Privacy policy

This is a courtesy translation. The German version (Datenschutzerklärung) is legally binding.

1. Controller

Philipp Hogrefe
Franziska-Schmitz-Str. 6
80634 München (Munich)
Germany

2. Summary

This website sets no cookies and uses no analytics or tracking tools.
Fonts, images and scripts are served exclusively from this website. No third-party content is embedded (no Google Fonts, no videos, no shop widgets, no social media plugins).
Nothing is stored in your browser. The language is determined solely by the address you open (/de/ or /en/).
There is no contact form and no comment or review feature.
Personal data is processed only to the extent necessary to deliver the website or to answer emails.

3. Hosting and delivery (Cloudflare)

The website is delivered through Cloudflare’s network (Cloudflare Workers). The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

What data: When you open a page, Cloudflare processes the technically necessary connection data: IP address, date and time, the address requested, the amount of data transferred, the address of the previously visited page if your browser sends it, and information about your browser and operating system (user agent).

Purpose and legal basis: The website cannot be delivered without this data. It also serves security and stability, for example defending against overload attacks. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely, quickly and reliably.

No logs of my own: I do not store any access logs myself; the logging feature of Cloudflare Workers (“Workers Logs”) is switched off. The home page shows one of my novels at random on each visit. Nothing is stored for this either.

Data processing agreement and third country: A data processing agreement under Art. 28 GDPR is in place with Cloudflare (Cloudflare Data Processing Addendum). Cloudflare may also process data in the USA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, so the European Commission’s adequacy decision applies to the transfer (Art. 45 GDPR). In addition, the European Commission’s standard contractual clauses are agreed in the data processing agreement (Art. 46(2)(c) GDPR).

More information: Cloudflare privacy policy.

4. Contact by email

If you send me an email, I process your email address, your name (if given), the content of the message and the date and time, solely to answer your enquiry.

How the message travels: The address kontakt@philipphogrefe.de is forwarded via Cloudflare Email Routing (provider: see section 3) to my mailbox at Google Gmail. Cloudflare only forwards the message and does not store its content. The provider of Gmail is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Legal basis: Art. 6(1)(f) GDPR; my legitimate interest lies in answering your enquiry. Where the enquiry concerns a contract or steps prior to entering into one, the legal basis is Art. 6(1)(b) GDPR.

Retention: I delete your message once the matter is settled, unless statutory retention obligations apply.

5. Links to shops

The purchase links (to Amazon) are ordinary links. No data is sent to the shop before you click. When you click, your browser does not send a referrer, so the shop does not learn that you came from this website. The linked pages are subject to the respective provider’s privacy policy.

6. Your rights

You have the following rights regarding personal data concerning you:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR): Where I process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. An informal email to kontakt@philipphogrefe.de is sufficient.

Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

No automated decision-making, including profiling, takes place.

7. Last updated

November 2026