[{"data":1,"prerenderedAt":915},["ShallowReactive",2],{"page-/en/privacy":3},{"path":4,"title":5,"description":6,"body":7},"/en/privacy","Privacy Policy","Privacy policy of the Isuku Verlag website in accordance with GDPR",{"id":8,"title":5,"body":9,"description":6,"extension":909,"meta":910,"navigation":911,"path":4,"seo":912,"stem":913,"__hash__":914},"content/en/privacy.md",{"type":10,"value":11,"toc":878},"minimark",[12,16,20,25,41,62,66,69,73,76,80,83,109,113,118,124,129,140,146,152,161,165,168,187,190,195,200,204,208,211,272,283,288,292,299,379,382,387,391,398,402,405,415,420,435,438,443,447,450,473,482,487,492,499,502,511,515,522,527,544,549,553,560,564,587,594,599,604,610,617,621,625,631,636,647,652,657,664,668,671,685,691,696,702,707,713,717,720,791,794,798,801,845,849,852,856,859,864,871,875],[13,14,5],"h1",{"id":15},"privacy-policy",[17,18,19],"p",{},"Last updated: March 2026",[21,22,24],"h2",{"id":23},"_1-data-controller","1. Data controller",[17,26,27,31,34,35,37,38,40],{},[28,29,30],"strong",{},"Isuku Verlag UG (haftungsbeschränkt)",[32,33],"br",{},"\nGabriel Isuku",[32,36],{},"\nAchentalstr. 3",[32,39],{},"\n81671 München, Germany",[42,43,44,56],"ul",{},[45,46,47,50,51],"li",{},[28,48,49],{},"Email:"," ",[52,53,55],"a",{"href":54},"mailto:contact@isuku.de","contact@isuku.de",[45,57,58,61],{},[28,59,60],{},"Phone:"," +49 (0)89 54.31.68.31",[21,63,65],{"id":64},"_2-data-protection-officer","2. Data protection officer",[17,67,68],{},"The appointment of a data protection officer is not legally required for our company. For data protection inquiries, please contact us at the address above.",[21,70,72],{"id":71},"_3-general-information-on-data-processing","3. General information on data processing",[17,74,75],{},"We only process personal data of our users to the extent necessary to provide a functional website and our content and services. Personal data is only processed with the user's consent or when processing is permitted by law.",[21,77,79],{"id":78},"_4-legal-basis","4. Legal basis",[17,81,82],{},"The processing of personal data is based on the following legal grounds:",[42,84,85,91,97,103],{},[45,86,87,90],{},[28,88,89],{},"Art. 6(1)(a) GDPR"," — Consent of the data subject",[45,92,93,96],{},[28,94,95],{},"Art. 6(1)(b) GDPR"," — Performance of a contract or pre-contractual measures",[45,98,99,102],{},[28,100,101],{},"Art. 6(1)(c) GDPR"," — Compliance with a legal obligation (e.g. tax retention requirements)",[45,104,105,108],{},[28,106,107],{},"Art. 6(1)(f) GDPR"," — Legitimate interest (e.g. website security)",[21,110,112],{"id":111},"_5-hosting-and-content-delivery","5. Hosting and content delivery",[114,115,117],"h3",{"id":116},"cloudflare","Cloudflare",[17,119,120,121,123],{},"Our website is delivered through ",[28,122,117],{}," (Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare acts as a Content Delivery Network (CDN) and provides DDoS protection. A Data Processing Agreement (DPA) is in place with Cloudflare.",[17,125,126],{},[28,127,128],{},"Data processed:",[42,130,131,134,137],{},[45,132,133],{},"IP address (anonymized)",[45,135,136],{},"Access time",[45,138,139],{},"HTTP request data (URL, referrer, user agent)",[17,141,142,145],{},[28,143,144],{},"Retention period:"," Log data is stored by Cloudflare for a maximum of 72 hours.",[17,147,148,151],{},[28,149,150],{},"Legal basis:"," Legitimate interest in the secure and efficient delivery of our website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.",[17,153,154,155],{},"More information: ",[52,156,160],{"href":157,"rel":158},"https://www.cloudflare.com/privacypolicy/",[159],"nofollow","Cloudflare's privacy policy",[114,162,164],{"id":163},"server-log-files","Server log files",[17,166,167],{},"Each time our website is accessed, the web server automatically collects data transmitted by your browser (server log files):",[42,169,170,173,176,179,182,185],{},[45,171,172],{},"Page visited (URL)",[45,174,175],{},"Time of access",[45,177,178],{},"Amount of data transferred",[45,180,181],{},"Referrer (previously visited page)",[45,183,184],{},"Browser