Zum Inhalt springen

Kostenloser Versand in Deutschland Weltweite Lieferung Bücher in mehreren Sprachen

Privacy Policy

Last updated: 1 August 2026

This privacy policy informs you about the processing of personal data when you use the Open Sky Press website and online shop at openskypress.com (including the staging site new.openskypress.com). We process personal data in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and applicable German data protection law.

1. Controller

Open Sky Press GbR
Kleinhülsen 16
40721 Hilden
Germany
Email: office@openskypress.com
Phone / WhatsApp: +49 152 22473253

Further company details are available in the Imprint.

We have not appointed a data protection officer. For privacy requests, please contact us at the email address above.

2. What data we process

Depending on how you use the site, we may process:

  • Shop & orders: name, billing/shipping address, email, phone (if provided), order contents, payment status, invoices, delivery information
  • Customer account: login credentials (password stored hashed), order history, saved addresses
  • Contact: name, email, message content when you write to us (email / contact form / WhatsApp)
  • Private customer mailing list: name (optional), email, language preference (EN / DE)
  • Technical data: IP address, date/time, browser/device information, referrer, and server log data required to operate and secure the website
  • Cookies / similar storage: session and cart cookies required for the shop to function

3. Purposes and legal bases

  • Contract performance (Art. 6(1)(b) GDPR) — processing orders, payments, delivery, customer accounts, and related communication
  • Legal obligations (Art. 6(1)(c) GDPR) — e.g. commercial and tax retention duties
  • Legitimate interests (Art. 6(1)(f) GDPR) — secure operation of the website, abuse prevention, improving shop reliability; where used, limited technical logs
  • Consent (Art. 6(1)(a) GDPR) — private customer / newsletter signup and similar optional marketing communications; you may withdraw consent at any time

4. Online shop (WooCommerce)

Our shop is operated with WooCommerce on WordPress. When you place an order or create an account, the data required for the purchase contract is stored in our shop system and used to fulfil and document the order.

5. Payments

Payments are processed by the payment service providers offered at checkout (for example PayPal and card / wallet methods shown there). Payment data is typically entered directly with the provider; we receive payment confirmation and limited transaction references needed for bookkeeping and order fulfilment. Please also consult the privacy information of the payment provider you choose.

6. Shipping

For physical goods we share the data required for delivery with our shipping partners (currently DHL / related carriers as used for dispatch). Only data necessary for delivery is transmitted.

7. Private customer mailing list (Mailchimp via Open Sky Events)

If you sign up as an OSP Private Customer, we process your email address, optional name, and language choice (EN or DE) to send information about publications and related offers.

Signup is handled through our community systems at openskyevents.org and stored in the corresponding Mailchimp audience (“OSP private customers EN” or “OSP private customers DE”). Mailchimp (Intuit) is a US service provider; transfers to the USA may occur on the basis of appropriate safeguards (e.g. Standard Contractual Clauses) and Mailchimp’s data processing terms.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in an email or by contacting us.

8. Communication tools

If you contact us by email or WhatsApp, we process the content of the conversation and your contact details to respond. WhatsApp is a Meta service; Meta’s own privacy terms apply to the WhatsApp application on your device.

9. Hosting

This website is hosted by a professional hosting provider (currently Hostinger). The host processes server log data and may process personal data as a processor on our behalf to the extent necessary to provide hosting, security, and availability.

10. Fonts and embedded media

We load web fonts from Google Fonts. When your browser requests these fonts, your IP address may be transmitted to Google. Embedded media (for example Vimeo on selected pages) may set their own cookies or process technical data when you play the content; those providers act under their own privacy policies.

11. Cookies

We use cookies and similar technologies that are necessary for the website and shop to work (for example session, login, and shopping cart). These are used on the basis of Art. 6(1)(b) and/or (f) GDPR.

We do not currently use advertising cookies or third-party analytics cookies on this site. If that changes, we will update this policy and, where required, ask for consent.

You can delete or block cookies in your browser settings. Blocking necessary cookies may limit shop functionality.

12. Retention

We retain personal data only as long as needed for the purposes above. Contract and invoice data are typically retained for the statutory retention periods under commercial and tax law (often up to 10 years). Account data remains until you delete the account or ask us to erase it, unless retention is legally required. Mailing-list data is kept until you unsubscribe or we delete the list entry. Server logs are kept only for a limited period needed for security and operations.

13. Recipients and transfers

Recipients may include: hosting provider, shop/software processors, payment providers, shipping providers, email/mailing providers (including Mailchimp / Open Sky Events infrastructure), and professional advisers where necessary. Some providers may process data outside the EU/EEA; in that case we rely on an adequacy decision and/or appropriate safeguards such as Standard Contractual Clauses.

14. Your rights

Under the GDPR you may have the right to:

  • access your data (Art. 15)
  • rectification (Art. 16)
  • erasure (Art. 17)
  • restriction of processing (Art. 18)
  • data portability (Art. 20)
  • object to processing based on legitimate interests (Art. 21)
  • withdraw consent at any time (Art. 7(3)), without affecting prior lawful processing

To exercise these rights, contact office@openskypress.com. You also have the right to lodge a complaint with a supervisory authority — in particular in the EU member state of your residence, workplace, or place of the alleged infringement. For North Rhine-Westphalia (Germany), the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

15. No obligation to provide data

You are not legally obliged to provide personal data. However, without certain data we cannot conclude or fulfil a purchase contract, create an account, or send the private customer mailing list.

16. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.

17. Changes

We may update this privacy policy when our processing or legal requirements change. The current version is always published on this page.

Datenschutz — Kurzfassung (Deutsch)

Verantwortlicher: Open Sky Press GbR, Kleinhülsen 16, 40721 Hilden, Deutschland, office@openskypress.com.

Wir verarbeiten personenbezogene Daten zur Durchführung von Bestellungen und Kundenkonten (Vertrag, Art. 6 Abs. 1 lit. b DSGVO), zur Erfüllung gesetzlicher Pflichten (Art. 6 Abs. 1 lit. c), zum sicheren Betrieb der Website (berechtigtes Interesse, Art. 6 Abs. 1 lit. f) sowie — bei Anmeldung zur Privatkundenliste — auf Basis Ihrer Einwilligung (Art. 6 Abs. 1 lit. a). Zahlungen erfolgen über die im Checkout angezeigten Zahlungsdienstleister; Versand über DHL/Versandpartner; die Privatkundenliste über Open Sky Events / Mailchimp. Technisch notwendige Cookies (Session/Warenkorb) werden verwendet. Es werden derzeit keine Werbe- oder Analyse-Cookies eingesetzt.

Sie haben die Rechte auf Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerspruch sowie Widerruf erteilter Einwilligungen. Beschwerden können Sie an die zuständige Aufsichtsbehörde richten (in NRW: LDI NRW).

Die ausführliche Fassung finden Sie oben in englischer Sprache auf dieser Seite.