Privacy Policy
This Privacy Policy explains the nature, scope and purpose of the processing of personal data when you visit and use our website, in particular for contact requests, reviews, and the display and linking of products within partner programmes.
1. Scope
This Privacy Policy applies to cakemoodbeyond.com (including /en as well as, where applicable, other language versions) and all related subpages.
For visitors from the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) applies. For cookies and similar technologies, the Directive on privacy and electronic communications (ePrivacy Directive) and its national implementations also apply, in Germany in particular the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG).
For visitors from other jurisdictions, additional applicable data protection laws may apply, in particular in Switzerland the revised Federal Act on Data Protection (revFADP), in the United Kingdom the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR), in the United States of America depending on the state (for example in California the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)), in Canada the Personal Information Protection and Electronic Documents Act (PIPEDA), and in Australia the Privacy Act 1988.
The applicable legal requirements in each individual case remain decisive.
The controller for data protection purposes (we) is the entity named in section 15.
2. Hosting and log data
Our hosting provider (ALL-INKL.COM) automatically processes server log data for the operation of the website. This includes in particular: IP address, date and time, pages/files accessed, status codes, referrer URL, browser/device information (user agent), and, where applicable, further technical data for error analysis and IT security.
2.1 Purpose and legal basis
The processing takes place to provide the website, ensure stability and IT security, and analyse errors and prevent misuse. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). We have concluded a data processing agreement (DPA) with the hosting provider pursuant to Art. 28 GDPR.
3. Encrypted transmission
Our website uses Transport Layer Security (TLS) and Secure Sockets Layer (SSL) to securely transmit data. This protects content that you send to us during transmission.
4. Cookie categories
We use cookies and similar technologies to store information on your device or access information from it. Some cookies are technically necessary, while others are only used if you have given your consent. Control is provided through our consent and cookie banner (CookieYes). Cookie details (name, storage period, description) are listed in the consent and cookie banner and in the Cookie Policy. In this Privacy Policy, we describe the purposes, categories and consent logic without repeating individual cookie names.
4.1 Necessary cookies
Necessary cookies are required for the secure operation of the website, the storage of your cookie choice, basic website functions, the consistent delivery of the selected language version, and security and protection functions. These cookies are not used for advertising or profiling purposes and are active by default in our current configuration where they are technically required.
4.2 Functional cookies
Functional cookies support optional convenience and display features as well as country-based settings, in particular for the appropriate display of product links. Functional cookies are only used with your consent. You can withdraw or adjust any consent you have given at any time with effect for the future via the cookie settings.
4.3 Analytics cookies
Analytics cookies help us analyse website usage statistically. They are not used for profiling or advertising purposes and are only set if you expressly consent in the consent and cookie banner. In the current configuration, one cookie in the “Analytics” category may be used with a storage period of up to 24 hours. You can withdraw or adjust any consent you have given at any time with effect for the future via the cookie settings.
4.4 Regional notices
For visitors from California, Global Privacy Control (GPC) signals may be taken into account as an indication of an opt-out request where legally required and technically implemented. The effect and scope of such handling depend on the technical implementation and the applicable legal requirements. Depending on the region, additional specific rules may apply to cookies and similar technologies, for example in the European Union and the European Economic Area under the ePrivacy Directive and national implementations, in Germany in particular under the TDDDG, and in the United Kingdom additionally under the PECR. Where applicable, corresponding implementation may take place through our consent and cookie banner.
5. Usage statistics
We use the WordPress plugin Koko Analytics for audience measurement. Statistical data is stored locally on our own server within our WordPress installation. We do not create user profiles for advertising or marketing purposes, we do not combine audience measurement with other data sources, and we do not disclose the statistical data to external analytics platforms.
Koko Analytics is assigned to the “Analytics” category. Audience measurement only starts after your consent via the consent and cookie banner. In the current configuration, Koko Analytics may use an analytics cookie with a storage period of up to 24 hours in order to count page views statistically within that period and reduce duplicate counts. Cookie details are listed in the consent and cookie banner and in the Cookie Policy.
Legal basis: Where consent is required for setting or reading the cookie or similar technologies, audience measurement only takes place after your consent (Art. 6 para. 1 lit. a GDPR in conjunction with section 25 para. 1 TDDDG and, where applicable, the PECR in the United Kingdom). You can withdraw any consent you have given at any time with effect for the future via the cookie settings.
6. Protection against spam and bots
We use Cloudflare Turnstile to protect our contact form against spam and automated submissions.
6.1 Purpose and legal basis
The processing takes place to prevent misuse, safeguard the integrity of our contact form, and ensure IT security.
For the European Union and the European Economic Area, the legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in security and the prevention of misuse). In the United Kingdom, the processing may be based on the corresponding legal bases under the UK GDPR and the applicable requirements of the PECR for storage or access technologies. In Canada, the processing may take place in accordance with the principles of PIPEDA, in particular for security and misuse prevention purposes. In Australia, the processing may take place under the Privacy Act 1988, where applicable. In the United States, additional rights may apply depending on the state, in particular under the CCPA / CPRA for visitors from California.
6.2 Scope of processing
When Cloudflare Turnstile is used, technical information may be processed that may be required for risk and misuse detection. This may include in particular IP address, timestamp, device and browser information (for example user agent), as well as signals used to detect automated access. We use Turnstile solely for the protection of the contact form.
6.3 Cookies and consent
Cloudflare Turnstile is integrated by us as a security function for misuse prevention. In our current implementation, we do not use Turnstile for advertising, tracking, or profiling purposes. Where cookies or similar technologies are technically required as part of the security check, they serve security and protection functions only and are assigned to the “Necessary” category in our current configuration.
If the technical functioning of Turnstile or our configuration changes in the future so that technologies requiring consent are used beyond the security function, we may update the Cookie Policy and the consent and cookie banner accordingly.
6.4 Data transfers to third countries
When Cloudflare Turnstile is used, processing of personal data in third countries (in particular outside the European Union and the European Economic Area, for example the United States) cannot be ruled out. Depending on the service element and jurisdiction, Cloudflare may use different safeguards for international transfers, for example standard contractual clauses and, where applicable, further adequacy mechanisms. A different level of data protection may apply in third countries. Access by public authorities cannot be ruled out completely.
6.5 Further information
Further information about Cloudflare’s processing can be found in Cloudflare’s privacy notices and in the Cloudflare Turnstile Privacy Addendum. Depending on the specific processing activity, Cloudflare may act either as an independent controller or as a service provider.
7. Partner programmes
We participate in the Amazon affiliate programme (Amazon PartnerNet / Amazon Associates) in several regions. On our website, we display product information and link to Amazon. Depending on the region and configuration, we may also use functions such as Amazon OneLink where available.
7.1 Affiliate marketing
If you click an affiliate link, you will be redirected to the relevant Amazon website. From the moment you visit the Amazon platform, Amazon processes your data under its own data protection responsibility. Amazon may use cookies or similar technologies for this purpose in order to track orders and assign commissions. We only receive aggregated reports (for example number of sales, revenue) and no personal data relating to individual purchasers.
To display products, Amazon content (for example product images, price and availability information) may be integrated via the Amazon Affiliate WordPress Plugin (AAWP). This content is technically loaded directly from Amazon servers. Your IP address is transmitted to Amazon because the display would otherwise not be technically possible. Within the plugin settings, we do not use any additional click tracking and we do not use location or country detection for analytics purposes.
The regional delivery of Amazon links serves only correct localisation. Where functional cookies or similar technologies are used for country-based settings for this purpose, this only takes place with your consent via the cookie banner. Otherwise, we rely on Art. 6 para. 1 lit. f GDPR (legitimate interest in a functional, regionally appropriate display) for the technically necessary display. Further details about cookies can be found in our Cookie Policy.
7.2 Amazon affiliate programme
We use affiliate links to Amazon. As an Amazon Associate, we participate in the Amazon affiliate programme. If you click an affiliate link, you will be redirected to the relevant Amazon website.
From the moment the relevant Amazon platform is accessed, Amazon is responsible for processing your data. Information on Amazon’s data processing can be found in the privacy information of the relevant Amazon website:
- amazon.com (USA)
- amazon.ca (Canada)
- amazon.com.au (Australia)
- amazon.co.uk (United Kingdom)
- amazon.de (EU)
Regardless of our cookie settings, cookies or similar technologies may be used on the Amazon platform once you visit Amazon.
As Amazon Associates, we earn from qualifying purchases. There are no additional costs for you.
8. Contact
8.1 Contact form
If you contact us via the contact form, we process the data you provide (for example name, email address, message) in order to handle your request. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual communication) or Art. 6 para. 1 lit. f GDPR (legitimate interest in handling requests) and, where applicable, Art. 6 para. 1 lit. a GDPR (consent).
9. Reviews
If you submit reviews, we process the content you provide and, where applicable, technical metadata in order to display the review and prevent misuse. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a functioning website and quality assurance) and, where applicable, Art. 6 para. 1 lit. a GDPR (consent).
10. International data transfers
When external services are used or third-party platforms are visited (for example Amazon after a click), processing of personal data in third countries (in particular the United States) cannot be ruled out. Where required, providers may rely on appropriate safeguards (for example standard contractual clauses) or applicable adequacy mechanisms. A different level of data protection may apply in third countries. Access by public authorities cannot be ruled out completely.
11. Storage period
We process personal data only for as long as this is necessary for the relevant purposes or as long as statutory retention obligations apply. Data is then deleted or anonymised.
12. Your rights
Depending on the applicable law, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection to certain processing activities. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Additional rights may apply depending on the jurisdiction. We review and fulfil requests in accordance with the legal requirements applicable in the individual case. For California, this includes in particular that the exercise of rights must not result in unlawful discrimination.
13. Complaints
You have the right to lodge a complaint with a data protection supervisory authority. For users in the European Union and the European Economic Area, this is in particular the supervisory authority of your habitual residence, place of work, or the place of the alleged infringement.
14. Changes
We may update this Privacy Policy to reflect changes in the law, technical developments, or changes to our services. The current version is available on our website.
15. Data protection contact
Sweet Profits Media
Jürgen Erath
Diploma in Business Informatics
(University of Applied Sciences)
c/o IP-Management #7124
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
E-Mail:
impressum@cakemoodbeyond.com