Skip to content

Privacy policy

This English version is provided for convenience. The German version is legally binding.

In short

This website sets no cookies, uses no tracking and stores nothing on your device. Fonts are served from our own server, not from Google. We only process personal data when you write to us, sign up for a notification or order through our links.

Controller

Luca Richter

Hilal Journal

Oberdorf 8

73650 Winterbach

Email: info@hilaljournal.de

We are not required to appoint a data protection officer, as the legal requirements for this do not apply to us.

Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. With every visit, Cloudflare processes technically necessary data: IP address, date and time, the page requested, the page visited before (referrer), and browser and operating system. This is necessary to deliver the website and protect it from attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). Only if Cloudflare suspects an attack, a short security check may appear before the page loads. Cloudflare then sets a technically necessary cookie (cf_clearance) that stores the passed check.

Cloudflare processes this data on our behalf. The data processing addendum is part of Cloudflare's terms of service. Cloudflare is certified under the EU-US Data Privacy Framework. Transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on EU standard contractual clauses.

No cookies, no tracking, local fonts

We use no cookies and no analytics or advertising services. Your browser's storage is not used either. The fonts are hosted on our own server; loading the page does not connect to Google or any other provider. The exceptions are the availability check with Shopify on the product pages (see “Orders via Shopify and Amazon”) and Cloudflare's security check when an attack is suspected (see “Hosting and server log files”).

Contact form and email

When you write to us via the contact form or by email, we process your name, email address and message in order to reply. If your message concerns an order or a question before buying, the legal basis is Art. 6 (1) (b) GDPR; otherwise it is our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

Messages from the contact form are sent to our website at Cloudflare (see above), stored in a database in the EU and forwarded to our mailbox by email. Our mailbox is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, with whom we have concluded a data processing agreement.

We delete your enquiry once it has been dealt with, at the latest after six months, unless statutory retention obligations apply.

Notification about the year-round journal and the gift

On our “About us” page and on our gift page you can leave your email address. We only use it to send you the announced gift or to let you know when our year-round journal is released. The legal basis is your consent (Art. 6 (1) (a) GDPR). Sign-ups are stored at Cloudflare (see above) in a database in the EU.

You can withdraw your consent at any time with effect for the future, for example by emailing info@hilaljournal.de. We will then delete your address. We also delete the addresses once the purpose has been fulfilled.

Orders via Shopify and Amazon

When you click “Get the paperback” or “Get the hardcover”, you go to our shop on Shopify (Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland). You only enter order, delivery and payment details there. The privacy policy of our shop applies to the order.

“Also available on Amazon” takes you to Amazon, where Amazon's privacy policy applies.

On the product pages, your browser asks Shopify whether each edition is in stock in our shop. If it is sold out, the buy button takes you to Amazon instead. For this check, Shopify technically receives your IP address and details about your browser. No cookies are set and no other data about you is transmitted. The legal basis is our legitimate interest in only showing you ways to buy that actually work (Art. 6 (1) (f) GDPR).

Partner links and campaign parameters

Some links to our website contain a code, for example “?ref=name” or “utm_source=instagram”. It shows which channel or sales partner led you to us. The code is only part of the page address and is not stored on your device. When you click a buy button, it is passed on to Shopify.

If you place an order, Shopify stores the code with your order. We use it to calculate commissions for our sales partners correctly and to see which channels work (Art. 6 (1) (f) GDPR). Sales partners only receive the number and value of the orders they referred, no data about you.

Links to Instagram and TikTok

We link to our profiles but do not embed any content from these platforms. No data is transferred until you click a link. The privacy policies of Instagram (Meta) or TikTok then apply.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7 (3) GDPR). Just write to us at info@hilaljournal.de.

Right to object: where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

Last updated

October 2026