{"id":1142,"date":"2026-05-17T10:07:39","date_gmt":"2026-05-17T08:07:39","guid":{"rendered":"https:\/\/bookdragons-den.com\/datenschutzerklaerung\/"},"modified":"2026-07-01T19:50:08","modified_gmt":"2026-07-01T17:50:08","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/bookdragons-den.com\/en\/privacy-policy\/","title":{"rendered":"Datenschutzerkl\u00e4rung"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"1142\" class=\"elementor elementor-1142 elementor-277\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e8db7f1 e-flex e-con-boxed e-con e-parent\" data-id=\"e8db7f1\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b86c19c elementor-widget elementor-widget-text-editor\" data-id=\"b86c19c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t <h1>Privacy Policy<\/h1>\n\n  <p>\n    Protecting your personal data is important to us. Below we explain which personal data we process\n    when you visit this website and use our community features, for what purpose and on what legal\n    basis this happens, and which rights you have. The German version of this policy is legally\n    authoritative; this English text is provided for your convenience.\n  <\/p>\n\n  <h2 id=\"controller\">1. Controller<\/h2>\n  <p>The controller responsible for data processing on this website is:<\/p>\n  <address>\n    <strong>[Name \/ operator(s) or company]<\/strong><br>\n    [Street and number]<br>\n    [Postal code, City]<br>\n    Germany<br><br>\n    Email: <a href=\"mailto:[contact@bookdragons-den.com]\">[contact@bookdragons-den.com]<\/a><br>\n    Phone: [optional: phone number]\n  <\/address>\n  <p>\n    The \u201ccontroller\u201d is the natural or legal person who alone or jointly with others determines the\n    purposes and means of processing personal data. This website is jointly operated by two persons;\n    both can be reached via the contact details above.\n  <\/p>\n  <p>\n    A data protection officer is not legally required and has therefore not been appointed. For any\n    questions regarding data protection, please contact us using the details above.\n  <\/p>\n\n  <h2 id=\"basics\">2. General Information<\/h2>\n\n  <h3>Legal bases for processing<\/h3>\n  <p>We process personal data only in accordance with the applicable laws (GDPR, German Federal Data Protection Act). Depending on the processing, we rely on:<\/p>\n  <ul>\n    <li><strong>Consent<\/strong> (Art. 6(1)(a) GDPR) \u2013 e.g. the newsletter or setting non-essential cookies.<\/li>\n    <li><strong>Contract \/ user relationship<\/strong> (Art. 6(1)(b) GDPR) \u2013 e.g. providing your user account and the community features.<\/li>\n    <li><strong>Legal obligation<\/strong> (Art. 6(1)(c) GDPR).<\/li>\n    <li><strong>Legitimate interest<\/strong> (Art. 6(1)(f) GDPR) \u2013 e.g. the secure and reliable operation of the website.<\/li>\n  <\/ul>\n\n  <h3>Storage period<\/h3>\n  <p>\n    We store personal data only for as long as is necessary for the respective purposes or as required\n    by statutory retention periods. If the purpose no longer applies or you withdraw a consent, the\n    data will be deleted unless statutory retention obligations prevent this.\n  <\/p>\n\n  <h3>Recipients and processors<\/h3>\n  <p>\n    We only share your data where this is legally permitted. Where we use service providers who process\n    data on our behalf (e.g. hosting, email delivery), this is done on the basis of a data processing\n    agreement pursuant to Art. 28 GDPR.\n  <\/p>\n\n  <h3>Transfer to third countries<\/h3>\n  <p>\n    A transfer to countries outside the EU\/EEA only takes place where legally permitted and where\n    appropriate safeguards (e.g. EU standard contractual clauses) are in place. Where individual\n    services may process data outside the EU, we point this out separately below.