1. Data controller
Verlag NorseStory, proprietor Alexander Ellmer, Auguststraße 77, 10117 Berlin, Germany
Telephone: +49 1520 4143235
Email: info@norse-story.de
2. Hosting by dogado
This website is hosted by dogado GmbH. When you visit the website, the web server processes access data required for technical operation. According to dogado, server logs may include the page visited, access time, volume of data transferred, referrer, browser, operating system and IP address. dogado anonymises IP addresses after 24 hours and deletes log files within seven days. Processing is necessary for the secure and reliable operation of the website and is based on Article 6(1)(f) GDPR. Where dogado processes personal data on our behalf, this is governed by a data processing agreement under Article 28 GDPR.
3. Contact, contact form and event enquiry form
When you contact us by email, telephone or a form on our website, we process the information you provide solely to handle your enquiry and communicate with you. For the general contact form, this may include your name, email address, subject and message.
For market and event enquiries submitted through the events page, we process the event and contact information you provide. This may include the event name, date, location and type, expected visitor numbers, available stall space, electricity supply, contact person, email address, telephone number, event website and any additional information you choose to provide.
Form submissions are sent by email to info@norse-story.de No separate permanent storage of enquiries in a website database is intended. To protect the event enquiry form against automated misuse, we use a simple security question, a hidden form field (honeypot), session-based CSRF protection and a short-term server-side submission limit. These measures serve exclusively to secure the form and prevent automated or repeated submissions.
The legal basis for processing enquiries is Article 6(1)(f) GDPR. Our legitimate interests are responding to and managing enquiries and protecting our forms against misuse. If your enquiry concerns entering into or performing a contract, Article 6(1)(b) GDPR also applies. We delete the data once the enquiry has been fully resolved, unless statutory retention obligations or legitimate reasons for further storage apply.
4. Comments in the Knowledge Archive
You can leave comments on articles in the Knowledge Archive. When you use this feature, we process the name and email address you provide, the content of your comment, the related article and technical timestamps. Your comment is initially stored for editorial review and published only after approval.
Only the name you provide, your comment and its publication date are displayed publicly. Your email address is not made public.
We also use your email address to notify you when your comment is approved or when Alexander replies to your published comment for the first time. These notifications relate solely to the comment function and do not constitute newsletter or marketing registration.
To protect the comment function against automated misuse and excessive submissions in a short period, a pseudonymised technical verification value is generated from the IP address and limited browser information. The underlying IP address is not stored in the comment record. This value is used solely for short-term abuse prevention and removed from the comment record within 24 hours.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interests are operating an editorially moderated comment function, preventing misuse and notifying commenters of approval and personal replies.
Approved comments and the moderation data required for them are generally stored for as long as the comment remains published in the Knowledge Archive or the data is needed for moderation and related communication. When a comment is deleted, the associated personal comment data is also deleted unless statutory retention obligations apply.
We use dogado GmbH to host the website and technically send notification emails. Personal data required for these services may be processed by the hosting or email service provider. When an email is sent, the data necessary for delivery is also transmitted to the recipient’s email provider.
If you wish to request deletion of a comment you wrote or the associated personal data, you can contact info@norse-story.de.
5. Newsletter
To register for our newsletter, we process your email address on our own web server. Registration uses a double opt-in procedure: after signing up, you receive an email with a confirmation link. You are added to the active mailing list only after confirming. We record registration status and the times of registration, confirmation and, where applicable, unsubscribing, so that consent can be documented. Processing is based on your consent under Article 6(1)(a) GDPR.
You may withdraw your consent at any time with future effect using the unsubscribe link in each newsletter email. After unsubscribing, your address is no longer used for active newsletter delivery. Records needed to demonstrate previously granted consent may be retained in accordance with statutory limitation periods and evidentiary obligations. We use dogado GmbH to host newsletter data and technically send newsletters. dogado may process the personal data necessary to provide these services. Data required for delivery is also transmitted to the email provider of each recipient.
6. Customer reviews from kundennote.com
On certain pages we embed a review widget from kundennote.com. When a page containing this widget is opened, the required external script is loaded directly from kundennote.com. This establishes a connection to the provider’s servers and may transmit your IP address, browser information and access data. The widget displays customer reviews and provides transparent information about experiences with our publishing house. The legal basis is Article 6(1)(f) GDPR.
7. Google Fonts
To display fonts consistently, this website loads Google Fonts from Google servers. Your browser connects to Google, which may technically transmit your IP address to Google. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This integration serves the consistent presentation of our website. The legal basis is Article 6(1)(f) GDPR. In future, locally hosted font files may replace this integration to minimise data transfers.
8. External links and social networks
NorseStory contains links to external services, including TikTok, Pinterest, YouTube and WhatsApp. These are ordinary links: merely visiting our pages does not load content from those platforms through the links. Only when you follow a link do you leave our website and become subject to the privacy policy of the respective provider.
9. Cookies and local storage
We do not use analytics, marketing or profiling cookies on this website. Consent for the Kundennote widget is not stored locally. We currently do not use any other tracking or marketing services requiring consent.
10. Minvar – NorseStory knowledge curator
When you use Minvar, we first ask for a name Minvar may use to address you during the conversation. In our internal conversation archive, we store only this voluntarily provided name, your questions and Minvar’s answers. We do not store IP addresses, browser data, device information, location data or other tracking data in the conversation archive.
Conversation logs are used exclusively to review Minvar’s live responses editorially, identify knowledge gaps and improve its quality. They are automatically deleted no later than 30 days after the last conversation entry. The legal basis for this time-limited processing is Article 6(1)(f) GDPR; our legitimate interest is quality control and further development of our knowledge curator.
For questions that cannot be fully answered using local NorseStory knowledge resources, the content of your question and the conversation context needed to generate an answer may be transmitted to the AI service OpenAI that we use. Please do not share confidential or sensitive personal information with Minvar.
11. NorseStory App
The NorseStory App makes content from our Knowledge Archive available on mobile devices. It can be used without a user account. For technically necessary requests, the app connects to our public read-only API at norsestory.de. The web server may process access data necessary to deliver the requested content. The information in the section on hosting by dogado applies accordingly.
For local use of the app, settings and usage information may be stored on your device, particularly saved content and recently viewed items. This information is stored locally on the device and is not combined by us into a personal user profile.
When you purchase or restore paid access, a subscription or a one-time lifetime purchase in the app, payment is processed by the relevant app-store provider, particularly Google Play or the Apple App Store. The platform operators independently process the data required for purchases, billing, management and restoration in accordance with their own privacy policies. NorseStory receives only the information required to activate and verify access; NorseStory does not process complete payment details such as credit card information.
The same principles apply to voluntary supporter and patron access options. These differ in price, not in the content or features unlocked.
The app also includes links to external services, such as our WhatsApp channel, and to privacy information and terms of use on norsestory.de. The relevant external page is opened only when you follow such a link.
12. Your rights
Subject to the applicable legal requirements, you have the right to access your personal data, correct inaccurate data, request deletion or restriction of processing, data portability and object to processing based on Article 6(1)(f) GDPR. You may withdraw any consent you have given at any time with future effect.
13. Right to lodge a complaint
You have the right to lodge a complaint about the processing of your personal data with a data protection supervisory authority. This may be the authority responsible for your usual place of residence, your workplace or the location of the alleged infringement.
14. Updates
We update this privacy policy when the website, services used or legal requirements change.