Privacy Policy

Last updated: 12th January 2025

A. Simple Overview (Non-Legal Summary)

Hello! I take your privacy seriously. Here’s a brief summary of what happens with your data:

Visiting the Blog: I collect some technical data (like your IP address) to keep the site running securely and see how many people visit.
Membership & Comments: If you sign up as a member, leave comments, or subscribe to my newsletter, I’ll save some info (like your email address) so everything works as intended.
Newsletter & Analytics: I use local analytics (no big external services) to see how many people read my posts or click from my newsletter. When you subscribe, I keep your IP, name, and subscription date so I know when and how you subscribed.
Paid Subscriptions: You can donate by purchasing a paid subscription via Stripe. In that case, Stripe processes your payment data.
No Advertising Trackers: I don’t allow any third-party ad trackers on my website, and I won’t sell your data.

If you’d like a deeper understanding of the legal side, please keep reading!

Detailed (Legal) Privacy Policy

I take your privacy seriously and am committed to protecting your personal data. This Privacy Policy explains how I collect, use, and safeguard your information when you visit my self-hosted Ghost blog (“Website”), which is hosted in Germany. By using my Website, you agree to the collection and use of information in accordance with this Privacy Policy and the applicable data protection regulations (including the EU General Data Protection Regulation, “GDPR”).

1) Data Controller

I, as the sole operator of this Website, am the data controller within the meaning of the GDPR and other national data protection laws of the member states, as well as other data protection regulations:

Byron Fröhlich, Braydmedia
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
E-Mail: info@braydmedia.de

2) Data Collection and Use

1. Visiting the Website

When you access my Website, I automatically collect certain information transmitted by your browser. This may include your IP address, browser type, operating system, referrer URL, and the date/time of your visit.
I use this information to ensure the technical functionality and security of the Website, to analyze trends, and to improve my services. The legal basis is my legitimate interest (Art. 6(1)(f) GDPR).

2. Analytics

I collect analytical data locally (without sending it to external analytics providers) to measure, for instance:
How many people visit my Website
Which blog posts are read and how frequently
How many people arrive from my newsletter
The source of new subscribers
This data is processed only on my own servers and is not shared with third parties. I use it to improve the Website, understand user behavior, and tailor my content. The legal basis for this processing is my legitimate interest (Art. 6(1)(f) GDPR).

3. Membership Registration

If you decide to register as a member on my Website, I will collect personal data such as your name, email address, IP address, subscription date/time, and any additional details you voluntarily provide.
I also record the type of subscription (free or paid) and use this data to create and maintain your account, provide you with membership services, and communicate with you. The legal basis for this processing is the performance of a contract (Art. 6(1)(b) GDPR) or, where applicable, your consent (Art. 6(1)(a) GDPR).

4. Comments on Blog Posts

Registered users may leave comments on my blog posts. I collect the data you enter into the comment form (such as your comment and username) and any technical data necessary for security and spam prevention (e.g., IP address, user agent).
I use this information to display your comments and moderate them if necessary. The legal basis for processing is my legitimate interest (Art. 6(1)(f) GDPR) in providing a platform for user interactions and ensuring the integrity and security of the Website.

5. Newsletter Subscription

If you subscribe to my newsletter, I collect your IP address, name, email address, subscription date/time, and the source of subscription (e.g., free or paid).
I use this data solely to send you the newsletter and other related information. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by clicking the “unsubscribe” link in any newsletter email or by contacting me directly.

6. Paid Subscriptions (Donations)

My Website offers paid subscriptions, which serve as a form of donation to keep the blog running; they are not profit-oriented.
Payment processing is handled through Stripe, a third-party payment processor. If you choose to purchase a paid subscription, your payment data will be processed by Stripe. Depending on your transaction, this may include your name, credit card or other payment details, billing address, and other necessary financial information.
The legal basis for this data processing is the performance of a contract (Art. 6(1)(b) GDPR). For more information, please consult Stripe’s Privacy Policy: https://stripe.com/privacy

7. Contact Forms

If you contact me via a contact form or email, I will collect the personal data you provide (such as name, email address, message content) to respond to your inquiry.
The legal basis is my legitimate interest in processing your request (Art. 6(1)(f) GDPR), or if it relates to a contractual relationship, the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

3) Cookies

My Website initially does not require cookies to function. However, once you register as a member or subscribe to my newsletter, certain cookies may be used. These cookies are essential for providing core functionalities, such as:

1. Session Cookies

These cookies store session identifiers to keep you logged in as you navigate through different pages. They are necessary for the operation of the membership area and are deleted once your session expires or you log out.

2. Functional Cookies

These cookies help remember your preferences (e.g., language settings) and ensure smooth navigation. These cookies are also essential for providing the requested services.

Because these cookies are strictly necessary for the functioning of the membership, newsletter, and commenting features (and potentially for analytics features), they are exempt from requiring your consent under the GDPR. If you do not wish for these essential cookies to be stored, you may choose not to register or subscribe. However, please note that disabling essential cookies may affect the functionality of certain services on my Website.

4) Links to External Websites

Some blog posts or pages on my Website may contain links to external websites. I have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. I strongly advise you to review the privacy policy of every external site you visit.

5) Data Retention and Storage

Your personal data is stored on servers located in Germany. I keep your personal data only for as long as it is necessary for the purposes for which it was collected and in accordance with this Privacy Policy, unless a longer retention period is required or permitted by law.

1. Service Providers

I may share personal data with third-party service providers who help me operate the Website (e.g., hosting, maintenance). These providers are contractually obligated to maintain the confidentiality and security of personal data and are prohibited from using it for any other purpose.

2. Payment Processor (Stripe)

If you choose to make a paid subscription (donation), your payment details will be processed by Stripe. You can find more information in Stripe’s Privacy Policy: Stripe Privacy Policy

3. Legal Requirements

I may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

7) Your Rights

Under the GDPR, you have the following rights concerning your personal data:

Right of Access: You have the right to obtain confirmation as to whether or not I am processing your personal data, and where that is the case, access to the personal data.
Right to Rectification: You have the right to request the correction of any inaccurate personal data concerning you.
Right to Erasure (“Right to be Forgotten”): You have the right to request the deletion of your personal data, under certain conditions.
Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data, under certain conditions.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data if the processing is based on my legitimate interests.
Right to Withdraw Consent: Where the processing of your data is based on consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact me at: info@braydmedia.de

If you believe that I have violated your data protection rights, you also have the right to file a complaint with a supervisory authority in the EU Member State of your habitual residence or place of the alleged infringement. In Germany, the relevant data protection authority depends on your state of residence or the state in which I am located.

8) Data Security

I take reasonable measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, please be aware that no method of electronic storage or transmission over the Internet is completely secure, and I cannot guarantee absolute security.

9) Changes to this Privacy Policy

I reserve the right to update or change this Privacy Policy at any time. Any changes will be effective when I post the updated Privacy Policy on this page, with an updated “Last updated” date. I encourage you to review this Privacy Policy periodically to stay informed about how I am protecting your personal data.

10) Contact me

If you have any questions or comments about this Privacy Policy, or if you wish to exercise your rights, please contact me at: