Last updated: 30 June 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Roland A. Schwarz (August Mond)
Bismarckstraße 52, 70197 Stuttgart, Germany
E-mail: august.a.mond@gmail.com · Phone: +49 173 2076894
This policy explains which personal data we process when you visit and use augustmond.com, for which purposes and on which legal basis. Personal data is any information relating to an identified or identifiable natural person.
Our website is hosted by Webflow, Inc. (USA). When you access the pages, the provider processes technically necessary access data in server log files, in particular IP address, date and time of access, page requested, volume of data transferred, referrer URL, and browser and device type. This serves the secure and stable operation of the website. The legal basis is our legitimate interest in a functional and secure service (Art. 6(1)(f) GDPR). For transfers to the USA see section 12.
For fast, device-optimised delivery of images we use Cloudinary (USA). The IP address of the requesting device is processed for this purpose. The legal basis is our legitimate interest in performant presentation (Art. 6(1)(f) GDPR).
We use exclusively strictly necessary cookies or local storage required to operate the shopping cart and checkout (see section 8). These are exempt from consent under § 25(2) no. 2 TDDDG; the legal basis is Art. 6(1)(f) GDPR. We do not use consent-requiring cookies or tracking services, which is why no cookie banner is required. You can delete cookies at any time via your browser settings.
For statistical analysis of site usage we use GoatCounter, a privacy-friendly, cookieless analytics solution that we self-host on a server in Germany (Hetzner, stats.augustmond.com). No cookies are set and no cross-device profiles are created; the IP address is not stored permanently. We do not use Google Analytics or comparable third-party trackers. The legal basis is our legitimate interest in privacy-preserving statistics (Art. 6(1)(f) GDPR).
When you use the contact form, we process the data you provide (e.g. name, e-mail address, message) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (responding to enquiries). To protect against automated abuse (spam) we use a purely technical method executed locally in the browser (a "honeypot"); no data is transmitted to third parties and no cookies are set.
For the sale of prints, editions and books we use the following service providers:
The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR) and compliance with tax and commercial retention obligations (Art. 6(1)(c) GDPR). For third-country transfers see section 12.
If you contact us by e-mail or communicate with us regarding an order, we process your details to handle the matter. We use Google Workspace / Gmail (Google Ireland Ltd. / Google LLC, USA) for e-mail. The legal basis is Art. 6(1)(b) or (f) GDPR.
Your data is shared only where necessary to perform the contract (see section 8), with the named service providers (as processors or independent controllers), or where we are legally required to do so. We do not sell personal data.
We process personal data only for as long as necessary for the stated purposes. Order data is retained within the statutory retention periods (up to ten years under commercial and tax law); contact enquiries are deleted once they have been finally dealt with and no retention obligations apply.
Some of the services used process data outside the EU/EEA. For the USA we rely – where the respective provider is certified under the EU-U.S. Data Privacy Framework – on the corresponding adequacy decision of the EU Commission, otherwise on Standard Contractual Clauses (Art. 46 GDPR). Adequacy decisions of the EU Commission exist for Canada (Snipcart) and the United Kingdom (Prodigi). Reach measurement (section 6) takes place on a server in Germany; no third-country transfer occurs in that respect.
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent at any time with effect for the future. A message to the contact details in section 1 is sufficient to exercise these rights.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Our offer is not directed at children. Persons under the age of 16 should not transmit personal data to us without the consent of a parent or guardian.
We will update this privacy policy whenever changes to our processing or the legal situation make this necessary. The version published on this page applies.
