Privacy Policy
1. Who is responsible for your data?
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Marvin Cengiz (publishing under the name Marvin Hilton, operating as MH Media Group / The Rein Magazine)
Am Rothenberg 23, 35075 Gladenbach, Germany
Email: contact@thereinmagazine.com
2. Overview
This website presents The Rein Magazine and offers a newsletter and paid print edition subscriptions. We only process the personal data that is necessary for these purposes. Personal data is any information that relates to an identified or identifiable person.
Our legal bases are:
- Art. 6(1)(a) GDPR - your consent (e.g., newsletter);
- Art. 6(1)(b) GDPR - performance of a contract or steps prior to entering into a contract (e.g., print orders);
- Art. 6(1)(c) GDPR - compliance with legal obligations (e.g., tax and accounting rules);
- Art. 6(1)(f) GDPR - our legitimate interests (e.g., a secure and stable website).
3. Hosting and server log files
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the website, the hosting provider automatically processes technical data that your browser transmits, in particular your IP address, the date and time of the request, the requested page or file, the referrer URL, and browser and operating system information. This data is processed to deliver the website, to ensure its security and stability, and to prevent abuse. The legal basis is Art. 6(1)(f) GDPR.
Because Netlify is located in the USA, your data may be transferred to a third country. This transfer is based on appropriate safeguards under Art. 46 GDPR, in particular Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Netlify.
4. Newsletter
You can subscribe to our newsletter on this website. For this we need your email address. We use the double opt-in procedure: after you sign up, we send you a confirmation email with a link. Your subscription only becomes active once you click this link. We store the time of sign-up and confirmation as well as the IP address used, so that we can prove your consent.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, for example by clicking the unsubscribe link in every newsletter or by emailing us. The lawfulness of the processing carried out before the withdrawal remains unaffected. We store your data until you unsubscribe. After that, we may keep your email address on a suppression list for as long as necessary to make sure we do not email you again (Art. 6(1)(f) GDPR).
Newsletter service provider: We send our newsletters through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), which processes your data on our behalf and mainly on servers within the EU. We have concluded a data processing agreement with Brevo. Our newsletters may contain tracking pixels and links that show us whether an email was opened and which links were clicked; this helps us improve our content and is based on your consent.
5. Print edition orders, subscriptions, and payments
If you order or subscribe to the print edition, we process the data you enter at checkout: your name, email address, shipping and billing address, the selected product and subscription term, and the payment status. We need this data to conclude and perform the contract, to ship your copy, and to manage your subscription. The legal basis is Art. 6(1)(b) GDPR. We are also required by commercial and tax law to keep order and invoice data for six to ten years (Art. 6(1)(c) GDPR).
Order form: When you place an order, the details you enter (see above) are sent to us through the order form of our hosting provider (Netlify Forms, see section 3) and delivered to us by email. We use them to process your order and to create your invoice. If you enter a discount code, we store it with your order.
Payment: You pay on invoice by bank transfer. After you place your order, your invoice is shown on the confirmation page, where you can save it as a PDF. If you pay by bank transfer, we receive the transfer details that your bank passes on to us (such as your name, account number and payment reference) so that we can assign the payment to your order. The QR code on the invoice is created in your browser; no data is sent anywhere to create it.
Subscription management: You can cancel your subscription at any time by emailing us. For a renewal we send you a new invoice each year.
6. Shipping
To deliver your print copy, we pass your name and shipping address to the postal or courier company that carries out the delivery (Deutsche Post / DHL). The legal basis is Art. 6(1)(b) GDPR. For deliveries outside the EU, additional data may be required for customs purposes.
7. Contacting us
If you contact us by email, we process your email address and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or order, otherwise Art. 6(1)(f) GDPR. We delete your message once your request has been resolved, unless legal retention periods apply.
8. Cookies and analytics
This website does not use analytics, advertising, or tracking cookies, does not set any cookies of its own, and we do not create user profiles. The website only uses technically necessary browser storage: your order details are kept in your browser's session storage until you close the tab, so that the confirmation page can show your invoice.
9. Fonts
This website uses the fonts Bodoni Moda and Jost. They are stored on our own server and loaded from there, so your browser makes no connection to Google or any other third party for fonts, and no data about you is transferred for this purpose.
10. External links and social media
Our website contains links to external services such as Instagram. These are plain links: no data is transferred to these providers until you click on them. Once you do, the privacy policy of the respective provider applies.
11. Storage period
We only store personal data for as long as it is needed for the purposes described above or as required by law. Newsletter data is stored until you unsubscribe. Order and invoice data is stored for the legally required retention periods.
12. Your rights
You have the right to: access your personal data (Art. 15 GDPR); correct inaccurate data (Art. 16); have your data deleted (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent at any time (Art. 7(3)). To exercise your rights, simply email us at the address above.
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: The Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
14. Data security
This website uses SSL/TLS encryption. You can recognize it by the lock symbol and "https://" in your browser's address bar. Data you send us is transmitted in encrypted form.
15. Changes to this policy
We may update this policy when our website or the law changes. The current version is always available on this page.