Privacy Policy

1. Overview of Data Protection

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can personally identify you. Detailed information on data protection can be found in the full privacy policy below.

Data Collection on This Website Data is collected in two ways:

• You provide it directly, e.g. by entering it into a contact form.

• Other data is collected automatically or after your consent when you visit the website. This includes technical data (e.g. browser type, operating system, time of access).

Purpose of Data Processing Some data is collected to ensure the website functions properly. Other data may be used to analyze user behavior or to process inquiries and orders.

Your Rights You have the right to request information about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may withdraw it at any time. You also have the right to restrict processing under certain conditions and to lodge a complaint with the relevant supervisory authority.

2. Hosting

Hosting Provider: Wix Our website is hosted by the providerWix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (“Wix”).

Wix is a platform for building and hosting websites. When you visit our site, Wix may analyze visitor behavior, traffic sources, geographic location of visitors, and visitor numbers. Wix stores cookies in your browser that are necessary for displaying the website and ensuring its security (essential cookies).

The data collected via Wix may be stored on servers located worldwide, including in the United States.

For more information, please refer to Wix’s privacy policy:https://www.wix.com/about/privacy

Data transfers to the USA and other third countries are based on the EU Standard Contractual Clauses or equivalent safeguards under Article 46 GDPR. Details:https://www.wix.com/about/privacy-dpa-users

Wix is certified under the EU-U.S. Data Privacy Framework (DPF), which ensures compliance with European data protection standards for data processing in the U.S. More information:https://www.dataprivacyframework.gov/participant/5626

Data Processing Agreement We have entered into a Data Processing Agreement (DPA) with Wix. This legally required agreement ensures that Wix processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data may be collected. Personal data refers to data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains the purpose of the data processing.

Please note that data transmission over the internet (e.g. communication via email) may have security vulnerabilities. A complete protection of data from access by third parties is not possible.

Responsible Entity

The responsible party for data processing on this website is:

Bookworm blogs – Dragana Nicic c/oOnline-Impressum.de #343750 Europaring 90 53757 Sankt Augustin Germany Phone: +49 160 6369735 Email: book.worm.blogs.d@gmail.com

The responsible entity is the natural or legal person who alone or jointly determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Storage Duration

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you request deletion or revoke your consent, your data will be deleted unless we are legally required to retain it (e.g. tax or commercial law retention periods).

Legal Basis for Data Processing

If you have given consent, we process your data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special categories of data. If you have consented to data transfer to third countries, processing is based on Art. 49(1)(a) GDPR. If cookies or device access (e.g. fingerprinting) are involved, §25(1) TDDDG applies. Consent can be revoked at any time.

If data is necessary for contract performance or pre-contractual measures, we process it under Art. 6(1)(b) GDPR. If required by law, Art. 6(1)(c) GDPR applies. Otherwise, processing may be based on our legitimate interest under Art. 6(1)(f) GDPR.

Transfer to Third Countries

We use tools from providers based in countries that may not offer adequate data protection under EU standards. If these tools are active, your personal data may be transferred to such countries. In the case of the USA, data transfer is permitted if the provider is certified under the EU-U.S. Data Privacy Framework (DPF) or offers other safeguards.

Recipients of Personal Data

We may share personal data with external parties if necessary for contract fulfillment, legal obligations, or legitimate interests. When using processors, we ensure a valid data processing agreement is in place. In cases of joint processing, a joint controller agreement is concluded.

Your Rights

You have the right to:

• Access your stored personal data

• Request correction or deletion

• Restrict processing under certain conditions

• Object to processing (Art. 21 GDPR)

• Lodge a complaint with a supervisory authority

• Request data portability

• Withdraw consent at any time