\n  <\/p>\n\n  <h2 id=\"rights\">3. Your Rights<\/h2>\n  <p>With regard to your personal data, you have the following rights towards us:<\/p>\n  <ul>\n    <li><strong>Access<\/strong> (Art. 15 GDPR)<\/li>\n    <li><strong>Rectification<\/strong> (Art. 16 GDPR)<\/li>\n    <li><strong>Erasure<\/strong> (Art. 17 GDPR)<\/li>\n    <li><strong>Restriction of processing<\/strong> (Art. 18 GDPR)<\/li>\n    <li><strong>Data portability<\/strong> (Art. 20 GDPR)<\/li>\n    <li><strong>Objection<\/strong> to processing (Art. 21 GDPR)<\/li>\n    <li><strong>Withdrawal of a given consent<\/strong> with effect for the future (Art. 7(3) GDPR)<\/li>\n  <\/ul>\n  <p>To exercise your rights, an informal message to the contact details above is sufficient.<\/p>\n  <p>\n    <strong>Right to lodge a complaint with a supervisory authority:<\/strong> Regardless of the above,\n    you have the right to lodge a complaint with a data protection supervisory authority, in particular\n    in the member state of your residence or of the alleged infringement.\n  <\/p>\n\n  <h2 id=\"hosting\">4. Hosting<\/h2>\n  <p>\n    This website is hosted by an external service provider (host). The personal data collected on this\n    website is stored on the host\u2019s servers. This may include, among other things, IP addresses,\n    contact requests, meta and communication data, contract data, contact details, names, website\n    access data and other data generated via a website.\n  <\/p>\n  <p>Our host is:<\/p>\n  <address>\n    Hetzner Online GmbH<br>\n    Industriestr. 25<br>\n    91710 Gunzenhausen<br>\n    Germany\n  <\/address>\n  <p>\n    The servers are located in Germany. Hosting is carried out for the purpose of fulfilling our\n    obligations towards our users and in the interest of a secure, fast and efficient provision of our\n    online offering (Art. 6(1)(b) and (f) GDPR). A data processing agreement (DPA) pursuant to Art. 28\n    GDPR is in place with the host.\n  <\/p>\n\n  <h2 id=\"logfiles\">5. Server Log Files<\/h2>\n  <p>\n    When you access this website, the host automatically collects and stores information that your\n    browser transmits in so-called server log files. These are in particular:\n  <\/p>\n  <ul>\n    <li>browser type and version<\/li>\n    <li>operating system used<\/li>\n    <li>referrer URL (previously visited page)<\/li>\n    <li>host name of the accessing computer<\/li>\n    <li>time of the server request<\/li>\n    <li>IP address<\/li>\n  <\/ul>\n  <p>\n    This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f)\n    GDPR; we have a legitimate interest in the technically error-free presentation and the security of\n    our website. The log files are automatically deleted after a short time.\n  <\/p>\n\n  <h2 id=\"ssl\">6. SSL\/TLS Encryption<\/h2>\n  <p>\n    For security reasons and to protect the transmission of confidential content, this site uses\n    SSL\/TLS encryption. You can recognise an encrypted connection by the fact that the browser\u2019s\n    address bar starts with \u201chttps:\/\/\u201d.\n  <\/p>\n\n  <h2 id=\"cookies\">7. Cookies and Consent Management<\/h2>\n  <p>\n    Our website uses cookies and comparable technologies (e.g. your browser\u2019s local storage). Cookies\n    are small text files that are stored on your device and cause no harm.\n  <\/p>\n  <p>\n    <strong>Technically necessary cookies<\/strong> are required for basic functions to work \u2013 for\n    example logging in to your user account, security features or the language selection. They are set\n    on the basis of Art. 6(1)(f) GDPR and \u00a7 25(2) TDDDG.\n  <\/p>\n  <p>\n    For all non-essential cookies we obtain your consent via a consent tool (cookie banner, \u00a7 25(1)\n    TDDDG, Art. 6(1)(a) GDPR). Your choice is stored so that it does not have to be requested again on\n    your next visit. You can change or withdraw your consent at any time via the cookie settings with\n    effect for the future.\n  <\/p>\n\n  <h2 id=\"contact\">8. Contacting Us by Email<\/h2>\n  <p>\n    If you contact us by email, we process the data you provide (e.g. your name, your email address and\n    the content of your message) in order to handle your request. We do not use a contact form on this\n    website. The legal basis is \u2013 where initiating or performing a user relationship \u2013 Art. 6(1)(b)\n    GDPR, otherwise our legitimate interest in responding to your request (Art. 6(1)(f) GDPR).