Hollis Vane

Privacy Policy

Last updated: February 2026

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Henning Paulsen

c/o flexdienst – #20268

Kurt-Schumacher-Straße 76

67663 Kaiserslautern

Deutschland

Email: [email protected]

Overview of Data Processing

This website does not use cookies (except for one technically necessary Cloudflare security cookie), does not employ analytics or tracking, and does not require user accounts.

Personal data is collected and processed in two contexts: (1) through server log files maintained by our hosting provider for technical delivery and security, and (2) through our optional newsletter signup form, which collects email addresses and consent records for subscribers who opt in.

Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare serves the website via its global content delivery network (CDN) and processes technical data in server log files.

Data processed by Cloudflare:

  • IP address (anonymized)
  • Browser type and version
  • Operating system
  • Referrer URL (the page you came from)
  • Date and time of access
  • Pages visited on this site

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in secure, efficient, and reliable website delivery.

Data transfer to the USA: Cloudflare is a US company. Data transfer to the United States is covered by the EU-US Data Privacy Framework, and Cloudflare is certified under this framework. A data processing agreement (Auftragsverarbeitungsvertrag) per Art. 28 GDPR is in place with Cloudflare.

Cloudflare's privacy policy is available at: cloudflare.com/privacypolicy

Server Log Files

When you visit this website, the hosting provider automatically collects and stores information in server log files that your browser transmits. This data includes:

  • IP address (anonymized)
  • Date and time of request
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited

This data is not merged with other data sources and is used solely for technical operation and security purposes (e.g., detecting and preventing abuse, identifying technical errors).

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in the technical operation and security of the website.

Retention: Log data is typically deleted after 7-14 days per Cloudflare's standard retention policy.

Cookies

This website does not set any cookies for tracking, analytics, or advertising purposes. There are no first-party cookies, no third-party cookies, and no analytics cookies.

Cloudflare security cookie: Cloudflare may set a technically necessary security cookie (__cf_bm) for bot detection and abuse prevention purposes. This cookie is strictly necessary for website security and does not track your browsing behavior across sites. It does not require consent under TDDDG § 25 Abs. 2 (German Telecommunications-Telemedia Data Protection Act).

Newsletter

This website offers an optional newsletter signup. If you choose to subscribe, we collect and process the following data:

  • Email address: Required to send newsletter updates.
  • IP address: Recorded at the time of signup as proof of valid consent.
  • Timestamp: Date and time of signup.
  • Consent record: Your explicit consent to receive newsletter emails.

Legal basis:

  • Art. 6(1)(a) GDPR (consent) for sending newsletters and storing your email address.
  • Art. 6(1)(f) GDPR (legitimate interest) for storing your IP address as proof of valid consent. Our legitimate interest is maintaining an audit trail to demonstrate compliance with data protection laws and prevent abuse.

Purpose: The newsletter sends occasional updates about new book releases, author news, and related content. We do not send promotional emails from third parties.

Storage: Newsletter data is stored in a Cloudflare D1 database (SQLite-compatible database hosted on Cloudflare's infrastructure). Cloudflare acts as a processor under Art. 28 GDPR.

Retention: Your data is retained until you unsubscribe or request deletion. When you unsubscribe, your record is marked as unsubscribed and retained for a reasonable audit period (typically 3 years), after which it will be fully deleted. You may request immediate full deletion at any time by contacting us.

Unsubscribe: You can unsubscribe at any time by clicking the unsubscribe link included in every newsletter email, or by contacting us at the email address in the Controller section above. Unsubscribing is immediate and free of charge.

Bot protection (Cloudflare Turnstile): The newsletter signup form uses Cloudflare Turnstile to prevent automated abuse and spam signups. Turnstile may process technical data such as your IP address and browser fingerprint. This processing is necessary for the legitimate interest of preventing abuse (Art. 6(1)(f) GDPR). Cloudflare's privacy policy for Turnstile is available at: cloudflare.com/privacypolicy

Your rights: You have the right to access, rectify, delete, or restrict processing of your newsletter data. See the "Your Rights Under GDPR" section below for details.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You can request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR): You can request that we correct inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR): You can request that we delete your personal data under certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected).
  • Right to restriction of processing (Art. 18 GDPR): You can request that we limit how we use your data under certain conditions.
  • Right to data portability (Art. 20 GDPR): You can request a copy of your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests (Art. 6(1)(f)). Upon objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
  • Right to withdraw consent (Art. 7(3) GDPR): If processing is based on consent (such as newsletter subscription), you can withdraw that consent at any time by unsubscribing. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at the email address provided in the Controller section above.

Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).

The competent supervisory authority for complaints in Germany can be found at: bfdi.bund.de/EN

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.