Publisher privacy notice

1. Controller

Sebastian Albrecht, Kottenkamp 6, 32278 Kirchlengern, Germany. Email: kontakt@sebastian-albrecht.de. Telephone: +49 5223 6582312.

2. Visits, hosting and preferences

The publisher runs on a server at 1blu GmbH in Germany. IP address, request time, resource and browser information are processed to deliver and protect the service (Article 6(1)(f) GDPR). Application error and operational logs rotate by size, with up to three 10 MB files per service. Logs are not used for advertising.

Fonts, covers and samples are served by this website. On the first visit, settings follow your browser and system. Only your explicit choices are saved as sa-preferences-v2 in local browser storage, with session storage as a fallback, for up to 30 days. The sa-language cookie has the same lifetime and contains no personal identifier. Clear this website’s browser data to reset your choices.

Optional audience measurement with Google Analytics

Only with your prior consent do we measure visits to public information pages using Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Without consent, the Google script is not loaded and no analytics data is sent to Google. Declining is as easy as accepting; all content remains available.

Processed data includes page views, technical device and browser information and pseudonymous cookie identifiers. Your IP address is technically transmitted to Google; Google states that it is deleted before storage for visits from the EU. URL query parameters and fragments are excluded. We do not send names, email addresses, account identifiers, order numbers or form contents. Account, library, reader, checkout and administration pages are excluded from this measurement.

The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. Google may also process data in the USA. Information about recipients, transfer mechanisms (including the EU-US Data Privacy Framework and standard contractual clauses) and data-subject rights is available in the Google notices linked below. Advertising features, Google Signals and cross-domain user linking are not enabled.

Your choice is remembered in local browser storage as sa-analytics-v1 for 30 days. After consent, _ga and _ga_<identifier> cookies may be set for up to 30 days. Event and user data in this Analytics property is retained for two months; aggregated reports may remain longer. You can withdraw consent for the future at any time using “Analytics settings” in the footer. We then delete accessible analytics cookies and stop further measurement. This does not affect the lawfulness of earlier processing.

Google Privacy · Google Data Processing Terms · Analytics settings

3. Account and sign-in

Requested account functions use Clerk, Inc. (USA). Google sign-in provides the account data you authorise, including name, email and account identifier. Clerk loads on account pages or for an existing sign-in session, rather than for anonymous catalogue browsing. Technical session cookies secure the requested account access (section 25(2)(2) TDDDG; Article 6(1)(b) GDPR). Optional Clerk telemetry is disabled.

Data shared by Google may also include a profile picture. We use this data for sign-in, account management and linking your library. Our database stores the account identifier, verified email addresses, display name and, where applicable, the profile picture URL.

Clerk describes processing, subprocessors and transfers at clerk.com/legal/dpa. Its terms provide for the EU-US Data Privacy Framework and supplementary standard contractual clauses for relevant US transfers. Google also processes data for its own purposes under its privacy notice. Public reading samples do not require an account.

4. Library and digital content

We process account identifiers, unlocked books and reading or listening progress to provide your library (Article 6(1)(b) GDPR). Full editions are served only after access is checked. Account data is retained for the account relationship; afterwards we delete data no longer needed, subject to legal duties and outstanding claims.

5. Orders, payments and retention

Where purchases are available, we process order items, payment status, access rights and legal confirmations to perform the contract (Article 6(1)(b) GDPR). Stripe Payments Europe, Ltd., Ireland, processes payment data in its separate checkout; we receive status and reference data. Catalogue visits do not load Stripe Checkout. Information: stripe.com/privacy.

Records subject to retention duties are kept under Article 6(1)(c) GDPR: generally eight years for accounting vouchers, six years for business correspondence and ten years for certain accounting records, where required by German commercial or tax law. The relevant law determines the start and any extension of these periods. Other data is deleted when no longer needed.

6. Transactional emails

We use Resend (Plus Five Five, Inc., USA) for order and contract confirmations, access notifications and acknowledgements of withdrawal. Recipient address, subject, message content and technical delivery information are processed to perform the contract and fulfil statutory information obligations (Article 6(1)(b) and (c) GDPR). Open and click tracking are disabled. Our delivery log contains a recipient hash and references to the template, event and delivery.

The sending domain is configured in the Ireland region. Resend also describes processing in the USA; its data processing agreement provides standard contractual clauses for the relevant transfers. Further information and safeguards: Resend data processing agreement.

7. Contact, withdrawal and your rights

We process enquiries and withdrawal declarations to handle them and document receipt (Article 6(1)(b), (c) or (f) GDPR, depending on the purpose). Without the information needed to identify the matter, we may be unable to process it. There is no automated decision-making, including profiling.

Subject to legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing under Article 6(1)(f) GDPR on grounds relating to your situation. Consent may be withdrawn for the future. You can complain to a supervisory authority, including LDI NRW (ldi.nrw.de). Contact: kontakt@sebastian-albrecht.de.