Privacy Policy

This Privacy Policy explains how we process personal data when you visit and use our website. It covers contact requests, ratings and comments, and the display and linking of products through affiliate programs. 

1. Scope

This Privacy Policy applies to cakemoodbeyond.com, including /de and all related subpages. 

Because we are established in Germany, the General Data Protection Regulation (GDPR) applies to the processing of personal data in connection with our website. Cookies and similar technologies are additionally subject to the ePrivacy Directive and its national implementations, including in Germany the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, Telecommunications Digital Services Data Protection Act).

For visitors from other jurisdictions, mandatory local data protection laws may additionally apply where their legal requirements are met. Depending on the individual case, these may include the Swiss Federal Act on Data Protection (FADP), the United Kingdom General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR), applicable federal or state privacy laws in the United States, the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, and the Privacy Act 1988 in Australia. For California, we take into account the California Online Privacy Protection Act (CalOPPA) and, where applicable, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Only laws that are mandatorily applicable in the individual case govern the processing of personal data. Mentioning additional jurisdictions is solely for transparency and does not constitute voluntary submission to laws that do not apply.

The controller for the processing of personal data is the entity named in Section 16.

2. Hosting and Log Data

Our hosting provider, ALL-INKL.COM, automatically processes server log data to operate the website. This includes IP address, date and time, accessed pages or files, status codes, referrer URL, browser and device information (user agent), and, where applicable, additional technical data for error analysis and IT security.

2.1 Purpose and Legal Basis

The processing takes place to provide the website, ensure stability and IT security, analyze errors, and prevent misuse on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and functional operation of the website. We have concluded a data processing agreement with ALL-INKL.COM under Article 28 GDPR.

3. Encrypted Transmission

Our website uses Transport Layer Security (TLS) to securely transmit data. This protects content that you send to us while it is being transmitted.

4. Cookie Categories

We use cookies and similar technologies to store information on, or access information from, your device. Some cookies and similar technologies are technically necessary, while others are used only if you have consented to them. These choices are managed through our consent and cookie banner (CookieYes). CookieYes is used to obtain, store, document, and manage your choices. For consent management, necessary technical consent information may be processed, including a consent ID, an anonymized IP address, the country derived from it, the consent status, and the date and time of the decision. CookieYes Limited processes this data as a processor on our behalf to provide the consent service. We have concluded a data processing agreement with CookieYes under Article 28 GDPR. The general CookieYes choice is stored for up to one year.

When the Transparency and Consent Framework of IAB Europe (IAB TCF) is used, standardized preferences relating to purposes and participating vendors may additionally be processed and represented within the consent system. Current information about the cookies and similar technologies used on our website, including their name, provider, purpose, category, and storage period, is available in the consent and cookie banner and in our Cookie Policy. This Privacy Policy describes the purposes, categories, legal bases, and consent logic at a higher level without repeating individual cookie names.

4.1 Necessary Cookies

Necessary cookies are required for the secure operation of the website, storing and documenting your cookie choices, core website functions, the consistent delivery of the selected language version, and security and protection functions. These cookies are not used for advertising or profiling purposes and are active by default in our current configuration where technically necessary.

Processing for managing and documenting your consent decision takes place to comply with our accountability and proof obligations under Articles 5(2) and 7(1) GDPR on the basis of Article 6(1)(c) GDPR. Security and protection functions are based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and legally compliant operation of the website. Where Section 25 TDDDG applies, technically strictly necessary storage or access operations are permitted under Section 25(2) TDDDG.

4.2 Functional Cookies

Functional cookies support optional convenience and display functions. They are used only with your consent. Where personal data is processed, the legal basis is Article 6(1)(a) GDPR. Section 25(1) TDDDG applies to the storage of or access to information on your device. You may withdraw or adjust your consent at any time with future effect through the cookie settings.

4.3 Analytics Cookies

Analytics cookies help us statistically evaluate the use of the website. They are not used for profiling or advertising purposes and are placed only if you expressly consent through the consent and cookie banner. In our current configuration, an analytics cookie with a storage period of up to 24 hours is used after you consent to the “Analytics” category. You may withdraw or adjust your consent at any time with future effect through the cookie settings.

4.4 Advertising Cookies

Advertising cookies and similar technologies are used only if you expressly consent to the “Advertisement” category in the consent and cookie banner. This category controls the display of regionally appropriate affiliate offers through Awin and the related external content, product images, advertising materials, affiliate links, and tracking technologies. It also controls the aggregated country statistics described in Section 7.3. These statistics record page views after advertising consent has been granted as aggregated values by country.

Without your consent to the “Advertisement” category, we do not determine a country for these purposes. We do not compile aggregated country statistics. We do not select regionally appropriate affiliate offers. We also do not load content, product images, advertising materials, affiliate links, or tracking technologies from Awin or the respective advertising partners. You may withdraw or adjust your consent at any time with future effect through the cookie settings.

