Privacy Policy

Information on the processing of personal data in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller within the meaning of the GDPR and other data protection regulations is the operator of this online shop ({{anbieter_name}}):

{{anbieter}}

Email: {{email}}

You can find full contact details in our Legal Notice.

2. General Information & Legal Bases

We only process personal data insofar as this is necessary and on the basis of a valid legal basis. The following may apply as legal bases in particular:

• Art. 6 (1) (a) GDPR — consent (e.g. newsletter, non-essential cookies).
• Art. 6 (1) (b) GDPR — performance of a contract and pre-contractual measures (e.g. processing your order and delivering the PDF products).
• Art. 6 (1) (c) GDPR — compliance with legal obligations (e.g. tax and commercial law retention obligations).
• Art. 6 (1) (f) GDPR — legitimate interests (e.g. secure operation and protection of the website).

3. Data Collected During Orders & Contact

When you purchase a product or contact us, we process the data required for this purpose, in particular:

• Email address (for delivery of the PDF download)
• Where applicable, name and billing data (insofar as required for the invoice/receipt)
• Order data (purchased products, amount, time)
• The content of your message when you contact us by email or form

The legal basis is Art. 6 (1) (b) GDPR (contract processing) or, in the case of mere inquiries, Art. 6 (1) (f) GDPR.

4. Hosting & Server Log Files (Vercel)

This website is hosted by Vercel Inc. or its EU subsidiary. When the pages are accessed, information is automatically recorded in so-called server log files that your browser transmits (e.g. IP address, date and time of access, file retrieved, amount of data transferred, browser type). This data serves the secure and stable operation of the website (Art. 6 (1) (f) GDPR).

Where Vercel processes data on servers outside the EU (e.g. in the USA), such transfers are safeguarded by the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

5. Payment Processing (Mollie)

For the processing of payments, we use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. When you place an order, the data required for payment (e.g. payment amount, selected payment method and the data you enter during the payment process) is transmitted to Mollie. Mollie processes some of this data as an independent controller.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). Depending on the chosen payment method (e.g. Klarna, PayPal, credit card, SEPA), further recipients may be involved. You can find more information in Mollie's privacy policy at mollie.com/de/privacy.

6. Order & Delivery Emails (Resend)

To send order confirmations, receipts and your download links, we use the email service provider Resend (Resend, Inc., USA). Your email address and order details are processed solely to deliver your purchase. The legal basis is Art. 6 (1) (b) GDPR (performance of the contract). Where data is transferred to the USA, this is safeguarded by the EU Standard Contractual Clauses. We do not currently send a marketing newsletter.

7. Cookies & Consent

We use technically necessary cookies that are required for the operation of the website and the shopping cart (legal basis: § 25 (2) TDDDG as well as Art. 6 (1) (f) GDPR). The storage of and access to non-essential information on your device takes place exclusively with your consent in accordance with § 25 (1) TDDDG (formerly TTDSG) in conjunction with Art. 6 (1) (a) GDPR.

8. Reach Measurement & Marketing

We currently do not use any tracking pixels, web analytics or advertising cookies (e.g. Meta, Google or TikTok). Should we introduce such tools in the future, we will only do so after your express, prior consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG) and will update this Privacy Policy accordingly.

9. Storage Period

We only process and store personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations. In particular, invoice and accounting data are subject to commercial and tax law retention periods (generally 6 or 10 years). After that, the data is deleted, provided it is no longer needed.

10. Your Rights as a Data Subject

Under the GDPR, you have in particular the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure ("right to be forgotten", Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw a given consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, a message to the email address mentioned above is sufficient.

11. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your residence, place of work or the place of the alleged infringement.

The supervisory authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

We reserve the right to amend this policy in order to adapt it to changed legal situations or processing operations.