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The competent authority includes the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.

9. Updates to this policy

This privacy policy is updated as soon as changes to data processing or the legal framework make this necessary. The version published on this page applies at any given time.