Privacy Policy (Status: September 2025)

1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
ISIA Media Verlag UG (haftungsbeschränkt)
Prellerstraße 17, 04315 Leipzig, Germany
Tel.: +49 (0)341 6870612
Email: service@isia-m-verlag.de

1.3 For security reasons and to protect the transmission of confidential content (e.g., orders, inquiries), this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website
When using our website for informational purposes only, we collect only the data transmitted by your browser to our server (“server log files”):

• visited page

• date and time

• amount of data transferred

• source/referrer

• browser type/version

• operating system

• IP address (possibly anonymized)

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in stability and security). Data is not passed on unless there are specific indications of misuse.

3) Cookies & Consent
We use cookies to make our website user-friendly.

• Session cookies: automatically deleted after closing the browser.

• Persistent cookies: stored for a longer period, depending on the browser.

• Analytics/marketing cookies: only with your consent (Art. 6 (1) lit. a GDPR) via our cookie consent tool.

You can delete or block cookies at any time. Functionality may be limited without cookies.

4) Contact
When contacting us (email, form), we process your data solely to handle your request.
Legal basis:

• Art. 6 (1) lit. f GDPR (legitimate interest in processing),

• Art. 6 (1) lit. b GDPR (contract or pre-contractual measures).

Deletion: after final resolution, unless statutory retention obligations exist.

5) Customer Account
To open an account, we process the data you provide.
Legal basis: Art. 6 (1) lit. b GDPR.
Deletion: possible at any time by email; retention obligations (HGB/AO: 6/10 years) remain unaffected.

6) Comment Function
When using the comment function, we store: comment, time, username, IP address (for security), email address (for contact in case of disputes).
Legal basis: Art. 6 (1) lit. f GDPR.

7) Direct Marketing / Newsletter
7.1 Newsletter

• Registration via double opt-in.

• Required information: email address.

• Storage of IP & time as proof.

• Legal basis: Art. 6 (1) lit. a GDPR.

• Revocation possible at any time via link in the newsletter.

7.2 Advertising by post
We reserve the right to use your name and address for postal advertising (Art. 6 (1) lit. f GDPR). Objection possible at any time.

8) Order Processing & Payment Services
8.1 Shipping via SendCloud
SendCloud GmbH, Kanalstr. 10, 80538 Munich.
Legal basis: Art. 6 (1) lit. b GDPR.

8.2 Payment services

• PayPal (Europe) S.a.r.l., Luxembourg

• Klarna/SOFORT GmbH, Munich/Sweden

• Stripe Payments Europe Ltd., Ireland

Data: name, address, payment data, invoice amount.
Legal basis: Art. 6 (1) lit. b GDPR.

Credit checks (PayPal, Stripe): profiling/score values possible (Art. 22 GDPR).
Data transfer to the USA: only on the basis of Standard Contractual Clauses (SCCs).

9) Web Analytics
9.1 Google Analytics (with AnonymizeIP)

• Provider: Google Ireland Ltd., Dublin / Google LLC, USA.

• Legal basis: Art. 6 (1) lit. a GDPR (consent).

• IP anonymized.

• Data transfer to the USA: on the basis of SCCs.

• Activated only after consent via cookie banner.

• Revocation at any time in the consent tool.

9.2 Matomo (formerly Piwik)
We use Matomo for web analytics.

• For self-hosted use: data processing exclusively on our server in Germany.

• IP addresses are immediately anonymized.

• Legal basis: Art. 6 (1) lit. a GDPR (consent) or Art. 6 (1) lit. f GDPR (legitimate interest with anonymized data).

• For Matomo Cloud use (InnoCraft Ltd., New Zealand), processing takes place on the basis of a data processing agreement. Transfer to New Zealand: EU adequacy decision.
  Revocation: at any time via our cookie consent tool or browser “Do Not Track.”

10) Website Features
10.1 Google reCAPTCHA
Purpose: protection against bots/spam.
Legal basis: Art. 6 (1) lit. f GDPR.
Data transfer to the USA: SCCs.

10.2 Google Translate
Purpose: automatic translation.
Legal basis: Art. 6 (1) lit. a GDPR (consent via cookie banner).
Data transfer to the USA: SCCs.

11) Data Subject Rights
You have the following rights:

• Access (Art. 15 GDPR)

• Rectification (Art. 16)

• Erasure (Art. 17)

• Restriction (Art. 18)

• Data portability (Art. 20)

• Withdrawal (Art. 7 (3))

• Objection (Art. 21)

• Complaint to a supervisory authority (Art. 77)

Competent authority: Saxon Data Protection Commissioner, Dresden.
Response time: 1 month.

12) Storage Duration

• Consent: until withdrawal.

• Contract: after expiry of statutory retention periods (6/10 years).

• Legitimate interest: until objection, unless overriding reasons apply.

• Direct marketing: until objection.

13) Changes to This Privacy Policy
We reserve the right to update this privacy policy. Changes will be published on the website.