Legal & Privacy

Hosting and technical logs

This website uses hosting infrastructure provided by netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe, Germany. Olivia Judson holds the hosting contract with netcup and has signed an agreement covering the processing of IP addresses.

Your IP address and technical request information are processed to deliver the website and protect it against abuse. Our website’s access logs record IP addresses, request times, requested addresses, response statuses, browser information and referring pages where supplied. Error logs may also contain IP addresses and technical diagnostic information. We process this information under Article 6(1)(f) GDPR for our legitimate interests in operating a reliable website, diagnosing faults and protecting it against abuse.

Log retention and deletion

Our retention policy for routine website application logs is a maximum of seven days. Automatic rotation and deletion normally remove these records sooner, after approximately five days or less. This applies to IP addresses and other information contained in those logs. Access is restricted to authorised administrators, and these log files are not included in the website’s database and uploads backups.

If particular records are needed to investigate a security incident, only the relevant records may be retained separately. The reason must be documented, the need for continued retention reviewed after 30 days, and the records deleted when they are no longer required.

This seven-day policy covers website application logs. Separate server security records are described below.

Server security records

We also process server security records to detect unauthorised access, investigate technical problems and protect the website against abuse. These include login attempts, firewall events and records of automatically blocked connections. They can contain IP addresses, timestamps and technical event details.

Our routine server security-log retention policy is a maximum of 30 days. Daily rotation and automatic expiry are configured to remove these records within that period under normal operation. This includes the system journal and authentication, firewall, automated-blocking and login-history logs. IP-address fields in older last-login records are also cleared. Relevant records may be retained separately for a documented security investigation, as described above. The shorter seven-day policy continues to apply to website application logs.

Hosting-provider records

netcup may collect technical logs to defend against attacks. Its published policy states that these attack-defence records are retained for a maximum of 14 days. Other provider retention depends on the contracted service and legal requirements. This is separate from the logs we manage on our own server.

See netcup’s log-storage policy for the provider’s explanation.

Cookies and analytics

The website currently has no analytics or advertising integration. Bookseller region is estimated afresh when you load the website and retained only in memory while you browse; it is not stored in a cookie. The contact form uses the security cookie __Host-oj-contact, lasting 20 minutes with the current default configuration. It helps prevent forged and automated submissions. Authenticated editorial preview links use a separate 15-minute cookie; ordinary visitors do not receive it. Browser language and timezone are used to estimate a suitable bookseller region. This estimate is not a precise location measurement.

Locally hosted fonts

This website uses Open Sans, a font available through Google Fonts. The font files are hosted on our own website and delivered directly to your browser. Loading these fonts does not connect your browser to Google or transmit your IP address to Google.

Contact form

The contact form sends your email address, subject, message and optional name to the website operator by email. It uses a short-lived functional cookie and server-side abuse controls. No third-party CAPTCHA or tracking script is loaded. Temporary keyed identifiers in server memory are used to limit repeated submissions. The website does not save contact messages in a database.

Providing this information is voluntary, but an email address, subject and message are needed to submit an enquiry. We process general enquiries under Article 6(1)(f) GDPR for our legitimate interest in responding to correspondence. Abuse prevention also relies on Article 6(1)(f), for our legitimate interest in protecting the contact service. Where processing is necessary to perform a contract with you or take steps at your request before entering one, the legal basis is Article 6(1)(b) GDPR.

Messages are processed by Olivia Judson using an email address provided by Simple Constellation. Simple Constellation holds the email-service contract with ALL-INKL.COM – Neue Medien Münnich, which hosts the receiving mailbox on servers in Germany. Simple Constellation’s role in this arrangement is providing the email address, not hosting the website. We retain correspondence to answer your enquiry and handle related follow-up. Ordinary enquiry correspondence is deleted within 12 months after the enquiry is closed. Relevant correspondence relating to an ongoing professional relationship, a legal obligation or a legal claim may be retained for longer where necessary for that purpose, and is deleted when it is no longer needed.

External links

This website may link to publishers, booksellers and independent third-party websites. Following those links is subject to the respective provider’s privacy practices.

Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

You may also complain to a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. You do not need to contact us first to exercise that right.

Privacy enquiries

Email oj_admin@simpleconstellation.com for privacy enquiries. You can also use the contact form.