Privacy policy

1. Controller

The controller for processing on this website is:

Trepte Ventures UG (haftungsbeschränkt)
Rügenwalder Straße 24
22143 Hamburg
Germany

Managing director: Robin Trepte
VAT ID: DE316938242
Register court: Amtsgericht Lübeck, HRB 19648 HL
Phone: +49 178 3162846
Email: trepteventures(at)proton.me

Replace “(at)” in the email address with “@”. The legal notice is at Legal notice.

2. Which data, which people, which purposes

• Identity and contact data, such as name and email address, if you enter them at checkout.
• Contract data, such as the e-books chosen, the price and the payment method selected.
• Usage and meta data, such as pages requested, time of the request, browser type and IP address in the host’s server logs.
• Data stored locally in the browser, in particular the cart.

This concerns visitors to the website and people who place an order. The purposes are running the website, carrying out an order including the download, keeping the site secure, and meeting legal duties.

3. Legal bases

Unless this policy says otherwise:

• Art. 6 (1) (a) GDPR for consent. You can withdraw consent for the future.
• Art. 6 (1) (b) GDPR for steps before a contract and for performing a contract, and for related questions.
• Art. 6 (1) (c) GDPR for legal duties, including commercial and tax retention once such data are held by us.
• Art. 6 (1) (f) GDPR for legitimate interests, such as running the site securely. You can object under Art. 21 GDPR.

4. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When a page is requested, the host processes, on our behalf, the data that are technically required, in particular IP address, date and time, the address requested and the browser type. The legal basis is Art. 6 (1) (f) GDPR. A processing agreement under Art. 28 GDPR is in place with the host.

A transfer to the United States is possible. It relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where the recipient is certified under it, and in addition on the Commission’s standard contractual clauses. We do not rely on the former Privacy Shield.

5. Cart and orders

The cart stays only in your browser (localStorage, a key on this device). Those data are not sent to our server. You can delete them in the browser settings.

When you place an order, the browser stores your name, email address, the chosen e-books, the amount and the name of the payment method in this tab’s session (sessionStorage), so the confirmation page can show them. There is no customer account. The details are not stored in an order database on our server.

We do not ask for or store card numbers, wallet credentials or bank details. Where a payment is handled by an external payment provider, that provider processes the payment data under its own responsibility. We then receive at most a confirmation, not full card or account details. The legal basis for such a disclosure is Art. 6 (1) (b) GDPR. The provider’s own privacy notice also applies, for example PayPal, Klarna, Apple, Google or the card scheme.

6. What we do not use

So that this policy matches the site as it actually works:

• No newsletter and no marketing email. We do not use the checkout email address for advertising.
• No user accounts, no comments, no profile pictures from services such as Gravatar, and no third-party spam checks.
• No marketing or tracking cookies, no audience measurement and no affiliate tracking.
• No third-party emoji or font servers. Fonts and images on this site are delivered with the page.

7. Instagram

We link to our profile on Instagram (Meta Platforms Ireland Limited). Instagram processes data under its own rules only after you follow the link. While you stay on our website, no Instagram content is loaded and no pixel is set.

8. Processors and other recipients

We disclose data only where there is a legal basis: contract, consent, a legal duty, or a legitimate interest that does not override your rights. Recipients can be the host, a payment provider (once a payment runs through one), and tax advisers and authorities where that is required for accounting or a legal duty.

9. How long we keep data

Data in the browser are deleted by you, or they end with the session. The host keeps server logs for as long as operation and security require, and then deletes or truncates them. Once we ourselves store invoice or order data, the commercial and tax retention periods apply, generally up to ten years. After that the data are deleted or restricted.

10. Security

Transmission uses TLS. You can see this from “https://” in the address bar. We choose the host and the means so that confidentiality, integrity and availability match the risk, and we take data protection into account when choosing those means.

11. Your rights

Where the statutory conditions are met, you have the right to:

• Access and a copy of the data (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR).
• Portability of data you provided to us (Art. 20 GDPR).
• Object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR), including direct marketing. We do not send direct marketing.
• Complain to a supervisory authority (Art. 77 GDPR).

The authority for Hamburg is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg. A message to the email address above is enough to exercise your rights against us.

12. Changes

We update this policy when the processing changes. If that requires consent or a separate notice, we obtain it before the new processing starts.

As of October 2026 · Trepte Ventures UG (haftungsbeschränkt)