Privacy Policy
This Privacy Policy explains the nature, scope, and purpose of the processing of personal data when you visit and use our website, including contact requests, ratings and comments, and the display and linking of products through affiliate programs.
1. Scope
This Privacy Policy applies to cakemoodbeyond.com, including the German-language version under /de, and all related subpages.
For visitors from the European Union or European Economic Area, the General Data Protection Regulation (GDPR) applies. Cookies and similar technologies are additionally subject to the ePrivacy Directive and its national implementations, including in Germany the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, Telecommunications Digital Services Data Protection Act).
Visitors from other jurisdictions may additionally be subject to mandatory local data protection laws where the legal requirements for their application are met in the individual case. This may include, in particular, the revised Swiss Federal Act on Data Protection (revFADP), the United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), applicable state laws in the United States, including the California Online Privacy Protection Act (CalOPPA) and, where applicable, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, and the Privacy Act 1988 in Australia.
Only laws that are mandatorily applicable in the individual case govern the processing of personal data. Mentioning additional jurisdictions is solely for transparency and does not constitute voluntary submission to laws that do not apply.
The controller for data protection purposes is the entity named in Section 16.
2. Hosting and Log Data
Our hosting provider, ALL-INKL.COM, automatically processes server log data to operate the website. This may include, in particular, IP address, date and time, accessed pages or files, status codes, referrer URL, browser and device information such as user agent, and additional technical data where necessary for error analysis and IT security.
2.1 Purpose and Legal Basis
The processing takes place to provide the website, maintain stability and IT security, analyze errors, and prevent misuse under Article 6(1)(f) GDPR, based on legitimate interests. We have concluded a data processing agreement with our hosting provider under Article 28 GDPR.
3. Encrypted Transmission
Our website uses Transport Layer Security to securely transmit data. This protects content that you send to us while it is being transmitted.
4. Cookie Categories
We use cookies and similar technologies to store information on, or access information from, your device. Some cookies are technically necessary, while others are only used with your consent. CookieYes manages these choices through our consent and cookie banner. Your general CookieYes choice is stored for up to one year. When the Transparency and Consent Framework of IAB Europe (IAB TCF) is used, coded preferences relating to purposes and vendors may additionally be stored in a technically necessary cookie for up to 730 days. Cookie details, including name, storage period, and description, are available in the consent and cookie banner and in our Cookie Policy. This Privacy Policy explains the purposes, categories, and consent logic without repeating individual cookie names.
4.1 Necessary Cookies
Necessary cookies are required for the secure operation of the website, storing your cookie choice, core website functions, the consistent delivery of the selected language version, and security or protection functions. These cookies are not used for advertising or profiling purposes and are active by default only where technically necessary.
4.2 Functional Cookies
Functional cookies support optional convenience and display functions. Functional cookies are used only with your consent. You may withdraw or adjust your consent at any time with future effect through the cookie settings.
4.3 Analytics Cookies
Analytics cookies help us evaluate the use of the website statistically. They are not used for profiling or advertising purposes and are placed only if you expressly consent through the consent and cookie banner. In the current configuration, a cookie with a storage period of up to 24 hours may be used in the “Analytics” category. You may withdraw or adjust your consent at any time with future effect through the cookie settings.
4.4 Advertising Cookies
Advertising cookies and similar technologies are used only if you expressly consent to the “Advertisement” category in the consent and cookie banner. This category controls, in particular, the display of regionally appropriate affiliate offers through Awin and the related external content, product images, advertising materials, affiliate links, and tracking technologies.
Without your consent to the “Advertisement” category, we do not determine the country from which our website is accessed, select no regionally appropriate affiliate offers, and do not load content, product images, advertising materials, affiliate links, or tracking technologies from Awin or the relevant advertising partners. You may withdraw or adjust your consent at any time with future effect through the cookie settings.
5. Usage Statistics
We use the WordPress plugin Koko Analytics to measure website reach. Statistical data is stored locally on our own server within our WordPress installation. We do not create user profiles for advertising or marketing purposes, combine reach measurement with other data sources, or disclose statistical data to external analytics platforms.
