Privacy Policy
Last updated: September 24, 2026
1. Data Controller
This website, the author website of Ralph Ehon, is operated by:
RANOVIS UG (haftungsbeschränkt)
Am Kriegerdenkmal 9 b
90427 Nürnberg
Germany
Phone: +49 911 2525 7599
Email: info@ranovis.com
RANOVIS UG ("we", "us", "our") is the controller within the meaning of the GDPR. This privacy policy explains which personal data we process when you visit this website, follow a link to Amazon, or subscribe to the newsletter. We treat your personal data as confidential and in accordance with the statutory data protection regulations (GDPR, BDSG, TDDDG).
2. Hosting and Server Log Files
This website runs on our own server, hosted by Hetzner Online GmbH in Germany. When you visit a page, the web server automatically records technical information that your browser transmits: IP address, date and time of the request, the page requested, referrer URL, browser type and version, and operating system.
This data is used only to deliver the website and to keep it secure and stable, and it is not merged with other data. Log files are rotated and deleted automatically (rotated log files after 10 days). The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in the secure and error-free operation of the website).
3. Links to Amazon
Book links on this site point to Amazon. To send you to the Amazon store for your country, our server determines your country from your IP address using a GeoIP database stored locally on our server, falling back to your browser's language setting. Your IP address is not stored for this purpose and is not shared with anyone. We do not use affiliate tracking.
Once you are on Amazon, Amazon's own privacy policy applies. The legal basis for the country lookup is Art. 6 (1) (f) GDPR (our legitimate interest in sending you to the right store).
4. Newsletter
If you subscribe to our newsletter, we process:
- Email address — provided by you
- Your consent — that you accepted the Terms of Use, and the time of subscription
- IP address — included in the internal notification we receive about new subscriptions, as evidence of the subscription
We use your email address to send you a welcome email and occasional updates about new books, special offers, and related content. The legal basis is your consent, Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with the unsubscribe link in every email, or by contacting us; this does not affect the lawfulness of processing before the withdrawal.
5. Spam Protection
To protect the newsletter form against spam and abuse, your browser solves a small computational task in the background before sending (without JavaScript, you answer a simple arithmetic question instead). In addition, the number of submissions per IP address is limited; for this, your IP address is stored only in pseudonymised (hashed) form and deleted after at most 24 hours. This check runs entirely on our own server and in your browser; no third-party service is involved. The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in protecting the form against misuse).
6. Third-Party Services
- Mailjet (Mailjet SAS, France) — manages our mailing list and sends our emails (welcome email, newsletter, and the internal notification about new subscriptions). Your email address is stored with Mailjet as a data processor on our behalf, within the EU. See Mailjet's Privacy Policy.
We do not sell, rent, or share your personal data with any other third parties.
7. Cookies and Tracking
The newsletter form uses a single technically necessary session cookie, which protects the form against cross-site request forgery. It is deleted when you close your browser. We do not use analytics, advertising cookies, tracking pixels, or any third-party tracking.
8. Data Retention
- Server log files — deleted automatically (rotated log files after 10 days)
- Spam-protection data — hashed IP addresses are deleted after at most 24 hours
- Newsletter — your email address is kept until you unsubscribe or ask us to delete it
9. Security
All pages are delivered over an encrypted connection (HTTPS/TLS). The newsletter form is additionally protected by CSRF tokens, spam protection, and rate limiting.
10. Your Rights
Under applicable data protection law (including the GDPR), you have the right to:
- Access — request a copy of the personal data we hold about you (Art. 15 GDPR)
- Rectification — request correction of inaccurate data (Art. 16 GDPR)
- Erasure — request deletion of your data (Art. 17 GDPR)
- Restriction — request that we restrict processing (Art. 18 GDPR)
- Portability — receive your data in a portable format (Art. 20 GDPR)
- Object — object to processing based on legitimate interest (Art. 21 GDPR)
- Withdraw consent — unsubscribe at any time using the link in any email we send
- Complain — lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
To exercise any of these rights, contact us using the details below.
11. Changes to This Policy
We may update this privacy policy when our website or the law changes. The "last updated" date at the top of this page shows the current version.
12. Contact
For any privacy-related questions or requests, please contact:
RANOVIS UG (haftungsbeschränkt), Am Kriegerdenkmal 9 b, 90427 Nürnberg, Germany
Email: info@ranovis.com · Phone: +49 911 2525 7599