What these pages collect.

Who is responsible

We have not appointed a data protection officer, as we are not required to under Art. 37 GDPR / § 38 BDSG.

The short version

• You can read every page here without giving us anything. No account, no form.
• If you ask for the free recipes, we store your email address — and only after you confirm it by clicking a link.
• We use the Meta pixel to see which pages lead to a sale. That one does involve a third party and cookies, and it is described in full below.
• We do not sell your data, and we do not pass it on except to the services named here.

Hosting and server logs

These pages are hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you open a page, your browser necessarily transmits technical data that Vercel processes to deliver it: your IP address, the page requested, the time, the referring page, and your browser and operating system.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is delivering a working, secure website — without this data no page can reach you at all. Transfers to the USA are covered by Vercel’s certification under the EU-US Data Privacy Framework and by standard contractual clauses.

Vercel Analytics

We use Vercel Analytics to count page views. It sets no cookies and builds no profile: it records the page, the referrer, the country, and the device type, and it does not store an identifier that would let us recognise you on a later visit.

Legal basis: Art. 6 (1) (f) GDPR — knowing which pages are read at all.

The Meta pixel

These pages contain the Meta pixel, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. It loads when the page loads. It sets cookies in your browser and transmits to Meta that a browser opened this page, together with your IP address, your user agent and a pixel identifier. If you are logged in to Facebook or Instagram in the same browser, Meta can connect that visit to your account.

We use it to see which pages lead to an order and to reach people who have read a page but not bought. We do not upload email addresses or customer lists to Meta.

Meta processes this data as a controller in its own right, and transfers it to the USA. What Meta then does with it is described in Meta’s own privacy policy.

How to stop it

• Adjust your ad settings in your Facebook account, which controls how Meta may use the data for advertising.
• Block third-party cookies in your browser, or use a content blocker. Either stops the pixel entirely, and nothing on these pages breaks when you do.

The free recipes, and our email list

If you enter your email address to receive the free chapters, this is what happens:

• We send a confirmation email to that address. Nothing is stored on any list yet.
• Only when you click the link in that email do we create a contact — your email address, the date and time of confirmation, and which page you signed up from.
• Until you click, the address exists only inside a signed link with a seven-day life. If you never click, nothing is kept.

The list is held by Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany), which also sends the mail. Servers are in the EU.

Legal basis: Art. 6 (1) (a) GDPR — your consent, given by confirming the link. You can withdraw it at any time with the unsubscribe link in every email, or by writing to us, and withdrawal does not affect what was lawful before it.

Abuse protection on the form

When the form is submitted, your IP address is held in the server’s working memory for ten minutes so that the same address cannot flood the form. It is never written to a database and never passed on. Legal basis: Art. 6 (1) (f) GDPR.

Buying a book

Purchases do not happen on these pages. The buy buttons hand you over to our shop at medievalway.store, which runs on Shopify — Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland. Everything to do with your order, your payment details and delivery of the file is governed by the shop’s own privacy policy, not by this one.

Fonts

The typefaces on these pages are served from our own server, not from Google. Opening a page therefore does not send a request to Google.

How long we keep things

• Server logs: deleted by our host on a rolling short-term basis.
• Email list: until you unsubscribe or ask us to delete you, then removed.
• Form IP addresses: ten minutes, in memory only.

Your rights

Under the GDPR you have the right to:

• be told what we hold about you and get a copy of it (Art. 15)
• have it corrected (Art. 16) or deleted (Art. 17)
• have its processing restricted (Art. 18)
• receive it in a portable, machine-readable form (Art. 20)
• object to processing based on legitimate interest (Art. 21) — which includes the pixel
• withdraw a consent you have given, at any time (Art. 7 (3))

One email to bekker@wiss-media.com is enough for any of these. We do not require a form.

Complaints

You can complain to a supervisory authority at any time. The one responsible for us is:

You may also complain to the authority where you live or work, or where you believe the infringement took place.

Changes

If we add or remove a service that touches your data, we update this page and change the date below.