Koko Analytics is assigned to the “Analytics” category. Reach measurement starts only after your consent through the consent and cookie banner. In the current configuration, Koko Analytics may use an analytics cookie with a storage period of up to 24 hours to count page views statistically within that period and reduce duplicate counting. Cookie details are available in the consent and cookie banner and in our Cookie Policy.
Where consent is required to place or read a cookie or similar technology, reach measurement takes place only after your consent under Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG and, where applicable, other requirements such as PECR in the United Kingdom. You may withdraw your consent at any time with future effect through the cookie settings.
6. Protection Against Spam and Bots
We use Cloudflare Turnstile to protect our contact form from spam and automated submissions.
6.1 Purpose and Legal Basis
The processing takes place to prevent misuse, maintain the integrity of our contact form, and support IT security.
For the European Union and European Economic Area, processing takes place under Article 6(1)(f) GDPR, based on legitimate interests in security and misuse prevention. In the United Kingdom, processing may rely on the corresponding legal bases under the UK GDPR and, where applicable, the requirements of PECR for storage or access technologies. In Canada, processing may take place under the principles of PIPEDA, particularly for security and misuse prevention purposes. In Australia, processing may take place under the Privacy Act 1988 where applicable. In the United States, additional rights may apply depending on the state, including under CCPA and CPRA for California visitors.
6.2 Scope of Processing
When you use Cloudflare Turnstile, technical information that may be required for risk and misuse detection can be processed. This may include IP address, timestamps, device and browser information such as user agent, and signals used to detect automated access. We use Turnstile exclusively to secure our contact form.
6.3 Cookies and Consent
Cloudflare Turnstile is integrated as a security function for misuse prevention. In our current implementation, we do not use Turnstile for advertising, tracking, or profiling purposes. Where cookies or similar technologies are technically necessary during security checks, they serve only security and protection functions and are assigned to the “Necessary” category in our current configuration.
Should the technical operation of Turnstile or our configuration change in the future so that technologies requiring consent are used beyond the security function, we may update the Cookie Policy and consent and cookie banner accordingly.
6.4 International Data Transfers
When Cloudflare Turnstile is used, processing of personal data in third countries, including outside the European Union and European Economic Area, such as the United States, cannot be ruled out. Depending on the service component and jurisdiction, Cloudflare may use different safeguards for international transfers, such as standard contractual clauses and, where applicable, additional adequacy mechanisms. Third countries may provide a different level of data protection. Access by public authorities cannot be fully excluded.
6.5 Further Information
Further information about processing by Cloudflare is available in Cloudflare’s privacy notices and the Cloudflare Turnstile Privacy Addendum. Depending on the processing operation, Cloudflare may act as an independent controller or as a service provider.
7. Affiliate Programs
We participate in affiliate programs made available through the affiliate network Awin (AWIN AG). On our website, regional product recommendations, advertising materials, and affiliate links from advertising partners participating in the Awin network may be displayed. These materials are identified as Advertisement.
These materials are displayed only after your express consent to the CookieYes “Advertisement” category. Only after that consent is granted, we determine server-side the country from which our website is accessed. We use this information solely to select regionally appropriate affiliate offers.
Without consent to the “Advertisement” category, we do not determine the country from which our website is accessed, select no regionally appropriate affiliate offers, and do not load content, product images, advertising materials, affiliate links, or tracking technologies from Awin or the relevant advertising partners. If no suitable offer is available for the identified country, we do not display affiliate content.
7.1 Affiliate Marketing
After you consent to the “Advertisement” category, technical connections to Awin and, where applicable, to the relevant advertising partners may be established to display affiliate offers. Technical connection data and information about advertising materials displayed or clicked may be processed where technically necessary to provide, measure, and account for affiliate offers.
When you click an affiliate link, you are redirected through an affiliate link to the website of the relevant advertising partner. After you access that partner’s website, further processing is governed by its own privacy notice. In connection with affiliate linking, Awin and the relevant advertising partner may use cookies or similar technologies to attribute advertising materials, clicks, and, where applicable, transactions to an affiliate referral and to calculate commissions.
The integration of Awin content, country determination, and use of cookies or similar technologies for advertising purposes take place on the basis of your consent under Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, where those provisions apply. You may withdraw your consent at any time with future effect through the cookie settings.
