Privacy Policy

This website is operated by Andrea Chiabotto & Johanna Chiabotto GbR (trading as Rasaga Books), Eichenweg 28a, 25436 Heidgraben, Germany, represented by Andrea Chiabotto and Johanna Chiabotto. For any privacy-related matter, contact us at [email protected]. Full company details are in our Impressum.

We are the data controller for personal data collected through this website, as defined by the EU General Data Protection Regulation (GDPR — Regulation 2016/679).

We do not run analytics, advertising pixels, retargeting tags, or any other visitor-tracking tool on this website, and we set no cookies of our own (see our Cookie Policy). Fonts are stored on our own server, so your browser does not contact Google or any other font service.

When you open a page, our hosting provider processes your IP address and basic request data (see Section 5). We do not use this data to identify you.

On our book pages you can enter your email address to get a free resource (for example a checklist or the first chapter). The form is sent to a small signup service we run on Cloudflare (Section 5), which receives your email address, the book you signed up from, and — as with any internet request — your IP address.

We then send you one confirmation email. Only when you click the link in it are you added to our mailing list. If you don’t confirm within 7 days, your signup is deleted automatically. To be able to prove your consent, we store the time of your signup, the time of your confirmation, and the IP address used for the signup.

After you confirm, you receive the free resource, a short series of follow-up emails about that book (usually five), and occasional news about our books. Giving us your email address is voluntary; without it we can’t send you the free resource.

Our emails are sent through Brevo SAS (Paris, France), which stores your email address, the book you signed up for, and the consent data described above. Brevo acts as our data processor under a data processing agreement (GDPR Art. 28). Your data stays in the EU.

Our emails contain measurement: Brevo records whether you open an email and whether you click a link in it, so we can see which emails are useful. This is part of the consent you give when you sign up and confirm.

Every email includes an unsubscribe link. Unsubscribing stops both future emails and any further open/click measurement. You can also withdraw your consent at any time by emailing [email protected]. Brevo’s own privacy policy: brevo.com/legal/privacypolicy.

This website (Cloudflare Pages) and our signup service (Cloudflare Workers) run on infrastructure from Cloudflare, Inc. (San Francisco, USA). Cloudflare processes your IP address and basic request data to deliver the site, run the signup form, and protect both from abuse. Cloudflare acts as our data processor (GDPR Art. 28).

Data may be processed in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (GDPR Art. 45).

• Newsletter and email measurement: your consent (GDPR Art. 6(1)(a); for open/click measurement also § 25 (1) TDDDG). You can withdraw it at any time with effect for the future; this does not affect processing that took place before.
• Consent records (signup and confirmation time, IP address): our legitimate interest in being able to prove your consent (GDPR Art. 6(1)(f), Art. 7(1)).
• Hosting and security: our legitimate interest in operating a working, secure website (GDPR Art. 6(1)(f)).

Unconfirmed signups are deleted after 7 days. Your email address is kept for as long as you remain subscribed. When you unsubscribe or ask us to delete your data, we (and Brevo, on our instruction) remove it; we may keep a record of your consent and withdrawal for as long as we need it to prove that we acted lawfully. Cloudflare’s hosting and security logs are kept only briefly, under Cloudflare’s data processing terms.

You have the right to:

• Access — ask what data we hold about you (Art. 15)
• Rectification — ask us to correct inaccurate data (Art. 16)
• Erasure — ask us to delete your data (Art. 17)
• Restriction — ask us to limit how we use your data (Art. 18)
• Portability — get your data in a portable format (Art. 20)
• Objection — object to processing based on legitimate interest (Art. 21)
• Withdraw consent — at any time, for example by unsubscribing (Art. 7(3))

To exercise any of these rights, email [email protected]. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority, for example ours: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany — datenschutzzentrum.de.

We do not use automated decision-making or profiling.

This website is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We will update this policy whenever we change how we process personal data (for example, if we add analytics or advertising tools). The “Last updated” date at the top of this page always reflects the current version.