Privacy Policy

This Privacy Policy explains the nature, scope and purposes of the processing of personal data when you visit and use our website, in particular in connection with contact inquiries, ratings and comments, as well as the display and linking of products within affiliate programs. 

1. Scope

This Privacy Policy applies to cakemoodbeyond.com, including /de, and all associated subpages.

For visitors from the European Union (EU) or the European Economic Area (EEA), the General Data Protection Regulation (GDPR) applies. Cookies and comparable technologies are additionally subject to the Directive on privacy and electronic communications (ePrivacy Directive) and its national implementations, in Germany in particular the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, Telecommunications Digital Services Data Protection Act).

For visitors from other jurisdictions, additional data protection laws may apply if their statutory requirements are met in the individual case. These may include, in particular, the revised Swiss Federal Act on Data Protection (revFADP), the United Kingdom General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR), in the United States of America depending on the relevant state and scope of application, for example in California the California Online Privacy Protection Act (CalOPPA) and, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), in Canada the Personal Information Protection and Electronic Documents Act (PIPEDA), and in Australia the Privacy Act 1988.

Only the statutory provisions that are mandatorily applicable in the individual case are relevant. The reference to other jurisdictions is provided solely for transparency and does not constitute a voluntary submission to laws that would not otherwise apply.

The controller within the meaning of data protection law (we) is the entity identified in Section 16.

2. Hosting and Log Data

Our hosting provider (ALL-INKL.COM) automatically processes server log data for the operation of the website. This may include in particular: IP address, date and time, pages/files accessed, status codes, referrer URL, browser/device information (user agent) and, where applicable, further technical data required for error analysis and IT security.

2.1 Purposes and Legal Bases

The processing is carried out to provide the website, ensure stability and IT security, analyze errors and prevent misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interests). We have entered into a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.

3. Encrypted Transmission

Our website uses Transport Layer Security (TLS) to transmit data securely. This protects the content that you submit to us during transmission.

4. Cookie Categories

We use cookies and comparable technologies to store information on your device or access information stored on your device. Some cookies are technically necessary, while others are only used if you have given your consent. Your choices are managed through our consent and cookie banner (CookieYes). Details about cookies, including their names, storage periods and descriptions, are provided in the consent and cookie banner and in our Cookie Policy. This Privacy Policy explains the purposes, categories and consent logic without repeating individual cookie names.

4.1 Necessary Cookies

Necessary cookies are required for the secure operation of the website, the storage of your cookie choices, essential website functions, the consistent provision of your selected language version and security and protection functions. These cookies are not used for advertising or profiling purposes and are enabled by default in our current configuration where technically necessary.

4.2 Functional Cookies

Functional cookies support optional convenience and display functions as well as country-related settings, in particular the appropriate display of product links. Functional cookies are only used after you have given your consent. You can withdraw or adjust your consent at any time with effect for the future through the cookie settings.

4.3 Analytics Cookies

Analytics cookies help us statistically analyze the use of the website. They are not used for profiling or advertising purposes and are only set if you expressly consent through the consent and cookie banner. In our current configuration, one cookie with a storage period of up to 24 hours may be used in the “Analytics” category. You can withdraw or adjust your consent at any time with effect for the future through the cookie settings.

4.4 Regional Information

We do not respond separately to Do Not Track signals (DNT). Whether external providers process personal data over time and across different websites is governed by their respective privacy policies.

For visitors from California, Global Privacy Control signals (GPC) may be taken into account as an indication of an opt-out request where this is legally required and technically implemented. The effect and scope of such consideration depend on the technical implementation and the applicable statutory requirements. Depending on the relevant region, additional requirements may apply to cookies and comparable technologies, for example in the European Union and the European Economic Area under the ePrivacy Directive and its national implementations, in Germany in particular under the TDDDG and in the United Kingdom additionally under the PECR. Where applicable, corresponding settings may be implemented through our consent and cookie banner.