7.2 Awin Affiliate Network
Awin operates an affiliate network that connects advertising partners and publishers. Awin may use cookies and similar tracking technologies to enable the attribution of advertising materials, clicks, and transactions and to calculate commissions. The scope of processing depends on the program used, the advertising materials displayed, and a possible click on an affiliate link.
Advertising partners may vary depending on regional availability and the time of delivery. Awin and the relevant advertising partners process data for purposes they determine in accordance with their respective privacy notices. We receive performance and commission data to evaluate affiliate programs. We do not use that data to identify individual purchasers.
Further information about how Awin processes personal data and uses cookies is available in Awin’s privacy notices and cookie information. When you follow an affiliate link, the privacy notice and cookie information of the relevant advertising partner govern that partner’s own processing. Details about the consent choices available on our website are provided in our consent and cookie banner and in our Cookie Policy.
Using affiliate links does not create additional costs for you.
7.3 Provision of Affiliate Content
With your consent to the “Advertisement” category, we count how often affiliate content is actually provided on recipe pages. Only the total number for each country market is recorded. The data is not assigned to individual visitors. We do not create user profiles or store individual identifiers or personal browsing histories. The aggregated figures are reset when the calendar month changes.
8. Contact
8.1 Contact Form
When you contact us through the contact form, we process the data that you provide, such as name, email address, and message, in order to handle your request. Processing takes place under Article 6(1)(b) GDPR, pre-contractual or contractual communication, or Article 6(1)(f) GDPR, legitimate interests in handling inquiries, and, where applicable, Article 6(1)(a) GDPR, consent.
Contact requests are sent exclusively through our hosting infrastructure at ALL-INKL.COM in conjunction with WP Mail SMTP. We do not use an external email delivery service for this purpose.
9. Ratings and Comments
When you submit ratings or comments, we process the data that you provide, such as name, email address, rating, and comment, and, where applicable, technical metadata, in order to display the rating or comment and prevent misuse. Processing takes place under Article 6(1)(f) GDPR, legitimate interests in a functioning website and quality assurance, and, where applicable, Article 6(1)(a) GDPR, consent.
10. Social Media
We maintain external presences on Facebook, Instagram, and Pinterest. There, we publish only our own editorial content from Cake Mood Beyond, including image material, Reels, and descriptions. Our website and social media presences are connected exclusively through external links.
Further information about processing within the relevant third-party platform is available in the privacy policy of the relevant platform operator. Depending on the platform, visible interactions and aggregated statistics about our presences and content may be made available to us. To the extent Page Insights data is processed in connection with our Facebook page, we and Meta Platforms Ireland Limited are joint controllers within the meaning of the Page Insights Addendum.
11. International Data Transfers
When external services are used or when Awin affiliate offers are displayed or used, processing of personal data in third countries, including the United States, cannot be ruled out. This may concern technical service providers or the relevant linked advertising partner.
Where required, providers may rely on appropriate safeguards, such as standard contractual clauses, or applicable adequacy mechanisms. Third countries may provide a different level of data protection. Access by public authorities cannot be fully excluded.
12. Storage Period
We process personal data only for as long as necessary for the respective purposes or where statutory retention obligations apply. Data is then deleted or anonymized.
13. Your Rights
Depending on applicable law, you may have the right to access, rectification, deletion, restriction of processing, data portability, and objection to certain processing. Where processing is based on your consent, you may withdraw that consent at any time with future effect.
Additional rights may apply depending on the jurisdiction. We review and respond to requests in accordance with the laws that apply in the individual case. For California, this may include that exercising rights must not result in unlawful discrimination where the relevant requirements apply.
14. Complaints
You have the right to lodge a complaint with a data protection supervisory authority. For users in the European Union and European Economic Area, this is in particular the authority at your usual place of residence, place of work, or place of the alleged infringement.
15. Changes
We may update this Privacy Policy to reflect changes in law, technical developments, or changes to our services. The current version is available on our website.
16. Data Protection Contact
Sweet Profits Media
Juergen Erath
Diploma in Business Informatics
(University of Applied Sciences)
c/o IP-Management #7124
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email:
impressum@cakemoodbeyond.com