\n  <\/p>\n  <p>\n    The data remains with us until the purpose of storage no longer applies (e.g. once your request has\n    been handled) or until you ask us to delete it and no statutory retention obligations prevent this.\n  <\/p>\n\n  <h2 id=\"account\">9. Registration and User Account (Magic-Link Login)<\/h2>\n  <p>\n    To take part in the community, you can create a free user account. During registration we collect:\n  <\/p>\n  <ul>\n    <li>username<\/li>\n    <li>first and last name<\/li>\n    <li>email address<\/li>\n    <li>your confirmation of the privacy policy and terms of use, and where applicable the age confirmation<\/li>\n  <\/ul>\n  <p>\n    Login is <strong>passwordless<\/strong>: after you enter your email address, we send you a one-time\n    login link (\u201cmagic link\u201d). We do not store a password. These emails are sent via our own mail\n    server (see the section \u201cEmail Delivery\u201d).\n  <\/p>\n  <p>\n    This processing serves to provide your account and the community features and is based on\n    Art. 6(1)(b) GDPR (user relationship). We store your account data for as long as your account\n    exists. You can delete your account at any time via the profile settings; the associated personal\n    data will then be deleted unless statutory retention obligations prevent this.\n  <\/p>\n\n  <h2 id=\"community\">10. Community Features (Profile, Wall, Ratings, Likes)<\/h2>\n  <p>\n    As a logged-in user you can maintain a public profile, publish posts and comments (e.g. on the\n    wall\/timeline), rate books and posts (star\/\u201cspice\u201d rating) and mark content with a \u201clike\u201d.\n  <\/p>\n  <p>\n    <strong>Please note:<\/strong> content you publish in public areas (e.g. your displayed name,\n    profile details, posts, comments and ratings) is visible to other visitors. Do not publish any data\n    there whose public visibility you do not want. The legal basis is Art. 6(1)(b) GDPR (user\n    relationship) or your consent by actively publishing the content (Art. 6(1)(a) GDPR). As a rule,\n    you can remove content you have posted yourself.\n  <\/p>\n\n  <h2 id=\"fanart\">11. Fan Art Competition \/ Image Uploads<\/h2>\n  <p>\n    As part of the fan art competition you can upload your own image files. In doing so we process the\n    uploaded image, the associated displayed name\/username and additional details (e.g. title\/book\n    reference and your confirmations regarding the terms of participation, age statement and AI\n    labelling).\n  <\/p>\n  <p>\n    Once approved, submitted images are displayed publicly on the website and may be put up for voting.\n    The processing is based on your consent given when uploading and confirming the terms of\n    participation (Art. 6(1)(a) GDPR). You can withdraw your consent with effect for the future; we\n    will then remove the entry from public display.\n  <\/p>\n  <p>\n    Please only upload images to which you hold the necessary rights and that do not infringe the\n    rights of third parties. Note that uploaded files may contain additional technical information\n    (e.g. EXIF metadata).\n  <\/p>\n\n  <h2 id=\"newsletter\">12. Newsletter (MailerLite)<\/h2>\n  <p>\n    If you subscribe to our newsletter, we process the email address you provide and, where applicable,\n    further voluntary details in order to send you the newsletter. The legal basis is your consent\n    (Art. 6(1)(a) GDPR).\n  <\/p>\n  <p>\n    The newsletter sign-up form is technically provided via <strong>Elementor Forms<\/strong> and passes\n    the email address you enter (and any further details) to MailerLite. For sending we use the service\n    <strong>MailerLite<\/strong> (MailerLite \/ UAB \u201cMailerLite\u201d or MailerLite Limited). Registration\n    uses a <strong>double opt-in procedure<\/strong>: after you sign up, you receive an email asking you\n    to confirm the subscription. This ensures that no one is subscribed using someone else\u2019s email\n    address.\n  <\/p>\n  <p>\n    MailerLite processes the newsletter data on our behalf; a data processing agreement pursuant to\n    Art. 28 GDPR is in place. Where processing takes place outside the EU\/EEA, it is safeguarded by\n    appropriate measures (e.g. EU standard contractual clauses). MailerLite also analyses statistically\n    whether newsletters are opened and links are clicked, in order to evaluate and improve the mailing\n    technically.