Privacy Policy

🛡️ 1. Controller & Data Protection Contact

The data controller responsible for the processing of data on this website pursuant to Art. 4 No. 7 GDPR is:

🖥️ 2. Hosting & Server Log Files (German Server)

This website is hosted on secure web servers located in Germany. When you access our web pages, the web server automatically collects and stores technical information in so-called server log files that your browser transmits to us:

• Anonymized / IP address of the requesting device
• Date and time of the server request
• Browser type and version, operating system used
• Referrer URL (the previously visited page)
• Requested URL / file name and HTTP status code

Legal Basis: The processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the technical stability, network security, and seamless delivery of the website. Log data is automatically rotated and deleted in accordance with statutory retention periods.

🍪 3. Cookies, Local Storage & Consent Management

We believe in transparency and data minimization. Our website uses local browser storage and optional cookies:

• Strictly Necessary Technical Storage: We utilize browser localStorage (key: wp_cookie_consent_v1) solely to record your cookie choice so you are not prompted on every page load, and to remember your dark/light theme preference. This is technically essential for site operation pursuant to Art. 6(1)(f) GDPR and Section 25(2) No. 2 TDDDG.
• Optional Analytics (PostHog): Analytics cookies and session storage are used exclusively if you explicitly grant consent by clicking “Sounds good!” in our consent banner (pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG).

If you click “Only essential”, no analytics cookies are stored and web tracking is completely deactivated. You can review or change your selection at any time:

📊 4. Web Analytics: PostHog (EU Cloud, Consent-Based)

To understand which stories resonate with our audience and improve the performance of our website, we use the analytics platform PostHog, provided by PostHog, Inc. (2261 Market Street #4008, San Francisco, CA 94114, USA).

EU Server Location & Data Protection: We use PostHog’s European Cloud infrastructure located in Frankfurt, Germany (EU) (eu.i.posthog.com). Your telemetry and usage data is stored and processed exclusively within the European Union. A Data Processing Addendum (DPA) incorporating EU Standard Contractual Clauses (SCCs) is in place pursuant to Art. 28 GDPR.

Disabled by Default (Opt-In Only): In compliance with GDPR and ePrivacy regulations, PostHog is completely disabled by default (opt_out_capturing). When you arrive on our site, no analytics cookies are placed and no tracking requests are transmitted to PostHog.

Behavior When Cookies Are Declined (“Only Essential”): If you select “Only essential” in the cookie banner, PostHog remains permanently deactivated. No identifiers, fingerprints, or analytical events will be captured or sent from your browser.

Data Collected Upon Explicit Consent: If you grant permission by clicking “Sounds good!”, PostHog collects pseudonymized usage events (such as page impressions, reading interactions, clicked story or affiliate links, device category, browser type, and truncated/anonymized IP addresses). We do not perform cross-site tracking, create cross-platform advertising profiles, or sell data.

Legal Basis & Revocation: The legal basis for processing analytics data and accessing device storage is your voluntary consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can revoke your consent at any time with future effect using the “Manage Cookie Preferences” button above or in our footer.

✉️ 5. Newsletter & Email Communications

If you subscribe to “The Sunday Money Note” newsletter, the email address you provide is processed exclusively to deliver our financial education updates and curated insights.

Double Opt-In & Delivery: We implement a confirmed opt-in procedure to ensure no unauthorized email addresses are subscribed. We may use specialized email delivery services (such as Resend or comparable EU-compliant email infrastructure with signed Data Processing Agreements) to send newsletters reliably.

Legal Basis & Revocation: Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time with a single click via the unsubscribe link at the bottom of every newsletter email, or by emailing us at [email protected].

🔗 6. Affiliate Links & Social Media

Amazon Partner Program: We participate in the Amazon Associates program. Links leading to Amazon products contain partner identifiers. No personal data is transmitted to Amazon until you voluntarily click on an outbound Amazon link.

Social Media Links: We link to our profiles on Facebook, Instagram, TikTok, and YouTube via standard hyperlinks. We do not embed external tracking scripts that automatically send your data to social networks upon page load.

⚖️ 7. Your Rights Under the GDPR

As a data subject, you hold comprehensive rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Confirmation and details of stored personal data.
• Right to Rectification (Art. 16 GDPR): Correction of incorrect or incomplete data.
• Right to Erasure (Art. 17 GDPR): Deletion of your data (“Right to be forgotten”).
• Right to Restriction (Art. 18 GDPR): Restriction of processing.
• Right to Data Portability (Art. 20 GDPR): Receiving your data in a structured, common format.
• Right to Object (Art. 21 GDPR): Right to object to processing based on Art. 6(1)(f) GDPR at any time.
• Right to Lodge a Complaint: Right to lodge a complaint with a competent data protection supervisory authority (e.g. Der Landesbeauftragte für den Datenschutz Baden-Württemberg).