and operating system used",[45,186,133],{},[17,188,189],{},"This data is not merged with other data sources.",[17,191,192,194],{},[28,193,144],{}," Server log files are automatically deleted after 7 days.",[17,196,197,199],{},[28,198,150],{}," Legitimate interest in ensuring trouble-free operation (Art. 6(1)(f) GDPR).",[21,201,203],{"id":202},"_6-cookies-and-consent","6. Cookies and consent",[114,205,207],{"id":206},"necessary-cookies","Necessary cookies",[17,209,210],{},"We use technically necessary cookies that are required for the operation of the website. These cannot be disabled.",[212,213,214,230],"table",{},[215,216,217],"thead",{},[218,219,220,224,227],"tr",{},[221,222,223],"th",{},"Cookie",[221,225,226],{},"Purpose",[221,228,229],{},"Duration",[231,232,233,248,260],"tbody",{},[218,234,235,242,245],{},[236,237,238],"td",{},[239,240,241],"code",{},"i18n_redirected",[236,243,244],{},"Storing your preferred language",[236,246,247],{},"1 year",[218,249,250,255,258],{},[236,251,252],{},[239,253,254],{},"site_consent",[236,256,257],{},"Storing your cookie settings",[236,259,247],{},[218,261,262,267,270],{},[236,263,264],{},[239,265,266],{},"welcome_dismissed",[236,268,269],{},"Remembers that you closed the welcome notice",[236,271,247],{},[17,273,274,275,278,279,282],{},"In addition, we store an ",[239,276,277],{},"isuku_theme"," entry in your browser's session storage if you select a different colour scheme via the ",[239,280,281],{},"?theme="," URL parameter. The entry is deleted when you close the browser tab.",[17,284,285,287],{},[28,286,150],{}," § 25(2)(2) TDDDG (technically necessary) in conjunction with Art. 6(1)(f) GDPR.",[114,289,291],{"id":290},"analytics-cookies-consent-required","Analytics cookies (consent required)",[17,293,294,295,298],{},"The following cookies and storage technologies are set ",[28,296,297],{},"exclusively"," after you consented in the cookie banner. Without your consent, none of these entries is created:",[212,300,301,315],{},[215,302,303],{},[218,304,305,308,311,313],{},[221,306,307],{},"Service",[221,309,310],{},"Entry",[221,312,226],{},[221,314,229],{},[231,316,317,334,349,363],{},[218,318,319,322,329,332],{},[236,320,321],{},"PostHog",[236,323,324,325,328],{},"Cookie ",[239,326,327],{},"ph_\u003Cproject-id>_posthog"," and a local storage entry of the same name",[236,330,331],{},"Recognising your session for usage analytics and session recording",[236,333,247],{},[218,335,336,338,343,346],{},[236,337,321],{},[236,339,340,341],{},"A session storage entry of the same name, ",[239,342,327],{},[236,344,345],{},"Storing the session and window identifier and the page visited before",[236,347,348],{},"Session",[218,350,351,353,358,361],{},[236,352,321],{},[236,354,324,355],{},[239,356,357],{},"ph-identify",[236,359,360],{},"Storing the identifier assigned by PostHog",[236,362,348],{},[218,364,365,368,374,377],{},[236,366,367],{},"Sentry",[236,369,370,371],{},"Session storage entry ",[239,372,373],{},"sentryReplaySession",[236,375,376],{},"Associating error and session recording data with one session",[236,378,348],{},[17,380,381],{},"If you withdraw your consent, the PostHog entries are removed immediately.",[17,383,384,386],{},[28,385,150],{}," Consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.",[114,388,390],{"id":389},"managing-cookie-settings","Managing cookie settings",[17,392,393,394,397],{},"On your first visit to our website, you will be informed about the use of cookies via a banner. You can change your settings at any time via the ",[28,395,396],{},"\"Cookie Settings\""," link in the website footer. The \"Accept All\" and \"Reject All\" buttons are designed equally (GDPR-compliant, no dark patterns).",[21,399,401],{"id":400},"_7-analytics-and-error-monitoring","7. Analytics and error monitoring",[114,403,321],{"id":404},"posthog",[17,406,407,408,410,411,414],{},"We use ",[28,409,321],{}," (PostHog Inc.) to analyse website usage. All data is processed exclusively on ",[28,412,413],{},"EU servers"," (eu.posthog.com). Your browser's requests go to our own domain