\n  <\/p>\n  <p>\n    You can unsubscribe from the newsletter and withdraw your consent at any time \u2013 for example via the\n    unsubscribe link at the end of every newsletter email. The withdrawal does not affect the\n    lawfulness of the processing carried out up to that point. After unsubscribing, your data will be\n    removed from the distribution list.\n  <\/p>\n  <p>\n    Further information: MailerLite\u2019s privacy notice at\n    <a href=\"https:\/\/www.mailerlite.com\/legal\/privacy-policy\" target=\"_blank\" rel=\"noopener\">https:\/\/www.mailerlite.com\/legal\/privacy-policy<\/a>.\n  <\/p>\n\n  <h2 id=\"email\">13. Email Delivery (WP Mail SMTP)<\/h2>\n  <p>\n    System and notification emails (e.g. the login link for the passwordless login or replies to\n    contact requests) are sent via our own mail server. To ensure reliable delivery we use the \u201cWP Mail\n    SMTP\u201d plugin, which handles delivery via an authenticated SMTP connection. The legal basis is\n    Art. 6(1)(b) and (f) GDPR (contract\/user relationship and legitimate interest in reliable email\n    delivery).\n  <\/p>\n\n  <h2 id=\"tools\">14. Services and Plugins Used<\/h2>\n\n  <h3>Elementor \/ Elementor Pro<\/h3>\n  <p>\n    The website is built with the Elementor \/ Elementor Pro page builder. The resources required for\n    display are delivered from our own server. The only form used on the website is the newsletter\n    sign-up (Elementor Forms); the data processed in this context is described in the section\n    \u201cNewsletter (MailerLite)\u201d. The legal basis for using Elementor is our legitimate interest in an\n    appealing and functional website (Art. 6(1)(f) GDPR).\n  <\/p>\n\n  <h3>WPML (multilingual)<\/h3>\n  <p>\n    To provide the website in several languages we use WPML. WPML does not process any personal visitor\n    data for its own purposes; only technical information about the selected language is stored. The\n    legal basis is Art. 6(1)(f) GDPR.\n  <\/p>\n\n  <h3>Self-hosted fonts<\/h3>\n  <p>\n    To display fonts consistently we use fonts stored locally on our server. When the pages are loaded,\n    the fonts are loaded directly from our server; no connection to third-party servers (such as Google\n    Fonts) is established in the process.\n  <\/p>\n\n  <h2 id=\"minors\">15. Minors \/ Age Notice<\/h2>\n  <p>\n    Some content of this community is intended for an adult audience and is labelled accordingly (e.g.\n    age and content notices). Persons below the required minimum age may not use the features\n    concerned. We do not knowingly process any data of children; should we become aware of such\n    processing, we will delete the data.\n  <\/p>\n\n  <h2 id=\"updates\">16. Validity and Changes to This Privacy Policy<\/h2>\n  <p>\n    This privacy policy is dated <strong>[date]<\/strong>. As our website develops, or due to changed\n    legal or regulatory requirements, it may become necessary to amend this privacy policy. You can\n    access the current version on this page at any time.\n  <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Protecting your personal data is important to us. Below we explain which personal data we process when you visit this website and use our community features, for what purpose and on what legal basis this happens, and which rights you have. The German version of this policy is legally authoritative; this English text [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1142","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/pages\/1142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/comments?post=1142"}],"version-history":[{"count":5,"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/pages\/1142\/revisions"}],"predecessor-version":[{"id":1238,"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/pages\/1142\/revisions\/1238"}],"wp:attachment":[{"href":"https:\/\/bookdragons-den.com\/en\/wp-json\/wp\/v2\/media?parent=1142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}