Privacy Policy
This Privacy Policy explains the nature, scope, and purposes of processing personal data when you visit and use our website – in particular for contact requests, ratings, and the display and linking of products as part of partner programs.
1. Scope
This Privacy Policy applies to cakemoodbeyond.com (including /de and any other language versions) and all related subpages.
If you are located in the European Union or the European Economic Area, the General Data Protection Regulation applies. For cookies and similar technologies, ePrivacy requirements and national implementations apply as well. In Germany, this includes in particular the Telecommunications Digital Services Data Protection Act.
If you are located in other jurisdictions, additional privacy laws may apply, including Switzerland (revDSG), the United Kingdom (UK GDPR and PECR), the United States (for example CCPA and CPRA in California), Canada (PIPEDA), and Australia (Privacy Act 1988).
The applicable legal requirements depend on the specific case and your location.
The controller for data protection purposes is the entity listed in section 15.
2. Hosting and log data
Our hosting provider processes server log data automatically to operate the website. This may include IP address, date and time, requested pages and files, status codes, referrer URL, browser and device information (user agent), and other technical data needed for troubleshooting and IT security.
2.1 Purposes and legal basis
Processing is carried out to provide the website, ensure stability and IT security, and prevent abuse. The legal basis is Article 6(1)(f) GDPR (legitimate interests). A data processing agreement is in place with the hosting provider as required under Article 28 GDPR.
3. Encrypted transmission
Our website uses TLS and SSL encryption to protect data in transit. This helps safeguard information you submit to us while it is being transmitted.
4. Cookies
We use cookies and similar technologies to store information on your device or to access information stored on your device. Some cookies are technically necessary, while others are used only if you have given consent. You can manage your choices via our consent and cookie banner. Specific cookie names, storage periods, and descriptions are provided in our Cookie Policy and in the cookie list shown in the consent and cookie banner.
4.1 Necessary cookies
Necessary cookies are required for the website to function and to save your cookie choices. They are not used for marketing purposes. This includes cookies that store your consent choice, support core website functions, store settings such as language preference, and enable security features.
4.2 Functional cookies
Functional cookies support optional comfort features. In our current configuration, we do not use functional cookies. If this changes in the future, functional cookies will be used only with your consent. You can withdraw or change your consent at any time with future effect via the cookie settings. Specific cookie lists and storage periods are provided in our Cookie Policy.
4.3 Analytics cookies
Analytics cookies help us understand how visitors use the website, for example page views and interactions. Analytics cookies are set only if you explicitly consent in the consent and cookie banner. You can withdraw or change your consent at any time with future effect via the cookie settings.
4.4 Regional notes
Depending on your location, additional rules may apply to cookies and similar technologies, including ePrivacy requirements in the EU and EEA and PECR in the United Kingdom. For visitors from California, Global Privacy Control signals may be relevant as an opt out preference where we are required to honor them under applicable law and where this can be implemented technically. We manage these choices via the consent and cookie banner.
5. Website analytics
We use the WordPress plugin Koko Analytics for audience measurement. Statistics data is stored locally on our own server within our WordPress installation. We do not share this data with the plugin provider or other third parties. We do not build advertising or marketing profiles, and we do not combine analytics with other data sources.
In our current configuration, Koko Analytics may use a first party analytics cookie with a retention period of up to 24 hours. It uses a random identifier to count page views and interactions within that time window and to reduce duplicate counting. No advertising, no profiling. Specific cookie names and details are provided in our Cookie Policy and in the cookie list shown in the consent and cookie banner.
Legal basis: where consent is required for setting or reading cookies or similar technologies, analytics is performed only after your consent via the consent and cookie banner. You can withdraw consent at any time with future effect via the cookie settings.
6. Protection against spam and bots
We use Cloudflare Turnstile to protect our contact form from spam and automated submissions.
6.1 Purpose and legal basis
Processing is carried out to prevent abuse, ensure the integrity of our contact form, and maintain IT security.
For the EU and EEA, the legal basis is Article 6(1)(f) GDPR (legitimate interests in security and abuse prevention). In the United Kingdom, we rely on the relevant legal bases under UK GDPR and the requirements of PECR for storage and access technologies. In Canada, processing follows PIPEDA principles for security and abuse prevention. In Australia, processing follows the Privacy Act 1988 to the extent applicable. In the United States, additional rights may apply depending on state law, including CCPA and CPRA for California residents.
