Publisher privacy notice

1. Controller

Sebastian Albrecht, Kottenkamp 6, 32278 Kirchlengern, Germany. Email: kontakt@sebastian-albrecht.de. Telephone: +49 5223 6582312.

2. Visits, hosting and preferences

The publisher runs on a server at 1blu GmbH in Germany. IP address, request time, resource and browser information are processed to deliver and protect the service (Article 6(1)(f) GDPR). Application error and operational logs rotate by size, with up to three 10 MB files per service. Logs are not used for advertising.

There are no advertising or analytics trackers. Fonts, covers and samples are served by this website. On the first visit, settings follow your browser and system. Only your explicit choices are saved as sa-preferences-v2 in local browser storage, with session storage as a fallback, for up to 30 days. The sa-language cookie has the same lifetime and contains no personal identifier. Clear this website’s browser data to reset your choices.

3. Account and sign-in

Requested account functions use Clerk, Inc. (USA). Google sign-in provides the account data you authorise, including name, email and account identifier. Clerk loads on account pages or for an existing sign-in session, rather than for anonymous catalogue browsing. Technical session cookies secure the requested account access (section 25(2)(2) TDDDG; Article 6(1)(b) GDPR). Optional Clerk telemetry is disabled.

Data shared by Google may also include a profile picture. We use this data for sign-in, account management and linking your library. Our database stores the account identifier, verified email addresses, display name and, where applicable, the profile picture URL.

Clerk describes processing, subprocessors and transfers at clerk.com/legal/dpa. Its terms provide for the EU-US Data Privacy Framework and supplementary standard contractual clauses for relevant US transfers. Google also processes data for its own purposes under its privacy notice. Public reading samples do not require an account.

4. Library and digital content

We process account identifiers, unlocked books and reading or listening progress to provide your library (Article 6(1)(b) GDPR). Full editions are served only after access is checked. Account data is retained for the account relationship; afterwards we delete data no longer needed, subject to legal duties and outstanding claims.

5. Orders, payments and retention

Where purchases are available, we process order items, payment status, access rights and legal confirmations to perform the contract (Article 6(1)(b) GDPR). Stripe Payments Europe, Ltd., Ireland, processes payment data in its separate checkout; we receive status and reference data. Catalogue visits do not load Stripe Checkout. Information: stripe.com/privacy.

Records subject to retention duties are kept under Article 6(1)(c) GDPR: generally eight years for accounting vouchers, six years for business correspondence and ten years for certain accounting records, where required by German commercial or tax law. The relevant law determines the start and any extension of these periods. Other data is deleted when no longer needed.

6. Transactional emails

We use Resend (Plus Five Five, Inc., USA) for order and contract confirmations, access notifications and acknowledgements of withdrawal. Recipient address, subject, message content and technical delivery information are processed to perform the contract and fulfil statutory information obligations (Article 6(1)(b) and (c) GDPR). Open and click tracking are disabled. Our delivery log contains a recipient hash and references to the template, event and delivery.

The sending domain is configured in the Ireland region. Resend also describes processing in the USA; its data processing agreement provides standard contractual clauses for the relevant transfers. Further information and safeguards: Resend data processing agreement.

7. Contact, withdrawal and your rights

We process enquiries and withdrawal declarations to handle them and document receipt (Article 6(1)(b), (c) or (f) GDPR, depending on the purpose). Without the information needed to identify the matter, we may be unable to process it. There is no automated decision-making, including profiling.

Subject to legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing under Article 6(1)(f) GDPR on grounds relating to your situation. Consent may be withdrawn for the future. You can complain to a supervisory authority, including LDI NRW (ldi.nrw.de). Contact: kontakt@sebastian-albrecht.de.