As of October 2026
1. Controller
The controller responsible for processing your data on this website is Corandus GmbH, Bergstr. 12, 82024 Taufkirchen, Germany. Phone: +49 89 41613371, email: info@corandusbooks.com. Corandus Books is the publishing imprint of Corandus GmbH.
The contact person for data protection questions is Horatiu Sava. You can reach him using the contact details above. We have not appointed a data protection officer because we are not required to do so.
2. Visiting the website
When you visit our website, our hosting provider processes technical access data: the date and time of access, the page or file requested, the browser used and your IP address. The IP address is needed to deliver the page to you. In the log files it is stored only in anonymised form. The log files are kept for six weeks.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and stable operation of the website.
The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. STRATO processes the data on our behalf.
3. Access statistics
We do not use any analytics or tracking services. Our hosting provider compiles simple access statistics from the anonymised log data, going back up to 400 days. We cannot identify individual persons in them. The legal basis is Art. 6 (1) (f) GDPR.
4. Cookies
The website sets a single cookie. It is called pll_language, stores the language you have chosen and remains valid for one year. It is technically necessary so that the website appears in your language. The legal basis is Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
We do not use cookies for analytics or advertising. You can delete or block cookies in your browser at any time.
5. Orders
When you order a book, we process the details from the order form: form of address, first name, last name, company (optional), address, country, email address and the book ordered. We use them to conclude the contract, issue the invoice and deliver the book. The legal basis is Art. 6 (1) (b) GDPR.
The details are sent to our mailbox by email. They are not stored in the website’s database.
We pass data on to the following recipients where necessary for the respective purpose:
- Shipping: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, receives your name and address. We pass your email address on to DHL only if you gave your consent when ordering, so that DHL can inform you about the delivery (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time.
- Payment with PayPal: If you pay with PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, processes your payment data as an independent controller. PayPal’s privacy policy applies.
- Accounting: We record invoice data with the service BuchhaltungsButler, which processes it on our behalf, and pass it on to our tax adviser. The legal basis is Art. 6 (1) (c) GDPR.
For deliveries to countries outside the EU, your name and address are transferred to the delivery partner in the destination country. This is necessary for the performance of the contract (Art. 49 (1) (b) GDPR).
6. Contact form and email
When you write to us via the contact form or by email, we process your details in order to answer your enquiry: form of address, last name, first name (optional), email address and your message. The legal basis is Art. 6 (1) (b) GDPR if the enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR.
We delete enquiries six months after they have been dealt with, unless a statutory retention obligation applies.
7. Withdrawal
When you use the withdrawal form, we process your name, your email address, the title of the book and the date of purchase. We use them to process the withdrawal and to confirm receipt to you. The legal basis is Art. 6 (1) (c) GDPR.
8. Email mailboxes
Our email mailboxes are also hosted by STRATO GmbH. Emails that you send us or that our forms generate are stored there.
9. Storage period
We keep order and invoice data in accordance with German commercial and tax law, which means for up to ten years. After that we delete it. The periods stated above apply to all other data.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
You can object to processing that is based on our legitimate interest (Art. 21 GDPR). You can withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.
11. Required information and automated decisions
We need the details marked with * in the forms in order to process your order, your enquiry or your withdrawal. Without them this is not possible. There is no automated decision-making or profiling.
12. Security
The website transmits all data in encrypted form (TLS).
The German version of this privacy policy is authoritative. The English version is provided for information.