5. Usage Statistics

We use the WordPress plugin Koko Analytics to measure website reach. The statistical data is stored locally on our own server within our WordPress installation. We do not create user profiles for advertising or marketing purposes, combine the usage statistics with other data sources or disclose the statistical data to external analytics platforms.

Koko Analytics is included in the “Analytics” category. Website reach measurement only starts after you have given your consent through the consent and cookie banner. In our current configuration, Koko Analytics may use one analytics cookie with a storage period of up to 24 hours to count page views statistically within this period and reduce duplicate counting. Details about the cookie are provided in the consent and cookie banner and in our Cookie Policy.

Legal basis: Where consent is required for setting or accessing cookies or comparable technologies, website reach measurement only takes place after you have given your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG and, where applicable, the relevant requirements in the individual case, such as the PECR in the United Kingdom). You can withdraw your consent at any time with effect for the future through the cookie settings.

6. Protection Against Spam and Bots

We use Cloudflare Turnstile to protect our contact form against spam and automated submissions.

6.1 Purposes and Legal Bases

The processing is carried out to prevent misuse, ensure the integrity of our contact form and maintain IT security.

Within the European Union and the European Economic Area, the legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interests in security and the prevention of misuse). In the United Kingdom, the processing may be based on the corresponding provisions of the UK GDPR and, where applicable, the requirements of the PECR for storage or access technologies. In Canada, the processing may be carried out in accordance with the principles of PIPEDA, in particular for security and misuse prevention purposes. In Australia, the processing may be carried out in accordance with the Privacy Act 1988, where applicable. In the United States, additional rights may apply depending on the relevant state, in particular under the CCPA and CPRA for visitors from California.

6.2 Scope of Processing

When Cloudflare Turnstile is used, technical information required for risk assessment and misuse detection may be processed. This may include in particular the IP address, timestamp, device and browser information, such as the user agent, and signals used to identify automated access. We use Turnstile exclusively to secure the contact form.

6.3 Cookies and Consent

Cloudflare Turnstile is integrated as a security function to prevent misuse. In our current implementation, we do not use Turnstile for advertising, tracking or profiling purposes. Where cookies or comparable technologies are technically required as part of the security check, they are used exclusively for security and protection functions and are assigned to the “Necessary” category in our current configuration.

If the technical operation of Turnstile or our configuration changes in the future and technologies requiring consent are used beyond the security function, we may update our Cookie Policy and consent and cookie banner accordingly.

6.4 International Data Transfers

When Cloudflare Turnstile is used, the processing of personal data in third countries, in particular outside the European Union and the European Economic Area, for example in the United States, cannot be ruled out. Depending on the relevant service component and jurisdiction, Cloudflare may use different safeguards for international transfers, such as standard contractual clauses and, where applicable, further adequacy mechanisms. A different level of data protection may apply in third countries. Access by public authorities cannot be ruled out entirely.

6.5 Further Information

Further information about processing by Cloudflare is available in Cloudflare’s privacy notices and the Cloudflare Turnstile Privacy Addendum. Depending on the relevant processing step, Cloudflare may act under its own responsibility under data protection law or as a service provider.

7. Affiliate Programs

We participate in the Amazon affiliate program (Amazon PartnerNet/Amazon Associates) in several regions. We display product information on our website and link to Amazon. Depending on the relevant region and configuration, we use functions such as Amazon OneLink where available.

7.1 Affiliate Marketing

If you click on an affiliate link, you will be redirected to the relevant Amazon website. Once you access the Amazon platform, Amazon processes your data under its own responsibility under data protection law. Amazon may use cookies or comparable technologies to track orders and attribute commissions. We only receive aggregated reports, such as the number of sales and revenue, and do not receive personal data relating to individual purchasers.

For the display of products, content from Amazon, such as product images, prices and availability information, may be integrated through the Amazon Affiliate WordPress Plugin (AAWP). This content is loaded directly from Amazon servers. Your IP address is transmitted to Amazon because the content cannot otherwise be displayed technically. We do not use any additional click tracking or location or country data collection for analytics purposes within the plugin settings.

