Privacy Policy

1. Controller

Enanza Ventures GmbH

Martin-Luther-Str. 14, D-20459 Hamburg

Managing Director: Stephan Akrong

Email: info@mein-kreativbuch.de

2. Categories of Data Processed

We process, in particular, account data (for example name and email address), usage data, communication data, and content provided for the creation of personalized stories – such as details about the child (e.g. name, age, character traits) and optionally uploaded reference photos used to create character illustrations.

We may also process technical log data (for example IP address, timestamps, browser details) and, depending on your cookie consent, information stored via cookies and local storage. If you order a printed book, we additionally process your shipping and payment data (see Sections 7 and 8).

3. Purposes of Processing

Data is processed to provide and improve our service, communicate with users, ensure IT security, and comply with legal obligations.

4. Legal Bases

Processing is based on Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest).

Where required, processing is based on your consent under Art. 6(1)(a) GDPR, in particular for analytics and marketing cookies (see Sections 9-11).

5. Hosting (Hetzner)

Our platform is hosted on infrastructure provided by Hetzner Online GmbH. Server log data is processed to ensure availability, stability, and security.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operations).

6. AI Providers for Text and Image Generation

To create your personalized stories and illustrations, we use AI services from external providers.

For text generation (story, dialogue), the story details you provide (e.g. the child's name, age, character traits) are sent — depending on configuration — to OpenAI (OpenAI, L.L.C., USA), Google (Google Ireland Limited, Gemini models), Anthropic (Anthropic PBC, USA), or Z.ai (Zhipu AI Inc., China).

For image generation, story details and — if you uploaded one — a reference photo are sent exclusively to OpenAI or Google (Gemini models). Z.ai and Anthropic never receive uploaded photos.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract to create your personalized book).

These providers process the submitted content under their respective current API terms of use to deliver the requested service, and to our knowledge do not use it by default to train their models.

Because OpenAI, Anthropic, and Z.ai are based, or operate servers, outside the EU/EEA, processing in third countries — including the United States and China — cannot be ruled out. For the US-based providers we rely on EU Standard Contractual Clauses as an appropriate safeguard. For Z.ai (China), please note that the European Commission has not issued an adequacy decision for China; only text content you enter — never photos — is sent there.

7. Payment Processing (Stripe)

We use the payment provider Stripe (Stripe Payments Europe, Limited, Ireland; and, as part of payment processing, Stripe, Inc., USA) to process payments.

When you make a purchase, your payment details (e.g. card data) are processed directly by Stripe; we do not receive or store complete payment card data ourselves. We additionally share your email address and the order amount to process and reconcile payment.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

For more information, see Stripe's privacy policy: stripe.com/privacy.

8. Printing and Shipping (Gelato)

For printing and shipping physical books, we work with Gelato (Gelato Group AS, Norway), which forwards orders to local print partners worldwide.

We share your name, shipping address, email address, and — if provided — phone number, along with the book content required for printing (text and illustrations).

Legal basis: Art. 6(1)(b) GDPR (contract performance).

Because printing may take place at a partner outside the EU/EEA, transfers to third countries cannot be ruled out. In such cases we rely on appropriate safeguards, in particular EU Standard Contractual Clauses.

9. Analytics – PostHog

We use PostHog to analyze how our service is used and to improve the user experience — only with your prior consent via our cookie banner.

10. Reach Measurement and Advertising

With your consent (marketing cookies), we use the following services to measure the performance of our advertising campaigns:

These services are only loaded after you give explicit consent (see Section 11) and remain fully inactive until then.

Legal basis: Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG (consent).

11. Cookies and Consent

We use cookies and similar technologies (e.g. local storage) in three categories:

On your first visit to our website, you are asked for consent via a cookie banner. You can change or withdraw your choice at any time via the "Cookie settings" link in the site footer.

12. Recipients and Processors

We use external service providers acting as processors, or as independent controllers, to operate our services — in particular for hosting (Hetzner, Section 5), AI-assisted text and image generation (Section 6), payment processing (Stripe, Section 7), printing and shipping (Gelato, Section 8), and product analytics and advertising measurement (PostHog, Google, Meta, Sections 9–10).

Where required, data processing agreements pursuant to Art. 28 GDPR are concluded with these providers.

13. Storage Period

We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations.

14. International Data Transfers

For certain services we use (in particular OpenAI, Anthropic, Z.ai, Stripe, Meta, and in some cases Google), processing in third countries — especially the United States and, in the case of Z.ai, China — cannot be ruled out.

In such cases, we rely on appropriate safeguards, in particular EU Standard Contractual Clauses under Art. 46 GDPR. No adequacy decision currently exists for China; this applies only to text content used for story generation (see Section 6), not to your uploaded photos.

15. Processing of Children's Data

Our service is intended for adults creating a personalized book for their child. Details about the child (e.g. name, age, character traits, and optionally a photo) are provided solely by you as the parent or legal guardian, and are processed solely to create the book you ordered (see Section 6).

This data is not used for advertising purposes and is not shared with third parties beyond the processors named in this policy. You may request deletion of this data at any time using the contact details in Section 18.

16. Email Communications

We send transactional emails (e.g. order confirmation, book completion, shipping status) to fulfill our contract with you (Art. 6(1)(b) GDPR).

We also send reminder emails if your book is finished but has not yet been ordered as a printed copy. The legal basis is our legitimate interest in informing you about completing your order (Art. 6(1)(f) GDPR, or Section 7(3) of the German UWG where an existing customer relationship applies). You can object to these reminders at any time via the unsubscribe link in the email or the contact details in Section 18.

17. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, subject to applicable legal requirements.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

18. Contact for Privacy Questions

If you have any questions regarding the processing of your personal data, contact us at info@mein-kreativbuch.de.

Version: 2026-07-09. This privacy policy is updated regularly.