Privacy Policy

The protection of your personal data is important to us. We process your data confidentially and in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

In principle, you can visit our website without actively providing any personal data. We collect data when you place an order with us, contact us or use features of the website. We process it only for the purposes described here and pass it on only if this is necessary to perform a contract, is required by law, or you have given your consent.

Systola Publishing
Owner: Roman Kuznetsov
Am Güterbahnhof 8a
21035 Hamburg
Germany

Email: Show email
Phone: +49 40 853 700 59

When you access the website, the following data is automatically collected and stored in server log files: IP address, date and time of the request, browser type and version, operating system, referrer URL and hostname of the accessing device.

We process this data to provide the website in a technically error-free and secure manner and to detect misuse and security incidents. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website. The data is deleted after 30 days. It is not merged with other data sources.

When you buy a book or other product in our shop, we process the data required to handle the order: first and last name, billing and delivery address, email address, telephone number (only if required), products ordered, order value, and payment and transaction data.

We use this data to process your order, handle the payment, organise shipping and provide customer service. The legal basis is Art. 6(1)(b) GDPR. Due to statutory retention and bookkeeping obligations, we additionally process the data under Art. 6(1)(c) GDPR.

To perform the contract, we pass data on to the following recipients:

• the payment service provider Stripe (see Section 5),
• the shipping companies, Deutsche Post / DHL, etc., which receive your name and delivery address for delivery,
• our tax advisor and accounting service provider, insofar as this is necessary for bookkeeping.

Providing the order data is required to conclude the contract. Without it, we cannot fulfil your order.

We process payments in the shop via Stripe. For customers in the European Economic Area, the responsible entity is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe acts as an independent controller and also processes data for its own purposes, such as fraud prevention, and processes payment data in accordance with its own privacy policy.

The following data is transmitted to Stripe during payment: name, email address, billing details, payment data (depending on the payment method), payment amount, order reference and technical data required for secure payment processing. We do not receive your full payment data (e.g. card number).

The legal basis is Art. 6(1)(b) GDPR and, where legally required, additionally (c). Data may be transferred to third countries, in particular the USA. This takes place on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

Further information: https://stripe.com/privacy.

Our books may also be available from third-party providers such as Amazon. When you follow a link, you leave our website. From that point on, the respective retailer processes your data under its own responsibility in accordance with its own privacy policy. We have no influence over this.

If you contact us via a form or by email, we process your name, your email address, your message and any other data you provide voluntarily in order to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete your enquiry once it has been finally dealt with and no statutory retention obligation prevents this. Your data is not passed on to third parties unless this is necessary to handle the enquiry or required by law.

Consumers can withdraw from their contract during the withdrawal period using the "Withdraw from contract" button, which is available on every page of our shop. In doing so, we process your name, your email address, details identifying the contract (e.g. order number and order date), the content of your withdrawal declaration, and the date and time of receipt.

We use this data to process your withdrawal, to confirm receipt to you by email without delay, and to unwind the contract. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB), as well as Art. 6(1)(b) GDPR. Refunds are processed via Stripe (see Section 5).

We store this data for as long as it is required to process the withdrawal and to comply with statutory retention obligations (see Section 12).

We use cookies and similar technologies.

Strictly necessary cookies store, for example, your shopping cart, enable the ordering and payment process and maintain security functions. The legal basis is § 25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR.

We set non-essential cookies, for example for audience measurement, only with your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. A consent banner appears on your first visit.

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics records, among other things, pages visited, interactions, duration and number of sessions, approximate location, browser and device information, time of visit and referrer, as well as technical identifiers from cookies. We use the analyses to improve the website and our offering. The IP address is shortened before it is stored.

Google Analytics is only activated after you have given your consent. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. If you do not consent or if you withdraw your consent, no analytics data is collected.

Data may be transferred to the USA in the process. Google is certified under the EU-US Data Privacy Framework. In addition, a data processing agreement is in place with Google.

Further information: https://policies.google.com/privacy.

For security reasons, this website uses SSL/TLS encryption, in particular for orders, payments and contact enquiries. You can recognise an encrypted connection by "https://" in the address bar and the padlock symbol in your browser.

We store personal data only for as long as is necessary for the respective purpose. We retain order, invoice and payment data in accordance with commercial and tax retention obligations (§ 257 HGB, § 147 AO), for 6, 8 or 10 years depending on the document. After that, the data is deleted. We delete contact enquiries as soon as they have been dealt with, provided no statutory obligation prevents this.

You have the following rights:

• access to the data we store about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdrawal of consent with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

To exercise your rights, an email to our email address (see below) is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority, for example at your place of residence or at the place of the alleged infringement. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(The Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg
Germany
https://datenschutz-hamburg.de

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

Our website contains links to third-party websites, e.g. online retailers or social media platforms. We have no influence over their data processing. Please refer to the privacy policies of the respective providers.

We reserve the right to update this privacy policy as needed, for example due to changes to our online shop, our payment methods, the features of the website, the third-party services used or applicable legal requirements.

The current version of this privacy policy is available on this website at any time.

Last updated: 8 October 2026.