and are forwarded to PostHog by our server. A Data Processing Agreement (DPA) is in place with PostHog.",[416,417,419],"h4",{"id":418},"without-your-consent","Without your consent",[17,421,422,423,426,427,430,431,434],{},"Without your consent, PostHog transmits ",[28,424,425],{},"no usage data",": no page views, clicks, or other events are collected, ",[28,428,429],{},"no session recording"," takes place, and ",[28,432,433],{},"no cookie, no local storage entry, and no session storage entry"," is set or read.",[17,436,437],{},"In that case the PostHog component is loaded solely to retrieve the configuration of our feature switches, which control which parts of the website are shown. All that is transmitted is an identifier of our project plus a random identifier that only ever exists in your browser's memory and is discarded when you leave the page.",[17,439,440,442],{},[28,441,150],{}," Legitimate interest in operating a functioning website (Art. 6(1)(f) GDPR). Since nothing is stored on or read from your device in this case, § 25(1) TDDDG does not apply to this processing.",[416,444,446],{"id":445},"only-with-your-consent","Only with your consent",[17,448,449],{},"Only once you consented to the PostHog service in the cookie banner do we collect:",[42,451,452,455,458,461,464,467],{},[45,453,454],{},"Page views",[45,456,457],{},"Click behaviour and interactions with form elements",[45,459,460],{},"Device type, browser, and operating system",[45,462,463],{},"Screen size",[45,465,466],{},"Time spent on pages",[45,468,469,472],{},[28,470,471],{},"Session recording (session replay):"," mouse movement, clicks, scrolling, visited URLs, and the page content displayed",[17,474,475,476,478,479,481],{},"For this, the cookie ",[239,477,327],{},", a local storage entry of the same name, a session storage entry of the same name, and the cookie ",[239,480,357],{}," are set to recognise your session across page views. No sign-in takes place; the data is not linked to any user account.",[17,483,484,486],{},[28,485,144],{}," Analytics data is automatically deleted after 12 months, session recordings after 30 days.",[17,488,489,491],{},[28,490,150],{}," Consent (Art. 6(1)(a) GDPR) in conjunction with § 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings. Session recording then stops immediately, collection ceases, and the entries that were set are removed.",[17,493,154,494],{},[52,495,498],{"href":496,"rel":497},"https://posthog.com/privacy",[159],"PostHog's privacy policy",[114,500,367],{"id":501},"sentry",[17,503,407,504,506,507,510],{},[28,505,367],{}," (Functional Software Inc. d/b/a Sentry, 132 Hawthorne Street, San Francisco, CA 94107, USA) for error detection and performance monitoring. Data is collected via Sentry's EU endpoint (",[239,508,509],{},"ingest.de.sentry.io","). A Data Processing Agreement (DPA) is in place with Sentry.",[416,512,514],{"id":513},"in-your-browser-consent-required","In your browser (consent required)",[17,516,517,518,521],{},"The Sentry SDK is ",[28,519,520],{},"only loaded and started if you consented to the Sentry service in the cookie banner",".",[17,523,524],{},[28,525,526],{},"Data collected:",[42,528,529,532,535,538,541],{},[45,530,531],{},"Error messages and stack traces",[45,533,534],{},"Page views and load times (performance tracing)",[45,536,537],{},"Anonymized session recordings (Session Replay — text is masked, media is blocked)",[45,539,540],{},"Browser, operating system, and device type",[45,542,543],{},"URL of the visited page",[17,545,546,548],{},[28,547,150],{}," Consent (Art. 6(1)(a) GDPR) in conjunction with § 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.",[416,550,552],{"id":551},"on-our-server-independent-of-your-consent","On our server (independent of your consent)",[17,554,555,556,559],{},"Errors and response times of our server are recorded independently of your cookie settings. ",[28,557,558],{},"No cookies are set and no information is stored on or read from your device","; § 25 TDDDG therefore does not apply to this