for the purchase and download of the audiobook “My Conversation with Jesus”
1. Controller according to Art. 4 No. 7 GDPR
Christian Dorn
Departamento Guairá
040701 Melgarejo
Paraguay
Email: nothingness@posteo.de
The controller determines the purposes and means of processing personal data in connection with the purchase, provision, and download of this digital product.
2. Purposes and legal bases of processing (Art. 13 (1) c and d GDPR)
Your personal data is processed exclusively in order to:
-
process the purchase
-
provide the download link
-
issue an invoice
-
contact you in case of questions
-
fulfill statutory retention obligations
Legal bases:
-
Fulfillment of a contract (Art. 6 (1) b GDPR)
-
Compliance with legal obligations (Art. 6 (1) c GDPR)
No data is processed for advertising, tracking, profiling, or analytics.
3. Categories of personal data
The following data is processed:
-
Email address
-
Order details
-
Payment status (successful / failed)
-
Download provision (time, link validity)
-
Invoice data according to tax regulations
Payment data (e.g., credit card number) is not processed by me.
This data is collected and managed exclusively by Stripe.
4. Payment service provider (Stripe)
For payment processing, I use:
Stripe Payments Europe, Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, D02 H210, Ireland
Stripe processes payment information under its own responsibility and in accordance with European security standards (including PCI-DSS).
I only receive information about whether a payment was successful and a transaction ID.
Stripe’s privacy notice:
https://stripe.com/privacy
5. Storage period (Art. 13 (2) a GDPR)
-
Order and invoice data: 10 years (legal retention period)
-
Communication data: until the inquiry has been completed
-
Download log: deleted after the technically necessary period
Only data required for processing, security, or legal obligations is stored.
6. Transfers to third countries (Art. 13 (1) f GDPR)
Stripe may process data outside the EU.
This is based on Standard Contractual Clauses (SCCs) and complies with GDPR requirements.
I do not transfer any data to third countries myself.
7. Obligation to provide data (Art. 13 (2) e GDPR)
Providing an email address is necessary to process the purchase and deliver the download link.
Without this information, the audiobook cannot be purchased.
8. Data subject rights (Art. 13 (2) b–d GDPR)
You have the following rights at any time:
-
Access to stored data (Art. 15 GDPR)
-
Rectification of incorrect data (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction of processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Objection, where applicable (Art. 21 GDPR)
To exercise these rights, simply send an email to: nothingness@posteo.de
9. No automated decision-making (Art. 13 (2) f GDPR)
No automated decision-making or profiling takes place.
10. Data security
All data is transmitted via encrypted connections (HTTPS).
The download is provided through secure servers.
Stripe uses recognized security standards for payments.
11. Updates to this privacy policy
This privacy policy will be updated if procedures, legal requirements, or technical processes change.