Our consent system, CookieYes, takes Do Not Track (DNT) browser signals into account as part of its consent management. Technologies requiring consent are activated on our website only in accordance with the settings recorded by the consent system. We do not operate an additional, independent DNT mechanism.

5. Usage Statistics

We use the WordPress plugin Koko Analytics to measure website reach. Statistical data is stored locally on our own server within our WordPress installation. We do not create user profiles for advertising or marketing purposes, combine reach measurement with other data sources, or disclose statistical data to external analytics platforms.

Koko Analytics is assigned to the “Analytics” category. Reach measurement starts only after your consent through the consent and cookie banner. In our current configuration, Koko Analytics uses an analytics cookie with a storage period of up to 24 hours after consent is granted to count page views statistically and reduce duplicate counting. Cookie details are available in the consent and cookie banner and in our Cookie Policy.

Rejecting the “Analytics” category disables Koko Analytics, which Cake Mood Beyond uses for audience measurement. If you also consent to the “Advertisement” category, the affiliate attribution, measurement, and commission-related processing described in Section 7 may still take place independently through Awin and the respective advertising partners.

Reach measurement takes place only after your consent. Where personal data is processed, the legal basis is Article 6(1)(a) GDPR. Section 25(1) TDDDG applies to the storage of or access to information on your device. You may withdraw your consent at any time with future effect through the cookie settings.

6. Protection Against Spam and Bots

We use Cloudflare Turnstile to protect our contact form from spam and automated submissions.

6.1 Purpose and Legal Basis

The processing takes place to prevent misuse, ensure the integrity of our contact form, and support IT security.

The processing takes place on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our contact form and website against automated or abusive submissions.

6.2 Scope of Processing

Cloudflare Turnstile processes technical signals required for risk and misuse detection. These include the IP address, browser and connection information such as the user agent and TLS-related signals, as well as information about the site key used and the referring website. We use Turnstile exclusively to secure our contact form.

6.3 Cookies and Consent

Cloudflare Turnstile is integrated as a security function for misuse prevention. We do not use Turnstile for advertising, marketing, or profiling purposes. Where Turnstile stores information on or accesses information from your device for the security check, this serves exclusively security and protection functions and is assigned to the “Necessary” category in our current configuration. Where Section 25 TDDDG applies, we rely on Section 25(2) TDDDG for such strictly necessary storage or access operations.

6.4 International Data Transfers

When Cloudflare Turnstile is used, personal data may be processed outside the European Union and the European Economic Area, particularly in the United States. The safeguards described in Section 11 apply to such transfers.

6.5 Further Information

Further information about processing by Cloudflare is available in Cloudflare’s privacy notices and the Cloudflare Turnstile Privacy Addendum. For signals that Cloudflare processes on our behalf to provide Turnstile, Cloudflare acts as a processor. Where Cloudflare processes signals under its own responsibility to improve bot detection, Cloudflare acts as an independent controller and, according to its own information, relies on legitimate interests for that processing.

7. Affiliate Programs

We participate in affiliate programs made available through the Awin affiliate network. The operator of the network relevant to us is AWIN AG, Otto-Ostrowski-Straße 1A, 10249 Berlin, Germany. Our website may display regional product recommendations, advertising materials, and affiliate links from participating advertising partners. Advertising content is identified as Advertisement.

Affiliate offers are activated only after your express consent to the CookieYes “Advertisement” category. Only then do we determine on the server side the country from which our website is accessed. We use this information solely to select available regional affiliate offers and for the aggregated country statistics described in Section 7.3. We do not create an individual visitor profile for this purpose.

Without your consent, we do not determine a country for these purposes, compile aggregated country statistics, or load affiliate content or related tracking technologies from Awin or the respective advertising partners. If no suitable affiliate offer is available for a country, we do not display affiliate content there.

7.1 Affiliate Marketing

After you consent, technical connections to Awin and the respective advertising partners may be established to provide and measure affiliate offers. Technical connection data, pseudonymous identifiers, and information about displayed or clicked advertising materials may be processed.

When you click an affiliate link, you are redirected to the website of the respective advertising partner. Awin and the advertising partner may use cookies or similar technologies to attribute advertising materials, clicks, and, where applicable, transactions to an affiliate referral and to calculate commissions. Further processing on the advertising partner’s website is governed by that partner’s own privacy notice.

The activation of our affiliate functions and the related country assignment take place on the basis of your consent under Article 6(1)(a) GDPR. Where information is stored on or accessed from your device for this purpose, this additionally takes place on the basis of your consent under Section 25(1) TDDDG. You may withdraw your consent at any time with future effect through the cookie settings.

7.2 Awin Affiliate Network

Awin operates the affiliate network and may use cookies or similar technologies to attribute advertising materials, clicks, and transactions and to calculate commissions. For Awin affiliate tracking, we, Awin, and the respective advertising partner may act as joint controllers within the meaning of Article 26 GDPR. You may exercise your data protection rights against any joint controller.

