Privacy Policy
1. Controller
Mgee Media, Marcel Gorgolewski, Matthias-Claudius-Straße 7a, 21502 Geesthacht, Germany
Phone: +49 1578 923917
Email: hello@happy-little-llama.com
2. General information
We process personal data only where necessary to operate this website securely, provide our content and requested functions, or where you have given consent. The relevant legal bases include Article 6(1)(a), (b), (c) and (f) GDPR.
3. Hosting and server logs
The website is currently hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Technical log data may be processed when the website is accessed, including the IP address, time, requested address, referrer, browser and operating system. This is necessary for secure and stable operation under Article 6(1)(f) GDPR. Logs are retained only as long as needed for operation, troubleshooting and abuse prevention. A data processing agreement with the hosting provider must be confirmed before launch.
4. Locally hosted assets
Fonts, images, stylesheets and icons are hosted locally. Merely visiting the website therefore does not create a connection to Google Fonts or comparable asset providers.
5. Cookies and consent
Strictly necessary cookies and storage access may be used for sessions, security, authentication and your consent selection. Optional statistics, marketing and external-media services are blocked until you consent. Consent can be withdrawn at any time with future effect through the privacy settings. Rejecting optional services is as easy as accepting them.
6. Newsletters and free e-books
You may request free e-books without subscribing to promotional newsletters. For this purpose, we process your email address, language, request source and status, and request and confirmation times. A confirmation link valid for 48 hours verifies that the email address can be reached. Unconfirmed requests are automatically deleted after seven days. The legal basis for providing the requested e-book access is Article 6(1)(b) GDPR.
The recurring promotional Happy Little Llama newsletter is separate and optional. It is activated only if you personally tick the newsletter checkbox, which is not preselected, and then click the confirmation link. For this purpose, we additionally retain the selection, language, source, consent-text version and confirmation time as evidence. The legal basis is your consent under Article 6(1)(a) GDPR. If the box is not ticked, you receive no newsletter campaigns.
You may unsubscribe using the link in every newsletter email. The address is then retained with an “unsubscribed” status so that no further promotional messages are sent. Your e-book access is unaffected by unsubscribing. Consent evidence is retained where necessary to meet accountability and legal defence requirements.
After successful confirmation, you receive a personal, cryptographically signed link to the protected e-book area. The link does not contain your email address in plain text and is verified by the server whenever it is opened. Access may still be blocked for security or abuse-prevention reasons. Newsletters do not contain personal opening or click-tracking pixels.
The website sends confirmation, welcome and newsletter emails through the SMTP service configured on the server. The email address is technically disclosed to the selected delivery provider for this purpose. Once the specific SMTP provider for production has been selected, this section must be updated before sending begins to name the provider, processing location, data processing arrangements and any international transfer safeguards.
7. Blog comments
When you submit a blog comment, we process the name or pseudonym you provide, your email address, the comment text, the submission time and the related article. Your email address is not published. Comments are reviewed manually before publication and may be rejected, classified as spam or deleted. Email confirmation and a user account are not required.
We use local safeguards against spam and abuse, including submission timing checks, a field hidden from human visitors, submission rate limits and duplicate detection. For these purposes, the network address may be processed solely as a non-reversible hash together with a technical duplicate fingerprint. No external CAPTCHA or spam-screening provider is currently used. Links and HTML are not permitted in comments.
Processing is necessary to provide and moderate the comment function securely under Article 6(1)(f) GDPR. Our legitimate interests are maintaining a safe, constructive discussion and preventing misuse. Approved comments generally remain visible with the article until the comment or article is deleted, or until you submit a valid erasure request. Rejected or spam comments and related abuse indicators are retained only as long as necessary for moderation and abuse prevention.
8. E-book downloads
Following confirmation, downloads are provided through protected, signed links. The e-book, subscriber identifier, download time and a hashed network identifier may be logged to prevent abuse.
9. Amazon affiliate links
Book pages contain labelled links to Amazon marketplaces. Amazon content is not embedded automatically. Only after clicking a link do you leave our website; Amazon may then receive information such as your IP address, time, referrer and browser data. The relevant Amazon provider is responsible for subsequent processing. Affiliate parameters may attribute a commission without changing the price you pay.
10. Analytics
Google Analytics and comparable analytics services are not active by default. If enabled later, this will occur only after consent and after updating this policy and the consent settings. Newsletter opening statistics may be displayed only in aggregate and not as recipient profiles.
11. Recipients and international transfers
Data is disclosed only to necessary technical processors and legally authorised bodies. Transfers outside the European Economic Area take place only with a valid legal basis and appropriate safeguards. Details will be added before a corresponding service is activated.
12. Your rights
Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time with future effect and lodge a complaint with a data protection supervisory authority. Contact the email address above to exercise your rights.
13. Security and updates
The production website uses TLS encryption and appropriate technical and organisational safeguards. This policy will be updated when functions, providers or legal requirements change.
Last updated: 1 September 2026 · Legal review required before publication.