Privacy

1. Who is responsible

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Email: tatendamudavanhu26@gmail.com

If you have any questions about this privacy policy or your data, just write to this address.

2. The short version

• We do not use analytics, tracking pixels, advertising or social media plugins.
• We do not set cookies for visitors, so there is no cookie banner.
• Fonts are hosted on our own server. Your browser does not connect to Google or other font services.
• We only receive personal data when you send it to us yourself, for example through one of our forms or by email.
• We do not sell your data or pass it on for advertising.

3. Hosting and server logs

This website is hosted by easyname GmbH, Canettistraße 5/10, 1100 Vienna, Austria. All website data (files, database and the email inbox for this domain) is stored on servers in the EU. easyname is engaged by our technical service provider (see section 10) as a sub-processor, on the basis of a data processing agreement (Art. 28 GDPR).

When you visit the website, your browser automatically sends technical information to the server. This includes your IP address, date and time of the request, the page requested, the referring page, the amount of data transferred and your browser and operating system. This is technically necessary to deliver the website and to keep it stable and secure.

Where access logs are enabled, IP addresses are anonymised after 24 hours and deleted completely after three months at the latest.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

4. Book orders and artwork enquiries

You can order the book or ask about an original artwork using the forms on this website. There is no shop and no payment on the website itself. The forms simply pass your message on to Tatenda, who replies by email.

What we process

The information you enter in the form, for example your name, email address, country or shipping address, the number of copies, the artwork you are interested in and your message, as well as the date and time you sent it.

How it works

The forms are built with the WordPress plugin Fluent Forms, which runs on our own server. No data is sent to the plugin provider. Your submission is emailed to the inbox tatenda@theyarealldead.com, which is hosted by easyname (see above), and also stored in the website database, so that no request gets lost.

Purpose and legal basis

We use your data to answer your request, to send you an offer and, if you decide to buy, to process and ship your order. Legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract and performance of a contract). For general questions that are not about a purchase, the legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in answering messages.

Transfer outside the EU

Tatenda lives in the United Arab Emirates and reads and answers your messages from there. This means your data is accessed from a country for which there is no EU adequacy decision, so the level of data protection there may be lower than in the EU. This transfer is necessary to answer your request and to carry out the order you asked for (Art. 49 (1) (b) and (c) GDPR).

How long we keep it

Entries in the website database are deleted once your request has been dealt with, at the latest after six months. Emails are kept as long as needed for the conversation. If you buy something, we keep the data required for business and tax records for as long as the law requires.

5. Contact by email

If you write to us by email, we process your email address, your message and any other details you share, in order to answer you. Legal basis is Art. 6 (1) (b) GDPR if your message is about a purchase, otherwise Art. 6 (1) (f) GDPR. Our contact address is a Gmail account, so your email is also processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, under Google's own privacy policy. Google may process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. What is said above about the transfer to the United Arab Emirates applies here as well. We delete your messages when they are no longer needed, unless legal retention periods apply.

6. Security and backups

Wordfence

To protect this website against attacks, we use the security plugin Wordfence by Defiant, Inc., USA. Wordfence checks requests to the website, including IP addresses, the pages requested and browser information, to detect and block malicious traffic and login attempts. This data is mainly processed on our own server and deleted automatically after a short time. To keep its threat data up to date, Wordfence may send IP addresses of suspicious requests to Defiant in the USA. Such transfers are based on the EU Standard Contractual Clauses. Legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in a secure website.

Backups

So the website can be restored after a technical failure, regular backups are created with the plugin UpdraftPlus and stored on encrypted local storage of our technical service provider in Germany (see section 10). A backup contains the website database and may therefore include form entries. Backups are only accessible to our technical service provider and are replaced on a rolling basis. Legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in protection against data loss.

7. Cookies and fonts

This website does not set cookies for visitors and does not use similar technologies to store or read information on your device. Cookies are only used when an administrator logs into the WordPress backend. These are technically necessary and do not concern visitors (§ 25 (2) TDDDG).

All fonts are hosted on our own server. When you visit the website, no connection is made to Google Fonts or any other font service.

8. Links to other sites

This website contains simple links to Instagram, LinkedIn and, where available, to online shops selling the book, such as Amazon. These are plain links, not embedded plugins. No data is sent to these services just by visiting our website. Only when you click a link do you leave our site, and the privacy policy of the respective provider applies:

• Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland
• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
• Amazon: the respective Amazon marketplace you are taken to

9. Fan fiction platform

The fan fiction platform at fanfic.theyarealldead.com is a separate web application with its own accounts. When you use it, its own privacy policy applies, which you can find on the platform itself.

10. Technical service provider

This website is built and maintained by KindlySolutions, Olpe, Germany. For maintenance, updates and support, KindlySolutions may have access to the website and its database. This is done on our behalf and on the basis of a data processing agreement (Art. 28 GDPR). KindlySolutions uses the hosting providers named in this policy as sub-processors.

11. Your rights

You have the right at any time to:

• get information about the data we hold about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR)
• restrict the processing of your data (Art. 18 GDPR)
• receive your data in a common, machine readable format (Art. 20 GDPR)
• object to processing based on our legitimate interests (Art. 21 GDPR)
• withdraw any consent you have given, with effect for the future (Art. 7 (3) GDPR)

To use any of these rights, just send an email to tatendamudavanhu26@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work (Art. 77 GDPR).

12. Changes

We may update this privacy policy when the website or the legal situation changes. The current version is always available on this page.