Depending on the affiliate program, we may receive pseudonymous performance, click, transaction, product, and commission data from Awin. We do not use this data to identify individual purchasers. Awin and the respective advertising partners may process information about affiliate-related online activities where this is necessary and legally permissible for attribution, measurement, and accounting.

Further information about the processing of personal data by Awin is available in Awin’s privacy notices and cookie information. The respective advertising partner’s own privacy notice and cookie information apply to that partner’s processing.

Using affiliate links does not create additional costs for you.

7.3 Aggregated Country Statistics

After you consent to the “Advertisement” category, we record page views as aggregated counts by country for the internal management and quality control of our regional affiliate function and to assess for which additional countries regional affiliate offers may be relevant in the future. Page views from countries for which affiliate offers are available are included. Page views from other countries for which no regional affiliate offers are currently available are also included, provided that consent to the “Advertisement” category has been given for the respective page view.

We use the server-provided two-letter country code for country assignment. Only the aggregated counts by country are stored in the country statistics themselves. Not stored in the country statistics are IP addresses, individual identifiers, consent IDs, URLs, referrers, individual page views, timestamps, or personal browsing histories. We do not create user profiles or combine the values with other data sources. The values are not disclosed to Awin, advertising partners, or external analytics platforms. The country statistics do not place additional cookies or comparable identifiers. The aggregated values are reset when the month changes.

Country assignment and the creation of the country statistics are activated only after you consent to the “Advertisement” category. Your consent is the legal basis for the related processing of personal data under Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect through the cookie settings.

8. Contact

8.1 Contact Form

When you contact us through the contact form, we process the data you provide, in particular your name, email address, and message, in order to handle and respond to your request.

The processing takes place on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in providing you with a means of contacting us and in properly handling incoming requests. Where input fields are marked as required, we need this information in order to process and respond to your request.

Contact requests are sent exclusively through our hosting infrastructure at ALL-INKL.COM in conjunction with WP Mail SMTP. We do not use an external email delivery service for this purpose.

9. Ratings and Comments

When you submit ratings or comments, we process the data you provide, in particular your name, email address, rating, and comment, as well as technical metadata where applicable. Processing serves to provide the rating and comment function, ensure quality, and prevent misuse and takes place on the basis of Article 6(1)(f) GDPR. Where input fields are marked as required, we need this information in order to process the rating or comment and protect the function against misuse.

10. Social Media

We maintain external presences on Facebook, Instagram, and Pinterest. There, we publish editorial content from Cake Mood Beyond, including image material, Reels, and descriptions. Our website and our social media presences are connected exclusively through external links.

Further information about processing within the respective third-party platform is available in the privacy notices of the respective platform operator. Depending on the platform, visible interactions and aggregated statistics about our presences and content may be made available to us. To the extent Page Insights data is processed in connection with our Facebook page, we and Meta Platforms Ireland Limited are joint controllers under the Page Insights Controller Addendum.

11. International Data Transfers

When external services such as CookieYes and Cloudflare Turnstile are used, and when Awin affiliate offers are displayed or used, personal data may be processed outside the European Union and the European Economic Area. This may involve the United Kingdom, the United States, or the location or infrastructure of the respective participating advertising partner.

For transfers to countries covered by an adequacy decision of the European Commission, we rely on that decision. An adequacy decision currently exists for the United Kingdom. Where no adequacy decision exists, appropriate safeguards, in particular standard contractual clauses, and, where applicable, supplementary safeguards may be used. Recipient countries without an adequacy decision may provide a different level of data protection. Access by public authorities cannot be fully excluded. Further information about the safeguards used and how you may obtain a copy is available upon request through the contact details provided in Section 16.

12. Storage Period

We process personal data only for as long as necessary for the respective purposes or where statutory retention, proof, or accountability obligations apply. Data is then deleted or anonymized. The storage period stated in Section 4 applies to the general CookieYes choice stored in the browser. Records of consent may be retained beyond that period for as long as necessary to comply with statutory proof and accountability obligations.

13. Your Rights

Under the GDPR, you have the right to access your personal data and the rights to rectification, erasure, restriction of processing, data portability, and objection. These rights apply subject to the respective requirements of the GDPR. Where processing is based on your consent, you may withdraw that consent at any time with future effect. The lawfulness of processing carried out before withdrawal remains unaffected.

Where additional mandatory data protection laws of other jurisdictions apply, further rights may be available. To exercise your data protection rights, you may contact us using the contact details provided in Section 16.

14. Complaints

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. You may contact the supervisory authority of your usual place of residence, your place of work, or the place of the alleged infringement.

15. Changes

We may update this Privacy Policy to reflect changes in law, technical developments, or changes to our services. The current version is available on our website. We will indicate material changes on this page in an appropriate manner. Where legally required, we will additionally provide information through appropriate communication channels or obtain renewed consent.

Effective as of: August 15, 2026.

16. Data Protection Contact

Sweet Profits Media
Juergen Erath
Diploma in Business Informatics
(University of Applied Sciences)
c/o IP-Management #7124
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Email: