Privacy Policy

In this privacy policy, we inform you about which personal data is processed when you visit marcus-aurelius-meditations.com (hereinafter the “Website”), for what purposes this is done, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

jarito GmbH
Seeweg 13, 97508 Grettstadt, Germany
Represented by the managing director Christoph Jaster
Email: amazon_books_info [at] jarito [dot] de

We are not legally required to appoint a data protection officer and have therefore not appointed one.

2. The key points at a glance

• This Website sets no cookies and stores nothing on your device.
• We do not embed any third-party services: no Google services, no social media plugins, no external fonts or scripts. All files are loaded from our own server.
• For simple audience measurement, we use our own cookieless method that does not store IP addresses (see Section 4).
• Only when you click an Amazon button do you leave our Website, and Amazon then processes data under its own responsibility (see Section 5).

3. Hosting and server log files

The Website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR; the servers are located in Germany.

When you access the Website, your browser automatically transmits data that the host stores in server log files: IP address, date and time of access, requested URL, referrer URL (the previously visited page), amount of data transferred, HTTP status code, and browser type and operating system (user agent).

This processing is technically necessary to display the Website to you and to ensure the stability and security of the server (e.g., to fend off attacks). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the Website. The log files are deleted after 30 days at the latest, unless a specific security incident requires longer retention for the purpose of preserving evidence.

4. Our own cookieless audience measurement

To understand how the Website is used and whether it serves its purpose, we use a self-operated script on our own server to collect the following usage data:

• the page viewed and its language version, the time of access,
• the domain of the previously visited website, without the full URL (e.g., “google.com”), and, where applicable, campaign parameters in the URL (utm_source, utm_medium, utm_campaign),
• device type (smartphone, tablet, desktop) and browser family, derived from the user agent string sent by the browser,
• how far the page was scrolled and which Amazon button (format and position) was clicked.

To group multiple visits on the same day, we generate a shortened hash value (pseudonymous daily ID) from the IP address, the user agent string, and a random character string that is newly generated every day. The IP address itself is not stored in the process. The random character string is deleted after 24 hours at the latest; after that, the daily ID can no longer be attributed to any person or device, not even by us. Visitors are not recognized across multiple days, and there is no profiling and no disclosure to third parties.

In this process, no information is stored on or read from your device (no cookies, no local storage, no fingerprinting). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the statistical analysis and improvement of our Website. The data is automatically deleted after 14 months.

If your browser sends a “Do Not Track” or “Global Privacy Control” signal, we do not collect any usage data. Irrespective of this, you can object to the processing at any time (see Section 8).

5. Links to Amazon and Amazon Attribution

Our buttons lead to the book’s product pages on Amazon. When you click, you are redirected to Amazon via our own server (the click is counted as described in Section 4). The links contain campaign parameters of the “Amazon Attribution” service. This allows Amazon to provide us with aggregated, anonymous statistics, such as how many visitors from this Website viewed the product page or bought the book. We do not receive any personal data about you in this way.

From the moment you click, Amazon processes data under its own responsibility, in particular if you are logged in to Amazon. For users in Europe, this is generally Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. You can find more information in the Amazon.de Privacy Notice. For Amazon stores outside the EU, such as Amazon.com, the privacy notice of the respective store applies. The legal basis for including the tagged links is Art. 6(1)(f) GDPR; our legitimate interest is being able to measure the success of this Website.

We do not participate in the Amazon Associates Program and do not receive any commission on purchases made through these links. As the publisher of the book editions, we receive the regular sales proceeds.

6. Link to PureMindBlog

The Website links to our blog puremindblog.com. This blog is also operated by jarito GmbH; PureMindBlog’s own privacy policy applies there. Data is only transmitted once you follow the link.

7. Fonts and content

All fonts, images, and scripts are loaded directly from our server. No connection is established to servers of Google or other providers.

8. Your rights

With regard to your personal data, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

Right to object under Art. 21 GDPR: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. An informal message to amazon_books_info [at] jarito [dot] de is sufficient.

Please note: Since we do not store IP addresses and the daily IDs can no longer be attributed after 24 hours, we are generally unable to attribute individual data records to a specific person (Art. 11 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian State Office for Data Protection Supervision), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

9. Data security

The Website is transmitted exclusively in encrypted form via HTTPS (TLS). The internal analytics area is password-protected.

10. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

11. Changes

We will update this privacy policy if the Website or the legal situation changes. The version currently published here applies.