The German version is the original; this translation is provided for information only (German version).
MindOnDigital, owner: Dieter Strak, Strandbadstraße 18a, 88090 Immenstaad am Bodensee, Germany, email: info@corbenvale.com. Further details can be found in the Legal Notice.
I only process personal data where the law permits it or you have given your consent. For each processing operation, I state below the purpose, the legal basis, the recipients and how long the data are stored.
I do not sell any data and only pass them on to the service providers named here or where I am legally obliged to do so.
When you visit this website, your browser automatically transmits data that the server stores in log files:
Purpose: delivery of the website and downloads, security and error analysis. These data are not merged with other data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website). Recipient: the hosting provider (section 6). Storage period: the log files are only stored for as long as necessary for these purposes and are then deleted automatically.
If you send me an email, I process your email address, the content of the message and any details you provide. Purpose: answering your enquiry. Legal basis: Art. 6(1)(b) GDPR where it concerns a purchase or contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Recipient: my email provider as processor. Storage period: until your enquiry has been dealt with; business emails relating to a purchase are kept as long as commercial or tax retention obligations apply (section 11).
This website does not set any cookies and does not store anything in your browser. The audience measurement (section 7) also works without cookies. If you land on a Stripe payment page (section 8) or on a Brevo page when subscribing to the newsletter, their own cookie information applies there.
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the website is accessed, the hosting provider processes the access data listed in section 3 (server log files) on my behalf, insofar as this is necessary for operation, security and error analysis. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The servers are located in Germany. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website).
The website does not load fonts or other content from third-party servers; the only exception is the audience measurement in section 7.
I use GoatCounter (operator: Martin Tournoij, Ireland; servers at Hetzner Online GmbH in Germany and Finland) to count which pages are viewed and how often. Only aggregated statistics are created: page, referrer, browser, operating system, language, screen width and the country derived from the IP address. Your IP address is not stored; it is only kept briefly (at most 8 hours) in memory to avoid double counting. There are no cookies and no user profiles.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the website). Recipient: GoatCounter. Storage period: the aggregated statistics contain no data that can be attributed to you.
If you subscribe to the newsletter, I process your email address and the language in which you subscribed. Subscription uses the double opt-in procedure: you receive an email with a confirmation link, and you are only added after confirming. Subscription and confirmation are logged with time and IP address so that I can prove your consent. I do not evaluate whether you open newsletters or click links in them.
Legal basis: your consent (Art. 6(1)(a) GDPR); for the log, my obligation to provide proof (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). Withdrawal: at any time via the unsubscribe link in every newsletter email or by email to info@corbenvale.com. Recipient: Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France) as processor. Storage period: until you unsubscribe. After that, your email address remains only on a block list so that you no longer receive newsletters (Art. 6(1)(f) GDPR); I keep the record of your consent as long as I need it as proof.
The buttons to bookshops (e.g. Amazon, Thalia, Apple Books, Google Play, Kobo), the links to Instagram, TikTok, YouTube and Facebook and the share buttons (e.g. WhatsApp, Facebook, email) are simple links. A connection to the respective provider is only established when you click one of them; no data are transmitted before that. The privacy information of the respective provider applies there.
When you buy a collector’s edition or other digital content from me, payment is processed by the payment service provider Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). You are redirected to a Stripe payment page for this purpose.
Which data: name, email address, billing address and country where applicable, the products purchased with price and time, the chosen payment method and the payment data required for it (e.g. card data – I do not see these, they remain with Stripe), as well as technical data such as IP address and device characteristics.
Purpose and legal basis: processing the purchase and providing the download (Art. 6 (1)(b) GDPR), fulfilling retention obligations under tax and commercial law (Art. 6 (1)(c) GDPR) and protection against payment fraud (Art. 6 (1)(f) GDPR).
Stripe as an independent controller: Stripe also processes part of this data under its own responsibility, in particular for fraud prevention, to fulfil its own legal obligations and to improve its services. Stripe's privacy policy applies to this: stripe.com/privacy.
Transfers to third countries: Stripe belongs to a group of companies based in the USA (Stripe, Inc.); processing there is possible. Stripe is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists (Art. 45 GDPR); in addition, Stripe uses EU standard contractual clauses (Art. 46 (2)(c) GDPR).
Storage period: I store the purchase data for as long as it is needed for processing and any warranty claims, and beyond that only insofar as statutory commercial or tax retention obligations apply. The retention period depends on the type of document; for accounting vouchers it is generally eight years.
Providing the data is required for the purchase; without it I cannot perform the contract.
If you choose PayPal as the payment method on the Stripe payment page, you are redirected to PayPal. What data: name, email address, amount, order reference and the data of your PayPal account that PayPal needs for the payment. Purpose and legal basis: processing the payment (Art. 6(1)(b) GDPR). Recipient: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes the data as an independent controller, also to prevent fraud and to meet its own legal obligations; PayPal's privacy statement applies. Third countries: PayPal may transfer data to companies of the PayPal group, including in the USA; PayPal's Binding Corporate Rules (Art. 47 GDPR) apply to such transfers. Storage period: on my side as described in this section 8; at PayPal according to its privacy statement.
Service providers who process data on my behalf (hosting provider, Brevo, email provider, Hetzner) are bound by a data processing agreement pursuant to Art. 28 GDPR and may only use the data in accordance with my instructions.
I only store personal data for as long as necessary for the respective purpose. After that I delete them – unless statutory commercial or tax retention obligations apply; in that case only after they have expired. The respective storage period depends on the type of document and is, in particular for accounting records, generally eight years.
You have the following rights:
You can send such requests to info@corbenvale.com.
If you have given consent to data processing, you can withdraw it at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that your data are being processed unlawfully.
I adapt this privacy policy when legal requirements or technical processes change. The version published here applies.