Privacy Policy

Quick overview

• Website operation & security: server log files, hosting, Cloudflare (CDN/WAF), bunny.net (CDN)
• Consent/Cookies: consent management & cookie settings
• Analytics (optional): Google Analytics 4 (only with consent)
• Communication: contact forms, email, support tickets (Zammad)
• Marketing: newsletter (CleverReach – only with consent)
• Sales & fulfillment: Digistore24, system emails (Amazon SES), file delivery (Cloudflare R2)
• Abuse protection: Google reCAPTCHA
• Fonts & security: Google Fonts (local), SSL/TLS

3.1 Server log files

When you access our website, the web server/hosting provider typically processes the following data:

• IP address
• date and time of access
• requested pages/files (URL) and referrer URL
• browser type/version and operating system
• name of the access provider (if transmitted)

Purpose: technical operation, system security/stability, troubleshooting, and prevention of abuse.
Legal basis: Art. 6(1)(f) GDPR.
Retention: log files are generally stored for a maximum of 7 days.

3.2 Hosting (ALL-INKL.COM)

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich (Germany). The provider processes technical access data to the extent necessary for secure operation.
Legal basis: Art. 6(1)(f) GDPR.

3.3 Cloudflare (CDN & security)

We use Cloudflare to optimize loading times and to protect the website against attacks (e.g., DDoS). In this context, technical access data (e.g., IP address, request headers, browser/device information) may be processed.
Legal basis: Art. 6(1)(f) GDPR.

3.4 bunny.net (CDN)

We use bunny.net as a content delivery network (CDN) to deliver content (e.g., images and static assets) faster and to improve performance and stability. When content is delivered via the CDN, technical access data is processed (e.g., timestamp, requested resource/URL, user agent, and IP address). IP addresses are generally processed in anonymized form; full IP logs are only possible with specific configuration.
Legal basis: Art. 6(1)(f) GDPR.

4.1 Consent management (Cloudflare Zaraz)

We use Cloudflare Zaraz to manage services requiring consent. Zaraz ensures that certain services (e.g., analytics) are only loaded after you have given consent. A technically necessary cookie is used to store your selection.
Legal basis: Art. 6(1)(f) GDPR.

5.1 Google Analytics 4

We use Google Analytics 4 to statistically analyze the use of our website. Integration is performed via “Cloudflare Zaraz” and is activated only after you give consent. The IP address is anonymized before processing. The provider is Google Ireland Limited; processing on servers in third countries (e.g., the USA) cannot be ruled out.
Legal basis: Art. 6(1)(a) GDPR (consent).
Withdrawal: at any time via Cookie Settings.

6.1 Contact forms (Gravity Forms) and email

If you contact us (via contact form or email), we process the data you provide (e.g., name, email address, message) to handle your request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps/contract) and/or Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

6.2 Support tickets (Zammad – self-hosted)

We use Zammad (self-hosted) for support requests. In this context, we process contact data, the content of your request, and ticket information (e.g., status and history) to the extent necessary for processing.
Legal basis: Art. 6(1)(b) GDPR and additionally Art. 6(1)(f) GDPR.

7.1 CleverReach

We use CleverReach to send our newsletter. We process in particular your email address. We may also evaluate statistics (e.g., open/click rates) to improve the newsletter.
Legal basis: Art. 6(1)(a) GDPR (consent).
Unsubscribe/withdrawal: possible at any time via the unsubscribe link in the newsletter.

8.1 Digistore24

We use Digistore24 for the sale and payment processing of digital products. In this context, the data necessary for the purchase is processed (e.g., name, billing address, email address, order data and payment data depending on the payment method, as well as technical data).
Legal basis: Art. 6(1)(b) GDPR (contract).

8.2 Amazon SES (system and transactional emails)

We use Amazon Simple Email Service (Amazon SES) for transactional emails (e.g., order/status information, system notifications, support communication). Processed data includes email address, possibly name, the content of the email, and technical metadata (e.g., sending time, delivery status).
Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.

8.3 Cloudflare R2 (file delivery / object storage)

We use Cloudflare R2 to store and deliver files (e.g., downloads or technical assets). Technical access data (e.g., IP address, timestamp, requested file/URL, user agent) may be processed in logs.
Legal basis: Art. 6(1)(f) GDPR and, where necessary to perform the contract, Art. 6(1)(b) GDPR.

9.1 Google reCAPTCHA

We use Google reCAPTCHA to protect against spam and abusive access. In this context, data (e.g., IP address, referrer, browser information) may be transferred to Google.
Legal basis: Art. 6(1)(f) GDPR.

10.1 Google Fonts (local)

Google Fonts are integrated locally. No connection to Google servers is established; therefore, no data is transmitted to third parties.
Legal basis: Art. 6(1)(f) GDPR.

10.2 SSL/TLS encryption

This website uses SSL/TLS encryption to protect transmitted data.