Data Privacy - thebookfeed.com

Privacy Policy for The BookFeed

Last updated: November 2025

1. Data Protection at a Glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. “Personal data” means any information that can be used to identify you personally.

Detailed information on data protection is provided below.

2. Data Collection on This Website

Who is responsible for data collection?

Data processing on this website is carried out by the website operator:

Kauf Katja, Kauf Julia GbR
Neißestrasse 5
86165 Augsburg
Germany
Email: hello@thebookfeed.com

How we collect your data

Some data are collected when you provide them (e.g. when filling in a contact form).
Other data are collected automatically when you visit the site. These include technical information (browser, operating system, referrer, time of access, IP address).

Purpose of data processing

We process your data to:

ensure technical operation and security of the site,
analyze visitor behavior for optimization,
provide services or contractual functions (e.g. registration, newsletter), and
display relevant advertising and affiliate links.

Your rights under GDPR

You have the right to:

request information about your stored personal data,
request rectification or deletion,
restrict processing,
withdraw consent at any time,
data portability, and
lodge a complaint with a supervisory authority.

You can contact us anytime about data protection matters.

3. Hosting

External hosting

This website is hosted by:

Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca, Cyprus

Personal data (e.g. IP addresses, server logs, contact data) are stored on Hostinger’s servers.
Processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in secure, fast provision).

We have a Data Processing Agreement (DPA) with Hostinger in accordance with Art. 28 GDPR.

4. Legal Bases for Processing

We process personal data only where a legal basis applies:

Consent: Art. 6(1)(a) GDPR and §25(1) TDDDG
Contract performance: Art. 6(1)(b) GDPR
Legal obligation: Art. 6(1)(c) GDPR
Legitimate interest: Art. 6(1)(f) GDPR
Special categories of data: Art. 9(2)(a) GDPR (if applicable)

Consent can be withdrawn at any time.

5. Data Retention

Unless otherwise specified, your personal data are stored only as long as necessary for the purpose for which they were collected or as required by law.

Analytics data are retained for up to 14 months (Google Analytics 4).
AdSense data are stored according to Google’s retention schedule (9–24 months).

6. Security

We use SSL/TLS encryption to protect transmitted data. You can recognize an encrypted connection by the “https://” prefix and lock icon in your browser.

We use Complianz – Consent Management Platform to obtain and manage user consent for cookies, trackers, and third-party technologies in accordance with the IAB Europe Transparency & Consent Framework (TCF v2.2).

When you first visit the site, a banner appears requesting your consent for specific processing purposes (e.g. analytics, personalized ads). You can change or withdraw consent at any time via the “Cookie Settings” link in the footer.

Legal basis: Art. 6(1)(a) GDPR and §25(1) TDDDG.
For essential cookies: Art. 6(1)(f) GDPR (legitimate interest in technical operation).

8. Data Collection on This Website

Cookies

We use both first-party and third-party cookies.

Necessary cookies: enable site functionality.
Analytics cookies: measure website usage.
Marketing cookies: personalize ads and measure performance.

You can manage cookie preferences through the Complianz Cookie Settings panel, which provides a current list of cookies and their purposes.

Server log files

Collected automatically: browser type/version, operating system, referrer URL, host name, time, IP address.
Legal basis: Art. 6(1)(f) GDPR (technical necessity).

Contact forms and email requests

Data submitted via forms or email are processed to respond to your inquiry.
Legal basis: Art. 6(1)(b) or (f) GDPR.
Data are deleted once your inquiry is resolved unless legal retention applies.

Registration on this website

Registration data are used only for providing the registered functions.
Legal basis: Art. 6(1)(b) GDPR.

Comments

If you post comments, we store your username, IP address, and timestamp to prevent abuse.
Legal basis: Art. 6(1)(a) GDPR (consent).

9. Analytics

Google Analytics 4

We use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
IP anonymization is active, so IP addresses are truncated before storage.

Collected data: usage data, device information, approximate location.
Legal basis: Art. 6(1)(a) GDPR and §25(1) TDDDG (consent).
Retention: up to 14 months.

We use Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display advertisements.

Depending on your consent, AdSense may:

use cookies or similar technologies, and
process data such as cookie IDs, IP address, location (approximate), device info, and ad interactions.

Personalized Ads

Legal basis: Art. 6(1)(a) GDPR (consent).
Ads are customized based on your interests and activity.

Non-Personalized Ads

If you withhold consent, non-personalized (contextual) ads are shown.
Limited processing (e.g. frequency capping, fraud prevention) occurs on the basis of Art. 6(1)(f) GDPR.

Data may be transferred to the USA. Google relies on the EU-US Data Privacy Framework and, where applicable, the Standard Contractual Clauses (SCCs) of the European Commission.

You can manage or withdraw consent at any time in Cookie Settings, or adjust preferences at https://adssettings.google.com.
Further information: https://policies.google.com/technologies/partner-sites.

11. Affiliate and Partner Programs

We participate in affiliate programs to display advertising links. When you click an affiliate link and complete a transaction, the affiliate network tracks it using cookies or other identifiers.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in correct remuneration).
If consent is requested: Art. 6(1)(a) GDPR and §25(1) TDDDG.

Amazon Partner Program

We are participants in the Amazon EU Partner Program, which allows websites to earn commissions through advertising and linking to Amazon.de.
Amazon uses cookies to track orders and attribute commissions.

Legal basis: Art. 6(1)(f) GDPR.
Amazon may transfer data to the USA under the EU–US Data Privacy Framework.

Newsletter Data

If you would like to receive our newsletter, we require your email address and confirmation that you consent to receive it.

Service Provider: Brevo (Sendinblue)

We use Brevo (Sendinblue GmbH), Köpenicker Str. 126, 10179 Berlin, Germany, to send our newsletters.
Brevo is a service that allows us to organize and analyze newsletter distribution.

When you open an email sent via Brevo, a connection is made to Brevo’s servers, enabling performance measurement (e.g. open and click rates).

Data Processing and Legal Basis

The processing of your data is based on your consent (Art. 6(1)(a) GDPR).
You can withdraw consent at any time using the “Unsubscribe” link in any email.

Data Storage

Your data are stored as long as you are subscribed to the newsletter and deleted after you unsubscribe, unless further retention is required by law.

We have concluded a Data Processing Agreement (Art. 28 GDPR) with Brevo to ensure compliance.

For more details, see Brevo’s Privacy Policy:
https://www.brevo.com/legal/privacypolicy/

13. Plugins and Tools

Vimeo (Do-Not-Track mode)

Provider: Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.
We have configured Vimeo to prevent cookie tracking.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
DPF certification: https://www.dataprivacyframework.gov/participant/5711

Google Fonts

We use Google Fonts (Google Ireland Limited) for visual consistency.
Data processed: IP address, browser data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Privacy Policy: https://policies.google.com/privacy

14. International Data Transfers

Where data are transferred to third countries (e.g. the USA), this is based on:

the EU–US Data Privacy Framework, or
the Standard Contractual Clauses (SCCs) adopted by the European Commission.

15. Children’s Data

Our website and services are not directed to children under 16 years of age. We do not knowingly collect personal data from minors.
If you are under 16, you may only give consent with the approval of your parent or guardian.

16. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal or technical changes. The current version is always available on this page.

17. Contact

For questions about privacy or exercising your rights, please contact: