Privacy Policy
1. Data Controller
The person responsible for the processing of personal data on this website is:
Lian Tomtit
c/o Fakriro GmbH
Bodenfeldstraße 9
91438 Bad Windsheim
Germany
Email: info@liantomtit.com
Website: https://liantomtit.com
If you have any questions about data protection or wish to exercise your rights, you can contact me at the email address provided above.
For further details, please refer to the Legal Notice.
2. General Information on Data Protection
Protecting your personal data is important to me.
This Privacy Policy explains what personal data is processed when you visit my website, the purposes for which it is processed, the legal grounds for such processing, and your rights regarding your personal data.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, names, email addresses and IP addresses.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
3. Legal Bases for Processing Personal Data
Personal data is processed only where there is a lawful basis for doing so.
The following legal bases apply in particular:
Article 6(1)(a) GDPR – Consent
Where consent is required, personal data is processed on this basis. This applies in particular to the sending of newsletters.
Article 6(1)(b) GDPR – Performance of a Contract
Personal data is processed where necessary for the performance of a contract or to take steps prior to entering into a contract.
Article 6(1)(c) GDPR – Legal Obligations
Personal data may be processed where necessary to comply with legal obligations.
Article 6(1)(f) GDPR – Legitimate Interests
Personal data may be processed for the purposes of legitimate interests, particularly to ensure the secure and reliable operation of the website and to respond to enquiries.
The storage of information on users' devices and access to information already stored on such devices are also subject to Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
4. Hosting and Server Log Files
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
Website: https://www.strato.de
When you visit my website, the hosting provider automatically processes certain technical information.
This may include:
- IP address
- Date and time of access
- Pages and files accessed
- Browser type and version
- Operating system
- Referrer URL, where transmitted
- Technical information relating to the server request
This processing is necessary to make the website technically available, ensure its functionality and security, and detect technical problems or unauthorised access attempts.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in providing a secure, reliable and functional website.
The data is stored only for as long as necessary for these purposes or as required by applicable statutory retention obligations.
Where STRATO processes personal data on my behalf, such processing is subject to the requirements of Article 28 GDPR.
Further information about data protection at STRATO is available at:
https://www.strato.de/datenschutz/
5. Website Visitor Statistics
Visitor statistics provided by STRATO may be used to analyse how my website is used.
These statistics allow the evaluation of general usage information, such as the number of page views and the content accessed.
The purpose of these statistical analyses is to better understand the use of my website and to improve its content and technical functionality.
Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR, unless prior consent is required for the specific processing activity.
I do not intend to analyse the behaviour of individual visitors on a personally identifiable basis.
6. SSL/TLS Encryption
This website uses SSL/TLS encryption for security purposes.
Encryption is intended in particular to protect the transmission of personal data between your browser and the server hosting this website.
You can recognise an encrypted connection, among other things, by the website address beginning with “https://”.
Encryption helps protect transmitted data against unauthorised interception during transmission.
7. Contact
If you contact me by email, the personal data you provide will be processed.
This may include:
- Name
- Email address
- Content of your message
- Any additional information you voluntarily provide
The data is processed solely for the purpose of handling and responding to your enquiry.
The legal basis is Article 6(1)(f) GDPR, based on my legitimate interest in communicating with visitors to my website.
Where your enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR.
The data will be deleted once it is no longer required to process your enquiry, provided that no statutory retention obligations or other lawful grounds justify further storage.
8. Contact Form
If a contact form is provided on this website, the personal data entered into the form will be processed solely for the purpose of handling and responding to the respective enquiry.
This may include your name, email address and the content of your message.
The legal basis is Article 6(1)(f) GDPR or Article 6(1)(b) GDPR where the enquiry relates to a contract.
The data will be deleted once the purpose of processing no longer applies, unless statutory retention obligations require further storage.
9. Newsletter via Brevo
I offer a newsletter providing information about new book releases, my books and news relating to my work as an author.
Personal data is processed when you subscribe to the newsletter. This includes, in particular, your email address and, where applicable, your first name.
Subscription to the newsletter is based on your explicit consent in accordance with Article 6(1)(a) GDPR.
The use of Brevo is planned for the technical distribution of the newsletter and the management of subscriptions.
The provider is:
Sendinblue GmbH
Köpenicker Straße 126
10179 Berlin
Germany
Website: https://www.brevo.com/de/
Brevo processes the personal data required for newsletter distribution as part of its services.
This may include your email address, additional information voluntarily provided and technical information relating to registration and distribution.
The processing serves to organise and distribute the newsletter and manage the mailing list.
Registration takes place through a double opt-in procedure. After registering, you will receive a confirmation email. Your subscription will only be completed once you click the confirmation link contained in that email.
To document your consent, information such as the time of registration, the time of confirmation and associated technical verification data may be stored.
You may withdraw your consent to receive the newsletter at any time with effect for the future.
You can do so by using the unsubscribe link included in newsletter emails or by sending a message to: info@liantomtit.com
After unsubscribing, your personal data will be removed from the active newsletter mailing list, unless statutory retention obligations or legitimate requirements to retain evidence justify further storage.
F
urther information about data protection at Brevo is available at:
https://brevo.com/de/legal/privacypolicy/
10. Cookies and Similar Technologies
Technically necessary cookies or similar technologies may be used to operate this website.
Cookies are small files stored on your device that may contain certain information.
Technically necessary cookies are used in particular to ensure the basic functionality and security of a website.
Where storing information on your device or accessing information already stored on it is strictly necessary to provide a digital service expressly requested by you, such processing may take place without consent in accordance with Section 25(2) TDDDG.
Other storage or access operations generally require prior consent under Section 25(1) TDDDG, unless a statutory exception applies.
Where personal data is subsequently processed on the basis of your consent, the legal basis is Article 6(1)(a) GDPR.
You can view, restrict or delete stored cookies through your browser settings.
11. Links to Social Networks
My website may contain links to my public profiles on social networks.
These include, in particular:
- TikTok
These links allow you to access further information about my books and my work as an author.
They are ordinary hyperlinks rather than directly embedded social media content.
When you click such a link, you leave my website and are redirected to the website of the respective platform provider.
From that point onwards, the respective provider may process personal data in accordance with its own privacy policy.
Further information can be found in the privacy policies of the respective providers:
Instagram: https://privacycenter.instagram.com/policy/
Facebook: https://facebook.com/privacy/policy/
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de
Operation of My Social Media Profiles
I maintain publicly accessible profiles on social networks, particularly Instagram and potentially other platforms. These profiles are used to provide information about my books and my work as an author, as well as to communicate with readers. When you visit my social media profiles or communicate with me through them, personal data may be processed by both me and the respective platform operators. This may include publicly available profile information, messages, comments and other interactions. My processing of such data is based on Article 6(1)(f) GDPR. My legitimate interest lies in public relations and communication with interested individuals. Where consent is required for specific processing activities, the legal basis is Article 6(1)(a) GDPR. Social network operators also process personal data for their own purposes. I have only limited influence over these processing activities. Further information about data processing and your rights can be found in the privacy policies of the respective platform operators linked above.
External Links
My website may contain links to external websites and third-party offerings, such as publishers, bookshops or other information services. When you click such a link, you leave my website and are redirected to the respective third-party website. I generally have no control over how the operators of these external websites process personal data. Information about the processing of personal data can be found in the privacy policies of the respective providers. These provisions relate to ordinary external hyperlinks. If additional technical services or embedded content are used in the future, this Privacy Policy will be updated accordingly.
12. Recipients of Personal Data
As part of the processing activities described above, personal data may be transferred to external service providers where necessary to provide the website and its functions.
These may include:
- STRATO as the hosting provider
- Brevo as the intended newsletter service provider
- Other technical service providers, where used to operate the website or facilitate communication
- Competent public authorities, where disclosure is required by law
Personal data is transferred only in accordance with applicable legal requirements and on an appropriate legal basis.
Where external service providers process personal data on my behalf, the requirements of Article 28 GDPR apply.
13. Transfers of Data Outside the EU and EEA
The use of external online services may involve the processing of personal data outside the European Union or the European Economic Area.
Where such transfers occur within the scope of my responsibility for this website, the requirements of Articles 44 et seq. GDPR are observed.
These include, in particular, adequacy decisions issued by the European Commission and appropriate safeguards within the meaning of Article 46 GDPR.
When you independently access linked social media platforms, the privacy policies of the respective platform operators also apply.
14. Data Retention
Personal data is generally stored only for as long as necessary to fulfil the respective purpose of processing.
The following principles apply to the individual processing activities:
Contact enquiries: Personal data is retained until the enquiry has been fully processed and is then deleted, unless further retention is legally justified.
Newsletter: Personal data is retained in the active newsletter mailing list until the data subject withdraws their consent or unsubscribes. Legally required evidence may be retained beyond this period.
Technical data: Server logs and other technical data are stored and deleted in accordance with their respective purposes and applicable legal requirements.
Statutory retention obligations remain unaffected.
15. Rights of Data Subjects
Under the GDPR, you have the following rights in particular:
Right of Access – Article 15 GDPR
You may request information about the personal data processed about you.
Right to Rectification – Article 16 GDPR
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to Erasure – Article 17 GDPR
You may request the deletion of your personal data, subject to the applicable legal requirements.
Right to Restriction of Processing – Article 18 GDPR
Under certain circumstances, you may request that the processing of your personal data be restricted.
Right to Data Portability – Article 20 GDPR
Subject to the applicable legal requirements, you have the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller.
Right to Object – Article 21 GDPR
You may object to the processing of your personal data based on Article 6(1)(f) GDPR on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
Withdrawal of Consent – Article 7(3) GDPR
You may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal of consent remains unaffected.
To exercise your rights, please contact: info@liantomtit.com
16. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR.
In particular, you may lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
This right exists independently of any other administrative or judicial remedies.
17. Requirement to Provide Personal Data
You can generally access the publicly available areas of this website without actively providing personal contact details.
Technically necessary connection data is processed to make the website available.
Contacting me and subscribing to the newsletter are voluntary.
An email address is required to receive the newsletter.
Without sufficient contact information, it may not be possible to respond to an enquiry.
18. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place as part of the processing activities carried out by me.
19. Data Security
Appropriate technical and organisational security measures are implemented to protect personal data.
These measures are intended in particular to protect personal data against unauthorised access, loss, manipulation and unauthorised disclosure.
The security measures are based on the requirements of Article 32 GDPR.
20. Updates to This Privacy Policy
I reserve the right to update this Privacy Policy if the technical services used, the data processing activities or the applicable legal requirements change.
The version published on this website at any given time shall apply.
Last updated: October 2026 / Source: eRecht24