DE | EN

Privacy Policy

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Christian Hoppe
Grabenstraße 29
48703 Stadtlohn, Germany
Email: kontakt@mirrith.de

2. Data Collection on this Website

Hosting and Server Log Files

This website is hosted by an external service provider (hoster). The personal data collected on this website are stored on the hoster's servers.

Our hoster automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer
  • Time of the server request
  • IP address (usually anonymized)

This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and the optimization of our website – for this purpose, server log files must be recorded.

Content Creation

Some of the images used on this website were created using AI-supported tools and subsequently edited manually. No personal data of website visitors is processed in this context.

Technically Necessary Cookies & Consent Management

This website uses technically necessary cookies (as well as those strictly necessary to provide explicitly requested services such as payment processing via Stripe). Cookies are small text files stored on your device by your browser. They serve to make our website more user-friendly, effective, and secure.

The necessary cookies we use are so-called "session cookies" (which are automatically deleted after your visit ends) or cookies strictly necessary to provide certain functions (e.g., the checkout process via Stripe, managing cookie consent via CCM19). Because these cookies are required to carry out the electronic communication process or to provide the functions you requested, they are stored on the basis of Art. 6 (1) (f) GDPR (legitimate interest) or Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) and do not require consent under § 25 (2) TDDDG.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool CCM19. The provider is CCM19 GmbH, Germany. For details on how CCM19 works, please visit https://www.ccm19.de/en/features/.

The legal bases for processing personal data in this context are Art. 6 (1) (c) GDPR (compliance with a legal obligation to obtain and document consents) and Art. 6 (1) (f) GDPR (our legitimate interest in managing consents).

Web Analysis with Google Analytics (Consent Required)

This website uses, subject to your consent, Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies" (text files) and similar technologies stored on your device that enable an analysis of your use of the website.

Legal Basis & Consent: The processing of your data using Google Analytics takes place exclusively on the basis of your express consent according to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You grant this consent via our consent banner (CCM19). Without your consent, no data transfer to Google Analytics will occur.

Purpose of Processing: On behalf of the operator of this website, Google will use this information to evaluate your use of the website (pseudonymized), compile reports on website activity, and provide other services related to website activity and internet usage to the website operator. This helps us improve our website and better tailor it to our visitors' interests.

IP Anonymization: We only use Google Analytics with IP anonymization activated. In Google Analytics 4 (GA4), the anonymization of IP addresses is activated by default. This means your IP address will be truncated by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area before being transmitted to the US.

Data Transfer to the US: The information generated by the cookies about your use of this website is usually transmitted to a Google server in the US and stored there. Google LLC (USA) is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection for data transfers to the US.

Data Processing Agreement: We have concluded a data processing agreement with Google according to Art. 28 GDPR. This is a contract mandated by data protection law that ensures Google only processes the data of our website visitors according to our instructions and in compliance with the GDPR.

Storage Duration: The data sent by us and linked to cookies, user identifiers (e.g., User-ID), or advertising IDs are automatically deleted after a period set by Google (default for GA4: 2 months or 14 months, depending on the setting).

Withdrawal of Consent: You can revoke your consent at any time with effect for the future. Please use the settings in our consent banner (CCM19) for this purpose. You can usually access it again via a link or icon in the website footer ("Change Cookie Settings" or similar). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Further information on the terms of use and privacy of Google Analytics can be found at Google Analytics Terms of Service or https://policies.google.com/?hl=en.

Contacting via Email

If you contact us via email (e.g., via the address mentioned in the legal notice), your details, including the contact information provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest (Art. 6 (1) (f) GDPR) in the effective processing of the inquiries addressed to us.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there (name, email, possibly phone, publisher), will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR) or your consent (Art. 6 (1) (a) GDPR) if this has been requested. You can revoke your consent at any time.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

3. Data Processing for Purchases (Payment Providers)

If you decide to purchase the e-book, we integrate the external payment provider Stripe to process the payment.

Stripe

The provider of this service is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter "Stripe").

If you choose to pay via Stripe, the payment details you enter (e.g., name, address, email address, credit card details) will be transmitted to Stripe. The transmission of your data to Stripe is based on Art. 6 (1) (b) GDPR (processing to fulfill a contract) and our legitimate interest in a smooth and secure payment process (Art. 6 (1) (f) GDPR). You have the option to revoke your consent to data processing at any time. A revocation has no effect on the effectiveness of past data processing operations.

Further information on Stripe's privacy policy can be found at: https://stripe.com/en/privacy

4. Data Security (SSL/TLS Encryption)

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.

5. Your Rights as a Data Subject

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of the data processing at any time, and, if applicable, a right to correction, blocking, or deletion of this data (Art. 15-17 GDPR).

You have the right to demand the restriction of processing of your personal data (Art. 18 GDPR).

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a standard, machine-readable format (Right to data portability, Art. 20 GDPR).

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR).

Right to Object (Art. 21 GDPR)

If your data is processed on the basis of Art. 6 (1) (f) GDPR (legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms.


Back to home page