Datenschutzrichtlinie
Aktualisiert: April 4, 2026
3. Vertragsschluss
The controller responsible for data processing on this website is:
Dr. Tina KoziolCeraluna Labs
Elchkamp 7
22846 Norderstedt
Germany
E-Mail: info@capetowndata.com
Telefon: +49 176 81336624
If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us using the details above.
Informationen, die wir sammeln
2.1 Account Registration
When you create an account, we collect:
- Email address (required)
- Password (stored encrypted)
- Name (optional)
Legal basis: Contract performance (Art. 6(1)(b) GDPR) β necessary to provide your account.
2.2 Social Login
If you register via Google or Facebook, we receive:
- Deine E-Mail-Adresse
- Your name (as configured in your social account)
- Profile picture URL (optional)
Legal basis: Consent (Art. 6(1)(a) GDPR) β you authorize the connection.
2.3 Payments and Purchases
When you make a purchase (e.g., ebook, subscription), we collect:
- Voller Zugriff
- E-Mail-Adresse
- Billing address
- Payment transaction ID (we do not store card numbers)
Legal basis: Contract performance (Art. 6(1)(b) GDPR) and legal obligation for invoicing (Art. 6(1)(c) GDPR).
3. Vertragsschluss
When you contact us, we collect:
- Dein Name
- Deine E-Mail-Adresse
- Your message content
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) β to respond to your inquiry.
2.5 Technical Data (Automatically Collected)
When you visit our website, our servers automatically log:
- IP address (anonymized where possible)
- Browser type and version
- Operating system
- Referrer URL
- Pages visited and time spent
- Date and time of access
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) β security and optimization.
3. Purposes of Processing
Die von uns gesammelten Informationen kΓΆnnen fΓΌr folgende Zwecke verwendet werden:
| Purpose | Legal Basis |
|---|---|
| Providing and managing your account | Contract (Art. 6(1)(b)) |
| Processing payments and issuing invoices | Contract + Legal obligation (Art. 6(1)(b), (c)) |
| Responding to inquiries | Legitimate interest (Art. 6(1)(f)) |
| Website security and abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Website-Analysen (Google Analytics β erfordert Einwilligung) | Consent (Art. 6(1)(a)) |
| Funktionale Funktionen (Mediavine Grow β Favoriten, standardmΓ€Γig aktiviert) | Legitimate interest (Art. 6(1)(f)) |
| Marketing und Newsletter (MailChimp β erfordert Einwilligung) | Consent (Art. 6(1)(a)) |
4. Recipients and Processors
We share your data with the following categories of recipients:
4.1 Payment Processing
Stripe, Inc.
Purpose: Payment processing for purchases and subscriptions.
Data shared: Name, email, billing address, payment details.
Location: USA (EU-US Data Privacy Framework certified)
Datenschutzrichtlinie
Website-Analysen (Google Analytics β erfordert Einwilligung)
Google Analytics Opt-in
Purpose: Website usage analysis to improve our services.
Data shared: IP address (anonymized), browsing behavior, device info.
Location: USA (Standard Contractual Clauses)
Erfordert Ihre ausdrΓΌckliche Einwilligung vor der Aktivierung.
Datenschutzrichtlinie
Funktionale & Marketing-Cookies
Mediavine Grow StandardmΓ€Γig an
Zweck: Funktionale Funktionen einschlieΓlich Favoriten/Lesezeichen und Social Sharing.
Data shared: IP address, browsing behavior, account data (if registered).
Location: USA
StandardmΓ€Γig als funktionale Funktion aktiviert. Sie kΓΆnnen ΓΌber die Cookie-Einstellungen widersprechen.
Datenschutzrichtlinie
Mailchimp (Intuit) Opt-in
Purpose: Newsletter and email marketing.
Data shared: Email address, name (if provided).
Location: USA (Standard Contractual Clauses)
Datenschutzrichtlinie
4.4 Security Services
Google reCAPTCHA
Purpose: Bot prevention and form security.
Data shared: IP address, browser data, interaction patterns.
Location: USA
Datenschutzrichtlinie
4.5 Hosting and Infrastructure
Cloudflare, Inc.
Purpose: Content delivery, image optimization, security.
Data shared: IP address, request data.
Location: Global (EU-US Data Privacy Framework certified)
Datenschutzrichtlinie
4.6 Accounting
Lexware Office (Haufe-Lexware GmbH)
Purpose: Invoice management and bookkeeping.
Data shared: Invoice data (name, address, purchase details).
Location: Germany
Datenschutzrichtlinie
5. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA), particularly in the USA. We ensure adequate protection through:
- EU-US Data Privacy Framework: For providers certified under this framework (e.g., Stripe, Cloudflare).
- Standard Contractual Clauses (SCCs): EU-approved contract terms for data transfers (e.g., Google, Mailchimp).
You may request a copy of the applicable safeguards by contacting us.
Cookies und Tracking-Technologien
We use cookies and similar technologies. Our cookie consent banner allows you to choose which categories to accept:
| Nach Kategorie stΓΆbern | Purpose | Consent Required |
|---|---|---|
| Notwendig | Essential website functionality (session, security, consent storage) | No (always active) |
| Analyse | Understanding website usage (Google Analytics) | Ja |
| Marketing | Social features, newsletters (Mediavine Grow, Mailchimp) | Ja |
You can change your preferences at any time by clicking Wie Sie Ihre Cookie-Einstellungen kontrollieren kΓΆnnen.
FΓΌr vollstΓ€ndige Details siehe bitte unsere Cookie-Richtlinie.
9. Datenschutz
We retain your data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Purchase/invoice data | 10 years (German tax law requirement) |
| Contact form messages | Until inquiry resolved, max. 3 years |
| Serverfehler | 7 days |
| Consent records | 3 years after last interaction |
| Analytics data | 26 months (Google Analytics default) |
8. Your Rights
Als Nutzer haben Sie folgende Rechte:
- Right of Access (Art. 15): Eine Kopie fΓΌr den persΓΆnlichen Gebrauch ausdrucken
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your data ('right to be forgotten').
- Right to Restriction (Art. 18): Limit how we process your data.
- Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interest.
- 6. Widerrufsrecht fΓΌr digitale Inhalte (Art. 7): Withdraw consent at any time (does not affect prior processing).
To exercise these rights, contact us at info@capetowndata.com.
You have the right to lodge a complaint with a supervisory authority. The competent authority for us is:
Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Website: datenschutz-hamburg.de
Datensicherheit
We implement appropriate technical and organizational measures to protect your data, including:
- HTTPS encryption for all data transmission
- Encrypted password storage (hashing)
- Access controls and authentication
- Regular security updates
- CSRF protection on all forms
Γnderungen dieser Cookie-Richtlinie
Wir kΓΆnnen unsere Datenschutzrichtlinie von Zeit zu Zeit aktualisieren, um Γnderungen in unseren Praktiken oder aus anderen betrieblichen, rechtlichen oder regulatorischen GrΓΌnden widerzuspiegeln. Wir empfehlen Ihnen, diese Richtlinie regelmΓ€Γig zu ΓΌberprΓΌfen.
- Posting the updated policy on this page
- Updating the 'Last updated' date
- Sending an email notification for material changes (if you have an account)
Kontaktieren Sie uns
Falls Sie Fragen oder Bedenken bezΓΌglich unserer Datenschutzrichtlinie haben, kontaktieren Sie uns bitte unter:
Dr. Tina KoziolCeraluna Labs
E-Mail: info@capetowndata.com
Telefon: +49 176 81336624