Privacy Policy
This Privacy Policy explains the nature, scope and purpose of processing personal data when you visit and use our website, in particular for contact requests, ratings, and the display and linking of products within partner programs.
1. Scope
This Privacy Policy applies to cakemoodbeyond.com (including /de and any other language versions) and all related subpages.
For visitors from the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) applies. For cookies and similar technologies, the Directive on privacy and electronic communications (ePrivacy Directive) and its national implementations apply in addition, in Germany in particular the Telecommunications-Digital Services Data Protection Act (TDDDG).
For visitors from other jurisdictions, additional data protection laws may apply, in particular in Switzerland the revised Federal Act on Data Protection (revFADP, revDSG), in the United Kingdom the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR), in the United States of America depending on the state (for California in particular the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)), in Canada the Personal Information Protection and Electronic Documents Act (PIPEDA), and in Australia the Privacy Act 1988.
In all cases, the applicable legal requirements in the specific situation are decisive.
The data controller (we) is the entity listed under section 15.
2. Hosting and server log data
Our hosting provider (ALL-INKL.COM) automatically processes server log data for operating the website. This includes, in particular: IP address, date and time, accessed pages/files, status codes, referrer URL, browser/device information (user agent), and, where applicable, other technical data for error analysis and IT security.
2.1 Purpose and legal basis
Processing is carried out to provide the website, ensure stability and IT security, analyze errors, and prevent misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). We have concluded a data processing agreement with our hosting provider in accordance with Art. 28 GDPR.
3. Encrypted transmission
Our website uses Transport Layer Security (TLS) and Secure Sockets Layer (SSL) encryption to securely transmit data. This protects content you submit to us during transmission.
4. Cookie categories
We use cookies and similar technologies to store information on your device or to access information stored on your device. Some cookies are technically necessary. Other cookies are used only if you consent. Consent and preferences are managed via our consent and cookie banner (CookieYes). Cookie details (name, storage period, description) are shown in the cookie banner and in our Cookie Policy. In this Privacy Policy we describe purposes, categories, and consent logic without repeating individual cookie names.
4.1 Necessary cookies
Necessary cookies are required for the website to function and to store your cookie choices. They are not used for marketing purposes. This includes in particular cookies to store your consent choice, cookies for essential website functions, settings such as language selection, and security functions. In the current configuration, the category “Necessary” shows six cookies.
4.2 Functional cookies
Functional cookies support optional convenience features. In the current configuration of our website, we do not use functional cookies. The category “Functional” is available in the cookie banner, and currently it shows no functional cookies. If this changes in the future, functional cookies will be used only with your consent. You can withdraw or change your consent at any time with effect for the future via the cookie settings.
4.3 Analytics cookies
Analytics cookies help us understand how visitors use the website, for example page views and interactions. Analytics cookies are set only if you explicitly consent in the cookie banner. In the current configuration, the category “Analytics” shows one cookie. The storage period is within a range of up to twenty-four hours. You can withdraw or change your consent at any time with effect for the future via the cookie settings.
4.4 Regional notes
For visitors from California, Global Privacy Control (GPC) signals may be taken into account as an indication of an opt-out request, where technically implemented. The effectiveness and scope depend on the technical implementation and the applicable legal requirements. Depending on the region, additional rules may apply to cookies and similar technologies (EU/EEA: ePrivacy Directive and national implementations, in Germany in particular TDDDG; UK: additionally PECR). Implementation on our website is handled via the consent and cookie banner.
5. Usage statistics
We use the WordPress plugin Koko Analytics for audience measurement. Statistical data is stored locally on our own server within our WordPress installation. We do not create user profiles for advertising or marketing purposes and we do not combine audience measurement with other data sources.
Koko Analytics is assigned to the category “Analytics”. Audience measurement starts only after your consent via the consent and cookie banner. In the current configuration, Koko Analytics may use one analytics cookie with a storage period within a range of up to twenty-four hours to count page views and interactions within that time window and to reduce duplicate counts. Cookie details are listed in the cookie banner and in our Cookie Policy.
Legal basis: Where consent is required for storing or accessing cookies or similar technologies, audience measurement starts only after your consent (Art. 6(1)(a) GDPR together with the applicable rules on storage and access technologies, in Germany in particular section 25(1) TDDDG and, where applicable, UK PECR). You can withdraw your consent at any time with effect for the future via the cookie settings.
6. Protection against spam and bots
To protect our contact form from spam and automated submissions, we use Cloudflare Turnstile.
6.1 Purpose and legal basis
Processing is carried out to prevent misuse, ensure the integrity of our contact form, and for IT security.
In the EU/EEA context, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in security and abuse prevention). In the United Kingdom, processing is based on the corresponding UK GDPR principles and the requirements of PECR for storage or access technologies. In Canada, processing follows PIPEDA principles, in particular for security and abuse prevention purposes. In Australia, processing follows the Privacy Act 1988 where applicable. In the USA, additional rights may apply depending on the state, in particular under CCPA/CPRA for visitors from California.