processing.",[17,561,562],{},[28,563,526],{},[42,565,566,569,584],{},[45,567,568],{},"Error messages and stack traces of our server",[45,570,571,572,575,576,579,580,583],{},"The requested path ",[28,573,574],{},"without query parameters"," — parameters such as ",[239,577,578],{},"session_id"," or ",[239,581,582],{},"payment"," are removed before transmission",[45,585,586],{},"Response times and HTTP status code",[17,588,589,590,593],{},"The ",[239,591,592],{},"sendDefaultPii"," option is disabled; IP addresses, cookies, and request headers are not transmitted to Sentry.",[17,595,596,598],{},[28,597,150],{}," Legitimate interest in the trouble-free and secure operation of our website (Art. 6(1)(f) GDPR).",[17,600,601,603],{},[28,602,144],{}," Error data is stored for 90 days, session replay data for 30 days.",[17,605,606,609],{},[28,607,608],{},"Data transfer:"," Sentry is a US company; transfer to the USA cannot be ruled out. Sentry is certified under the EU-US Data Privacy Framework.",[17,611,154,612],{},[52,613,616],{"href":614,"rel":615},"https://sentry.io/privacy/",[159],"Sentry's privacy policy",[21,618,620],{"id":619},"_8-payment-processing","8. Payment processing",[114,622,624],{"id":623},"stripe","Stripe",[17,626,627,628,630],{},"We use the payment service provider ",[28,629,624],{}," (Stripe Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA) to process payments. Stripe is only loaded when you start the checkout process. A Data Processing Agreement (DPA) is in place with Stripe.",[17,632,633],{},[28,634,635],{},"Data transmitted during a purchase:",[42,637,638,641,644],{},[45,639,640],{},"Payment data (credit card number, expiration date, CVC)",[45,642,643],{},"Transaction information (amount, currency, order reference)",[45,645,646],{},"Delivery country (for shipping cost calculation)",[17,648,649,651],{},[28,650,144],{}," Stripe stores transaction data in accordance with statutory retention requirements (typically 10 years).",[17,653,654,656],{},[28,655,150],{}," Performance of a contract (Art. 6(1)(b) GDPR) in conjunction with § 25(2)(2) TDDDG (technically necessary for the payment process requested by the user). Stripe is certified under the EU-US Data Privacy Framework.",[17,658,154,659],{},[52,660,663],{"href":661,"rel":662},"https://stripe.com/privacy",[159],"Stripe's privacy policy",[21,665,667],{"id":666},"_9-order-processing-and-customer-data","9. Order processing and customer data",[17,669,670],{},"When placing an order through our online shop, we process the following data:",[42,672,673,676,679,682],{},[45,674,675],{},"Name",[45,677,678],{},"Email address",[45,680,681],{},"Delivery address (for physical products)",[45,683,684],{},"Order details (product, quantity, price)",[17,686,687,690],{},[28,688,689],{},"Purpose:"," Contract fulfillment, shipping, and customer service.",[17,692,693,695],{},[28,694,144],{}," Order data is stored for 10 years in accordance with commercial and tax law retention requirements (§ 257 HGB, § 147 AO). After expiration, the data is deleted.",[17,697,698,701],{},[28,699,700],{},"Recipients:"," Payment data is transmitted to Stripe (see section 8). For physical shipments, the name and delivery address are shared with the commissioned shipping provider.",[17,703,704,706],{},[28,705,150],{}," Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).",[17,708,709,712],{},[28,710,711],{},"Note:"," Providing your personal data is necessary for the conclusion of the contract. Without this data, we cannot process your order.",[21,714,716],{"id":715},"_10-recipients-and-data-transfers","10. Recipients and data transfers",[17,718,719],{},"Your personal data is shared with the following categories of recipients:",[212,721,722,737],{},[215,723,724],{},[218,725,726,729,731,734],{},[221,727,728],{},"Recipient",[221,730,226],{},[221,732,733],{},"Location",[221,735,736],{},"Basis for third-country transfer",[231,738,739,753,767,779],{},[218,740,741,744,747,750],{},[236,742,743],{},"Cloudflare Inc.",[236,745,746],{},"Hosting, CDN, DDoS protection",[236,748,749],{},"USA",[236,751,752],{},"EU-US Data Privacy