6.2 Scope of processing
When using Cloudflare Turnstile, technical information may be processed to evaluate risk and detect abuse. This may include IP address, timestamps, device and browser information (for example user agent), and signals used to detect automated access. We use Turnstile only to secure the contact form.
6.3 Cookies and consent
Cloudflare Turnstile is implemented as a security measure for abuse prevention. In our current implementation, we do not use Turnstile for advertising, tracking, or profiling. Where storage or access technologies are technically required as part of the security check, they serve security purposes only.
If the technical behavior of Turnstile or our configuration changes in a way that would introduce consent required technologies beyond security, we will update the Cookie Policy and the consent and cookie banner accordingly.
6.4 International transfers
When using Cloudflare Turnstile, processing of personal data in third countries outside the EU and EEA, for example the United States, cannot be ruled out. Data protection standards may differ in third countries, and government access cannot be fully excluded.
6.5 Further information
More information about Cloudflare processing is available in Cloudflare privacy information and in the Cloudflare Turnstile Privacy Addendum. Depending on the processing step, Cloudflare may act as an independent controller or as a service provider.
7. Partner programs
We participate in the Amazon Associates Program in multiple regions. On our website, we display product information and link to Amazon. Depending on region and configuration, we may use features such as Amazon OneLink.
7.1 Affiliate marketing
When you click an affiliate link, you are redirected to the relevant Amazon website. From that point, Amazon processes your data under its own responsibility. Amazon may use cookies or similar technologies to attribute orders and commissions. We receive only aggregated reports, for example number of sales and revenue, and no personal data about individual buyers.
For product displays, content from Amazon such as product images, price information, and availability may be embedded via the Amazon Affiliate WordPress Plugin (AAWP). This content is loaded directly from Amazon servers. Your IP address is transmitted to Amazon because the content cannot otherwise be delivered. Within our plugin settings, we do not use additional click tracking and we do not collect location or country information for analytics purposes.
Regional delivery of Amazon links serves only correct localization, for example the appropriate Amazon store or partner tag. The legal basis is Article 6(1)(f) GDPR (legitimate interests in a functional and region appropriate display). Where legally required, non essential elements are loaded only after your consent via the cookie banner. Further details on cookies are provided in our Cookie Policy.
7.2 Amazon program information
We use affiliate links to Amazon. As an Amazon Associate, we earn from qualifying purchases. When you click an affiliate link, you will be redirected to the relevant Amazon website.
From the moment you access Amazon, Amazon is responsible for processing your data. For information about Amazon processing, please refer to the privacy information of the respective Amazon website:
- amazon.com United States
- amazon.ca Canada
- amazon.com.au Australia
- amazon.co.uk United Kingdom
- amazon.de European Union
Regardless of our cookie settings, cookies or similar technologies may be used on Amazon once you visit Amazon.
There is no additional cost to you.
8. Contact
8.1 Contact form
If you contact us via our contact form, we process the data you provide, for example name, email address, and message, to handle your request. The legal basis is Article 6(1)(b) GDPR for pre contract or contract related communication or Article 6(1)(f) GDPR for our legitimate interest in handling inquiries. Where applicable, processing may also be based on consent under Article 6(1)(a) GDPR.
9. Ratings
If you submit ratings, we process the content you provide and may process technical metadata to display the rating and prevent abuse. The legal basis is Article 6(1)(f) GDPR (legitimate interests in a functioning website and quality assurance). Where applicable, processing may also be based on consent under Article 6(1)(a) GDPR.
10. International data transfers
When using external services and when you visit third party platforms after clicking links, for example Amazon, processing of personal data in third countries, especially the United States, cannot be ruled out. Where required, providers may rely on appropriate safeguards, for example standard contractual clauses, or other applicable mechanisms. Data protection standards may differ in third countries, and government access cannot be fully excluded.
11. Retention
We process personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Data is then deleted or anonymized.
12. Your rights
Depending on applicable law, you may have the right to access, rectification, erasure, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you can withdraw consent at any time with future effect.
13. Complaints
You have the right to lodge a complaint with a data protection supervisory authority. For users in the EU and EEA, this is typically the authority at your habitual residence, place of work, or the place of the alleged infringement.
14. Updates
We may update this Privacy Policy to reflect changes in law, technical developments, or changes to our services. The current version is available on our website.
15. Data protection contact
Sweet Profits Media
Jürgen Erath
Diploma in Business Informatics
(University of Applied Sciences)
c/o IP-Management #7124
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email:
impressum@cakemoodbeyond.com