6.2 Scope of processing
When using Cloudflare Turnstile, technical information may be processed that is necessary for risk and abuse detection. This includes in particular IP address, timestamps, device and browser information (for example user agent), and signals used to detect automated access. We use Turnstile exclusively to secure the contact form.
6.3 Cookies and consent
Cloudflare Turnstile is integrated as a security function to prevent misuse. In our current implementation, we do not use Turnstile for advertising, tracking, or profiling purposes. If storage or access technologies are technically required as part of the security check, they serve security purposes only.
If the technical functioning of Turnstile or our configuration changes in the future so that consent-required technologies are used beyond the security function, we will update the Cookie Policy and the cookie banner accordingly.
6.4 International data transfers
When using Cloudflare Turnstile, processing of personal data in third countries (in particular outside the EU/EEA, for example the USA) cannot be ruled out. Cloudflare uses different safeguards for international transfers depending on the service and region, for example standard contractual clauses and, where applicable, additional adequacy mechanisms. A different level of data protection may apply in third countries. Government access cannot be fully excluded.
6.5 Further information
Further information about Cloudflare’s processing can be found in Cloudflare privacy notices and the Cloudflare Turnstile Privacy Addendum. Depending on the processing activity, Cloudflare may act as an independent controller or as a service provider.
7. Partner programs
We participate in the Amazon affiliate program (Amazon PartnerNet/Amazon Associates) in multiple regions. On our website we display product information and link to Amazon. Depending on the region and configuration, we use features such as Amazon OneLink where available.
7.1 Affiliate marketing
When you click an affiliate link, you will be redirected to the respective Amazon website. From your visit to the Amazon platform onwards, Amazon processes your data under its own responsibility. Amazon may use cookies or similar technologies to track orders and allocate commissions. We only receive aggregated reports (for example number of sales, revenue) and we do not receive personal data about individual buyers.
To display products, content from Amazon (for example product images, price and availability information) may be integrated via the Amazon Affiliate for WordPress plugin (AAWP). This content is technically loaded directly from Amazon servers. Your IP address is transmitted to Amazon because the display would otherwise not be technically possible. We do not use additional click tracking within the plugin settings and we do not perform location or country detection for analytics purposes.
Regional delivery of Amazon links serves solely correct localization (for example the appropriate Amazon store or affiliate tag). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional, regionally appropriate display). Where legally required, non-essential content is integrated only after your consent via the cookie banner. Further details on cookies can be found in our Cookie Policy.
7.2 Amazon affiliate program
We use affiliate links to Amazon. As an Amazon Associate, we participate in the Amazon affiliate program. If you click an affiliate link, you will be redirected to the relevant Amazon website.
From the moment you access the Amazon platform, Amazon is responsible for processing your data. Information about Amazon’s data processing can be found in the privacy information of the respective regional Amazon offerings.
Regardless of our cookie settings, cookies or similar technologies may be used on the Amazon platform as soon as you visit Amazon.
As an Amazon Associate, we earn from qualifying purchases. There is no additional cost to you.
8. Contact
8.1 Contact form
If you contact us via the contact form, we process the data you provide (for example name, email address, message) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in handling requests) and, where applicable, Art. 6(1)(a) GDPR (consent), where relevant.
9. Ratings
If you submit ratings, we process the content you provide and, where applicable, technical metadata in order to display the rating and prevent abuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest) and, where applicable, Art. 6(1)(a) GDPR (consent), where relevant.
10. International data transfers
When using external services and when visiting third-party platforms (for example Amazon after clicking a link), processing of personal data in third countries (in particular the USA) cannot be ruled out. Where required, providers rely on appropriate safeguards (for example standard contractual clauses) or applicable adequacy mechanisms. A different level of data protection may apply in third countries. Government access cannot be fully excluded.
11. Storage period
We process personal data only for as long as necessary for the respective purposes or as long as statutory retention obligations exist. Afterwards, data is deleted or anonymized.
12. Your rights
Depending on applicable law, you have the right of access, rectification, deletion, restriction of processing, data portability, and the right to object to certain processing. Where processing is based on your consent, you can withdraw your consent at any time with effect for the future.
Depending on the jurisdiction, additional rights may apply. We review and fulfill requests in accordance with the applicable legal requirements in the specific case. In California, exercising your rights must not result in unlawful discrimination.
13. Complaints
You have the right to lodge a complaint with a data protection supervisory authority. For users in the EU/EEA, this is in particular the authority of your habitual residence, place of work, or the place of the alleged infringement.
14. Changes
We may update this Privacy Policy to reflect changes in legal requirements, technical developments, or changes to our services. The current version is available on our website.
15. Contact for data protection
Sweet Profits Media
Jürgen Erath
Diploma in Business Informatics
(University of Applied Sciences)
c/o IP-Management #7124
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email:
impressum@cakemoodbeyond.com