← Back to the book

Privacy notice

Information under Article 13 of the General Data Protection Regulation (GDPR). Short version: we collect as little as possible, we do not track you, and we do not sell anything to anyone.

1. Who is responsible

2. What happens when you just read this page

This site is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes technical connection data such as your IP address, the page requested, timestamp, referrer and browser identification in server log files. This is necessary to deliver the site and to defend it against attacks.

Legal basis: Article 6 (1) (f) GDPR, our legitimate interest in operating the site securely. Transfers to the USA are covered by the EU standard contractual clauses and Cloudflare's participation in the EU-US Data Privacy Framework.

There is no analytics, no advertising, no tracking pixel and no cookie banner, because there are no tracking cookies to consent to. The fonts are served from this site itself, so no font provider learns that you visited.

3. What happens when you buy the ebook

Payment is handled entirely by Stripe Payments Europe, Ltd. (The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe receives the data needed for the payment, including your email address, payment details and country. We never see your card details. We receive your email address, the amount paid, and the record of your consent to immediate delivery.

Purpose	Legal basis	Kept for
Processing your payment and delivering the file	Art. 6 (1) (b) GDPR, performance of a contract	Duration of the purchase
Proof of your consent to immediate delivery (§ 356 (5) BGB)	Art. 6 (1) (c) GDPR, legal obligation	Statutory retention periods
Invoices and accounting records	Art. 6 (1) (c) GDPR, German commercial and tax law	Up to 10 years

Stripe's own privacy notice: stripe.com/privacy.

4. What happens when you write to us

If you email us, we process what you send in order to answer you (Article 6 (1) (b) and (f) GDPR). Our mailbox is hosted by Google Ireland Ltd. We delete correspondence once it is no longer needed and no retention period applies.

5. Your rights

• Access to the data we hold about you (Art. 15)
• Correction of inaccurate data (Art. 16)
• Deletion (Art. 17) and restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interest (Art. 21)

One email to the address above is enough. You also have the right to lodge a complaint with a supervisory authority; for us that is the Bavarian Data Protection Authority (Bayerisches Landesamt fuer Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany).

6. No automated decision-making

We do not use profiling or automated decision-making within the meaning of Article 22 GDPR.