**📄 Privacy Policy

MyGermanShortStories**

Last updated: November 2025

1. Data Controller

The website www.mygermanshortstories.com is operated by:

MyGermanShortStories
(E-Mail) support@mygermanshortstories.com

For any questions regarding data protection, please contact us via email.

2. Hosting and Server Location

This website is hosted on servers located within the European Union by a GDPR-compliant hosting provider (e.g. Hetzner Online GmbH).
A data processing agreement (Art. 28 GDPR) exists with the hosting provider.

3. Collection of Access Data (Server Logs)

When you visit this website, the server automatically collects the following data (“server log files”):

• IP address (anonymised if possible)

• Date and time of access

• Visited pages or files

• Referring website (referrer URL)

• Browser type, version and operating system

These data are processed to ensure technical functionality and website security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Server logs are deleted automatically after a short period, unless required for security or evidence purposes.

4. Contact via E-mail or Contact Form

If you contact us (e.g. by e-mail or via form), we process your data to answer your request.
Legal basis: Art. 6(1)(b) GDPR (contract-related enquiries) or Art. 6(1)(f) GDPR (general enquiries).
We store this data only as long as necessary to process the request.

5. Newsletter and Email Marketing (MailerLite)

We use MailerLite, a newsletter service, to send emails and manage subscribers.

• When you subscribe, your e-mail address and IP address are stored.

• Subscription uses the Double Opt-In method.

• MailerLite may store your data on servers located in the EU or USA under GDPR-compliant conditions (Standard Contractual Clauses).

• A Data Processing Agreement (Art. 28 GDPR) exists.

You can unsubscribe at any time via the link in each e-mail or by contacting us directly.

MailerLite Privacy Policy: https://www.mailerlite.com/privacy-policy

Legal basis: Art. 6(1)(a) GDPR (consent).

6. Purchase of Digital Content (E-Books, Downloads)

When you purchase digital products from our website, we process:

• Name (if provided)

• E-mail address

• Billing details (if applicable)

• Purchased product information

These data are necessary to process the order and deliver the product (digital download).

Legal basis:

• Art. 6(1)(b) GDPR – performance of a contract

• Art. 6(1)(c) GDPR – legal/tax obligations (storage for 10 years)

Payment Providers (General Information)

Payments are processed via external payment providers (e.g. PayPal, Stripe, or similar). These providers receive payment-related data only to the extent required to process the transaction.
Exact providers will be specified in this Privacy Policy once activated.

7. Legacy Access – Former Patreon Users

New purchases via Patreon are no longer available.
Users who previously bought content via Patreon may temporarily retain access to their purchased content. No new payments are collected.
Access for these users will end after a transition period. The end date will be communicated in advance by email or on the website.

We no longer collect or process new user data via Patreon.
Legal basis for legacy access: Art. 6(1)(b) GDPR (fulfilment of existing contracts).

8. Cookies and Consent

This website uses cookies. Some are technically necessary; others (e.g. for YouTube or email signup forms) require prior user consent.

When you first visit the site, a Cookie Consent Banner appears (e.g. “Cookie Notice & Compliance for GDPR”). You can accept or reject non-essential cookies and change your preferences at any time.

Types of Cookies:

Legal basis:

• Art. 6(1)(a) GDPR – consent (for non-essential cookies)

• Art. 6(1)(f) GDPR – legitimate interest (for essential cookies)

9. YouTube Videos (Embedded Content)

Our website embeds videos from YouTube using the privacy-enhanced mode.
This means no cookies are set until you actively click to play the video. Once you do, data may be transferred to:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and
possibly to Google servers in the USA.

Legal basis: Art. 6(1)(a) GDPR (consent).
More info: https://policies.google.com/privacy

10. Data Security

This website uses SSL/TLS encryption to protect data transmission.
You can recognize this by “https://” in the browser address bar and the lock symbol.

11. Data Retention

We store personal data only as long as necessary for:

• Fulfilling contractual duties (Art. 6(1)(b) GDPR)

• Complying with legal retention periods (e.g. 10 years for tax records)

• Legitimate interests (Art. 6(1)(f) GDPR)

After these periods, data will be deleted or anonymised.

12. Your GDPR Rights

You have the right to:

• Request access to your personal data (Art. 15 GDPR)

• Request rectification or deletion (Art. 16 & 17 GDPR)

• Restrict processing (Art. 18 GDPR)

• Object to processing (Art. 21 GDPR)

• Data portability (Art. 20 GDPR)

• Withdraw consent at any time (Art. 7(3) GDPR)

• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

13. Contact for Privacy Concerns

For all privacy-related questions or to exercise your rights, please contact:

📧 support@mygermanshortstories.com

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
The latest version will always be available at: www.mygermanshortstories.com/privacy