Framework",[218,754,755,758,761,764],{},[236,756,757],{},"PostHog Inc.",[236,759,760],{},"Website analytics; collection, cookie and session recording only with consent",[236,762,763],{},"EU (Frankfurt)",[236,765,766],{},"— (no third-country transfer)",[218,768,769,772,775,777],{},[236,770,771],{},"Sentry (Functional Software Inc.)",[236,773,774],{},"Error monitoring; in the browser only with consent, server-side based on legitimate interest",[236,776,749],{},[236,778,752],{},[218,780,781,784,787,789],{},[236,782,783],{},"Stripe Inc.",[236,785,786],{},"Payment processing",[236,788,749],{},[236,790,752],{},[17,792,793],{},"Beyond this, we only share data when legally obligated to do so (e.g. with tax authorities).",[21,795,797],{"id":796},"_11-your-rights","11. Your rights",[17,799,800],{},"As a data subject, you have the following rights:",[42,802,803,809,815,821,827,833,839],{},[45,804,805,808],{},[28,806,807],{},"Right of access"," (Art. 15 GDPR) — You may request information about the personal data we process.",[45,810,811,814],{},[28,812,813],{},"Right to rectification"," (Art. 16 GDPR) — You may request the correction of inaccurate data.",[45,816,817,820],{},[28,818,819],{},"Right to erasure"," (Art. 17 GDPR) — You may request the deletion of your data, provided no statutory retention obligations apply (e.g. § 257 HGB: 10 years for commercial records). Deletion requests can be sent via email to the contact address above. We will respond within one month (Art. 12(3) GDPR).",[45,822,823,826],{},[28,824,825],{},"Right to restriction"," (Art. 18 GDPR) — You may request the restriction of processing of your data.",[45,828,829,832],{},[28,830,831],{},"Right to data portability"," (Art. 20 GDPR) — You may request that we provide your data in a structured, commonly used, and machine-readable format.",[45,834,835,838],{},[28,836,837],{},"Right to object"," (Art. 21 GDPR) — You may object to the processing of your data at any time where the processing is based on legitimate interest.",[45,840,841,844],{},[28,842,843],{},"Right to withdraw consent"," (Art. 7(3) GDPR) — You may withdraw any given consent at any time with future effect, e.g. via the cookie settings in the footer.",[21,846,848],{"id":847},"_12-automated-decision-making","12. Automated decision-making",[17,850,851],{},"No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.",[21,853,855],{"id":854},"_13-right-to-lodge-a-complaint","13. Right to lodge a complaint",[17,857,858],{},"You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.",[17,860,861],{},[28,862,863],{},"Competent supervisory authority:",[17,865,866,867],{},"Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)\nPromenade 18\n91522 Ansbach, Germany\n",[52,868,869],{"href":869,"rel":870},"https://www.lda.bayern.de",[159],[21,872,874],{"id":873},"_14-changes","14. Changes",[17,876,877],{},"We reserve the right to update this privacy policy to reflect changes in legal requirements or our data processing practices. The current version can always be found on this page.",{"title":879,"searchDepth":880,"depth":880,"links":881},"",2,[882,883,884,885,886,891,896,900,903,904,905,906,907,908],{"id":23,"depth":880,"text":24},{"id":64,"depth":880,"text":65},{"id":71,"depth":880,"text":72},{"id":78,"depth":880,"text":79},{"id":111,"depth":880,"text":112,"children":887},[888,890],{"id":116,"depth":889,"text":117},3,{"id":163,"depth":889,"text":164},{"id":202,"depth":880,"text":203,"children":892},[893,894,895],{"id":206,"depth":889,"text":207},{"id":290,"depth":889,"text":291},{"id":389,"depth":889,"text":390},{"id":400,"depth":880,"text":401,"children":897},[898,899],{"id":404,"depth":889,"text":321},{"id":501,"depth":889,"text":367},{"id":619,"depth":880,"text":620,"children":901},[902],{"id":623,"depth":889,"text":624},{"id":666,"depth":880,"text":667},{"id":715,"depth":880,"text":716},{"id":796,"depth":880,"text":797},{"id":847,"depth":880,"text":848},{"id":854,"depth":880,"text":855},{"id":873,"depth":880,"text":874},"md",{},true,{"title":5,"description":6},"en/privacy","YVJTWvZvn7HQwqGiZPxSyJqX0HTLFiQk-uKRR4FN2AE",1785963412214]