Privacy

Controller

Linus Ammer, Alberich-Verlag, Schönrain 10, 84152 Mengkofen, Germany. Enquiries about your data: contact@western-origins.com.

Visiting the site

The web server records each request in a log: the requesting IP address, the time, the page requested, the referrer and the browser identification. This is necessary to operate and secure the service (Art. 6 (1)(f) GDPR). Logs are deleted after 14 days at the latest and are not combined with anything else.

No cookie is set by this site, no consent banner is therefore needed, and no advertising or analytics network is contacted. Fonts and images are served from this domain, not from a content delivery network.

Pre-ordering the book

Payment is processed by Stripe Payments Europe, Ltd., 25/28 North Wall Quay, Dublin 1, Ireland. When you press the pre-order button you are taken to a page hosted by Stripe. Your card details are entered there and are never transmitted to, or stored on, this site.

To fulfil the contract (Art. 6 (1)(b) GDPR) we receive from Stripe your name, email address, delivery address, the amount paid and a payment reference. This is stored for as long as the order is open and afterwards for the statutory retention period for commercial records (Art. 6 (1)(c) GDPR, generally ten years under German tax and commercial law).

Stripe may transfer data outside the EU. Stripe relies on the European Commission’s standard contractual clauses for those transfers. Stripe’s own notice is at stripe.com/privacy.

After payment we send you a confirmation of the contract by email, because § 312f BGB requires it. It repeats the terms, the withdrawal instruction and the model withdrawal form, so that you hold them in a form that cannot be edited afterwards.

If you order the e-book, your name and order number are written into the file itself before it is sent — visibly in the imprint and invisibly in the file. That is done to deter redistribution and to trace a copy found in circulation back to the order it came from, which is our legitimate interest under Art. 6 (1)(f) GDPR. The file is not locked to a device and no licence is checked when you open it; nothing about your reading is transmitted anywhere. The record linking the marking to your order is kept for the statutory retention period for commercial records.

The publication reminder

If you ask to be reminded, we first send one message asking you to confirm that the address is yours. Nothing joins the list until you click that link, and if you never do, the request expires after seven days. This is the double opt-in procedure, and it exists because anyone can type someone else’s address into a form.

Once confirmed, your address is stored for that single purpose (Art. 6 (1)(a) GDPR). You receive exactly one message, when the book is published, and the address is deleted afterwards. You can withdraw consent at any time through the unsubscribe link in any message we send, or by writing to the address above; withdrawal does not affect the lawfulness of processing before it.

Alongside the address we keep the date and time of the request and of the confirmation, and the IP address each came from. That record exists to prove the consent is real, which is what Art. 7 (1) GDPR asks of us. It is kept as long as the address is on the list and for three years afterwards, the period within which a complaint about unsolicited mail could still be raised.

Email

Mail is sent and received through our hosting provider’s mail servers, netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, on servers in Germany. Messages sent to us, and the record that a message was sent to you, are kept for as long as the matter they concern is open, and afterwards for the statutory retention period where the message forms part of a commercial record.

Your rights

• Access to the data held about you, and a copy of it (Art. 15 GDPR).
• Correction of anything inaccurate (Art. 16 GDPR).
• Erasure, where no retention obligation stands in the way (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).
• Objection to processing based on legitimate interests (Art. 21 GDPR).
• Complaint to a supervisory authority. You may address the authority where you live, work, or where the alleged infringement took place.

Nothing automated

There is no profiling and no automated decision-making. Western Origins is a book, and this is a page that sells it.

Last updated: 3 August 2026