Privacy Policy

1. Controller

Enanza Ventures GmbH

Martin-Luther-Str. 14, D-20459 Hamburg

Managing Director: Stephan Akrong

2. Categories of Data Processed

We process, in particular, account data (for example name and email address), usage data, communication data, and content provided for the creation of personalized stories.

We may also process technical log data (for example IP address, timestamps, browser details) and information stored via cookies and local storage.

3. Purposes of Processing

Data is processed to provide and improve our service, communicate with users, ensure IT security, and comply with legal obligations.

4. Legal Bases

Processing is based on Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest).

Where required, processing is based on your consent under Art. 6(1)(a) GDPR, in particular for analytics and tracking technologies.

5. Hosting (Hetzner)

Our platform is hosted on infrastructure provided by Hetzner Online GmbH. Server log data is processed to ensure availability, stability, and security.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operations).

6. Analytics – PostHog

We use PostHog to analyze how our service is used and to improve the user experience.

Provider: PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA

Server location: EU (Frankfurt) – data is processed on European servers (eu.i.posthog.com).

Proxy: PostHog requests are routed through our own domain (for example /_scripts/p/eu.i.posthog.com). Your browser does not connect directly to PostHog servers.

Data processed: Page views and page leaves, custom events (e.g. registration, book generation), device information (browser, OS, screen resolution), visited URLs and referrer.

Persistence: PostHog runs exclusively in memory (memory mode). No cookies are set, and no data is written to LocalStorage or SessionStorage. Events are therefore session-scoped and not linked to a device after the browser is closed.

Identification of logged-in users: When you log in to your account, your internal user ID (a non-descriptive number) is sent to PostHog to associate events with your account. This is based on the contractual relationship (Art. 6(1)(b) GDPR). The association is reset on logout.

Not collected: Automatic click or form capture (autocapture disabled); no session recordings.

Purpose: Understanding usage behavior and data-driven product improvement.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) for anonymous sessions; Art. 6(1)(b) GDPR (contract performance) after login.

Storage period: No persistent storage in the browser. Event data at PostHog per their retention policies.

International transfer: PostHog Inc. is based in the USA; however, data is processed on EU servers. EU Standard Contractual Clauses (SCCs) under Art. 46 GDPR are in place.

Data Processing Agreement: Concluded pursuant to Art. 28 GDPR.

PostHog Privacy Policy: posthog.com/privacy

7. Cookies and Similar Technologies

We use cookies and local storage exclusively for technically necessary functions (e.g. your login session and language preferences). No cookies or persistent browser storage are used for analytics purposes (see Section 6).

8. Recipients and Processors

We use external service providers acting as processors to operate our services, in particular for hosting (Hetzner) and product analytics (PostHog, see Section 6).

Where required, data processing agreements are concluded with these providers.

9. Storage Period

We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations.

10. International Data Transfers

For certain services, processing in third countries (especially the United States) cannot be ruled out. In such cases, we rely on appropriate safeguards, in particular EU Standard Contractual Clauses.

11. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, subject to applicable legal requirements.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

12. Contact for Privacy Questions

If you have any questions regarding the processing of your personal data, contact us at info@kreativ-buch.de.

Version: 2026-03-24. This privacy policy is updated regularly.