The regional delivery of Amazon links is used exclusively for correct localization. Geo-targeting is enabled but is only performed after you have consented to functional cookies. Only then is the required functional cookie set. For the purpose of determining the relevant country, the current IP address may be processed through a geolocation service and the identified country may be stored temporarily. Only after you have given your consent can the appropriate regional Amazon store be assigned. Only in this case are we able to receive an affiliate commission. In all other respects, we rely on Art. 6(1)(f) GDPR (legitimate interests in a functional and regionally appropriate display) for the technically necessary display. Further information about cookies is provided in our Cookie Policy.

7.2 Amazon Affiliate Program

We use affiliate links to Amazon. As an Amazon Associate, we participate in the Amazon affiliate program. If you click on an affiliate link, you will be redirected to the relevant Amazon website.

Once you access the relevant Amazon platform, Amazon is responsible for the processing of your data. Information about data processing by Amazon is available in the privacy notices of the relevant Amazon website:

• amazon.com (USA)
• amazon.ca (Canada)
• amazon.com.au (Australia)
• amazon.co.uk (United Kingdom)
• amazon.de (EU)

Irrespective of our cookie settings, Amazon may use cookies or comparable technologies on the Amazon platform once you access Amazon.

As an Amazon Associate, we earn from qualifying purchases. This does not result in any additional costs for you.

8. Contact

8.1 Contact Form

If you contact us through our contact form, we process the data that you provide, such as your name, email address and message, to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual communication) or Art. 6(1)(f) GDPR (legitimate interests in responding to inquiries) and, where applicable, Art. 6(1)(a) GDPR (consent).

9. Ratings and Comments

If you submit ratings or comments, we process the data that you provide, such as your name, email address, rating and comment, as well as any technical metadata, where applicable, to display the rating or comment and prevent misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in maintaining a functional website and ensuring quality) and, where applicable, Art. 6(1)(a) GDPR (consent).

10. Social Media

We maintain external profiles on Facebook, Instagram and Pinterest. There, we publish exclusively our own editorial content from Cake Mood Beyond, in particular images, reels and descriptions. Our website and our social media profiles are connected exclusively through external links.

Further information on data processing within the respective third-party platform is available in the privacy policy of the respective platform provider. Depending on the platform, visible interactions and aggregated statistics relating to our profiles and content may be made available to us. To the extent that Insights Data is processed in connection with our Facebook Page, we and Meta Platforms Ireland Limited act as joint controllers in accordance with the Page Insights Controller Addendum.

11. International Data Transfers

When external services are used or third-party platforms are accessed, for example Amazon after a click, the processing of personal data in third countries, in particular in the United States, cannot be ruled out. Where required, providers may rely on appropriate safeguards, such as standard contractual clauses, or applicable adequacy mechanisms. A different level of data protection may apply in third countries. Access by public authorities cannot be ruled out entirely.

12. Storage Periods

We process personal data only for as long as this is necessary for the relevant purposes or statutory retention obligations apply. The data is subsequently deleted or anonymized.

13. Your Rights

Depending on the applicable law, you may have the right of access, rectification, erasure, restriction of processing, data portability and objection to certain processing activities. Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.

Additional rights may apply depending on the relevant jurisdiction. We review and respond to requests in accordance with the statutory requirements applicable in the individual case. For California, this may include in particular that the exercise of rights must not result in unlawful discrimination where the relevant requirements apply in the individual case.

14. Complaints

You have the right to lodge a complaint with a data protection supervisory authority. For users in the European Union and the European Economic Area, this is in particular the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

15. Amendments

We may amend this Privacy Policy to reflect changes in the law, technical developments or changes to our services. The current version is available on our website.

16. Data Protection Contact

Sweet Profits Media
Juergen Erath
Diploma in Business Informatics
(University of Applied Sciences)
c/o IP-Management #7124
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Email:
impressum@cakemoodbeyond.comCopy