Privacy policy
This page explains which data is processed when you visit this website and place an order, and what rights you have.
1. Controller
Rolf Kipp, Creek Vista, Reserve A, Dubai, United Arab Emirates
E-Mail: book@rolfkipp.com
2. Hosting and server log files
This website is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus). When you visit, server log data transmitted by your browser is processed automatically: browser type and version, operating system, referrer URL, time of request and IP address. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure, stable operation). A data processing agreement is in place with the provider.
3. Orders and payment processing (Stripe)
To process your order we use the data you provide (name, email address and, for the printed edition, your shipping address). Payments are processed by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). Your payment details are transmitted directly to Stripe; we never receive full card data. Stripe may also transfer data to the USA; Stripe is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). We retain data required under tax and commercial law for the statutory periods.
4. Delivery and service emails (Resend)
We process your email address to confirm your order and send service messages. Emails are sent via Resend (Resend, Inc., USA); transfers to the USA are based on EU Standard Contractual Clauses. The legal basis is Art. 6 (1) (b) GDPR. If you contact us, we process your details to handle your request (Art. 6 (1) (b) or (f) GDPR).
5. Fonts
All fonts are served locally from our own server. No connections to external font providers (such as Google Fonts) are made.
6. Cookies and tracking
This website does not use any analytics, advertising or social media cookies and does not track your behaviour. During checkout, Stripe may set technically necessary cookies for fraud prevention and secure payment processing.
7. Retention period
We store personal data only as long as necessary for the purposes stated or as required by statutory retention periods (in particular up to 10 years under commercial and tax law).
8. Your rights
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work (Art. 77 GDPR). To exercise your rights, simply send an informal email to the address above.