Slanted Publishers UG (haftungsbeschränkt) Nördliche Uferstraße 4–6, 76189 Karlsruhe, Germany Represented by its managing directors Lars Harmsen and Julia Kahl Phone: +49 721 85148268, e-mail: [email protected]

We are not required to appoint a data protection officer. For all questions about data protection, please contact us at the address above.

Legal bases. We process personal data on the following legal bases of the General Data Protection Regulation (GDPR):

• Art. 6(1)(a) GDPR – your consent (e.g. newsletter, analytics, embedded videos and maps);
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures (e.g. orders, subscriptions, customer account, partner contracts);
• Art. 6(1)(c) GDPR – legal obligations (e.g. tax and commercial retention obligations);
• Art. 6(1)(f) GDPR – our legitimate interests (e.g. secure operation of the website, answering enquiries, editorial coverage).

Where information is stored on or read from your device (e.g. cookies), this is based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) with your consent, or on Section 25(2) TDDDG where it is strictly necessary to provide the service you have requested.

Retention. We delete personal data as soon as it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply. Invoices and accounting records are retained for up to 10 years under German commercial and tax law (Section 257 HGB, Section 147 AO); business correspondence for 6 years.

Recipients. We only pass on data where this is necessary for the purposes described below, in particular to service providers who process data on our behalf under a data processing agreement (Art. 28 GDPR), to payment providers and carriers, and to partners who ship your order.

You have the right to:

• access your personal data (Art. 15 GDPR);
• rectification (Art. 16 GDPR);
• erasure (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• withdraw your consent at any time with effect for the future (Art. 7(3) GDPR); processing carried out before the withdrawal remains lawful.

Right to object (Art. 21 GDPR). Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. You may object to the use of your data for direct marketing at any time without giving reasons.

To exercise your rights, an informal e-mail to us is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Hosting. Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in Germany. The hosting provider processes all data transmitted when you visit the website on our behalf under a data processing agreement (Art. 28 GDPR). Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable provision of our website.

Server log files. When you visit our website, your browser automatically transmits information that is stored in server log files: browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address. We use this data to ensure the technical operation and security of the website. It is not combined with other data sources and is deleted after [7] days, unless it is needed to investigate a security incident. Legal basis: Art. 6(1)(f) GDPR.

Content delivery and security (Cloudflare). We use services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to deliver our website securely and quickly and to protect e-mail addresses from spam bots. In doing so, your IP address and technical data of your request are processed by Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.

Encryption. Our website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser’s address bar.

Cookies and consent. We use cookies and similar technologies. Cookies that are strictly necessary to operate the website and the Shop (e.g. shopping cart, login, saving your consent settings) are set on the basis of Section 25(2) TDDDG and Art. 6(1)(b) or (f) GDPR. All other cookies and technologies, in particular for analytics, marketing and embedded third-party content, are used only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

We obtain your consent via the WordPress plugin Borlabs Cookie (Borlabs GmbH, Hamburg, Germany). The plugin runs on our own server; no data is transmitted to Borlabs. It stores your choice and a randomly generated ID in the cookie “borlabs-cookie” and logs your consent (ID, time, version and selected services) in our database as proof of consent. The cookie and the log are stored for 1 year. Legal basis: Section 25(2) TDDDG and Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to demonstrate consent).

Strictly necessary cookies we use:

• borlabs-cookie – stores your consent settings; 1 year.
• WooCommerce (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_, woocommerce_recently_viewed, store_notice) – shopping cart, customer session and store notices; session to 2 days.
• PHPSESSID – secure session management for the Shop; session.

VG Wort. Our texts contain a counting pixel of Verwertungsgesellschaft WORT (VG WORT), Untere Weidenstraße 5, 81543 Munich, Germany. It measures how often texts are accessed, so that authors and publishers receive the statutory remuneration for copies. IP addresses are only processed in anonymised form, and a session cookie (“srp”) is set. Privacy policy: https://www.vgwort.de/hilfsseiten/datenschutz.html

Customer account. You can create a customer account in the Shop (WooCommerce). We process the data you enter (name, e-mail address, password, addresses) to manage your account, orders and subscriptions. Legal basis: Art. 6(1)(b) GDPR. You can delete your account at any time; data we are required to retain by law will be kept until the retention period expires.

Orders. When you place an order, we process your name, billing and delivery address, e-mail address, phone number, order details and payment information in order to conclude and perform the contract, including invoicing and customer support. Legal basis: Art. 6(1)(b) GDPR; retention of invoices and accounting records: Art. 6(1)(c) GDPR.

Fulfilment. Orders are shipped by our fulfilment service provider Stober Solutions GmbH, Siemensstraße 2, 76344 Eggenstein-Leopoldshafen, Germany, which processes your name, delivery address and order contents on our behalf under a data processing agreement (Art. 28 GDPR).

Partners. Some products in our Shop are shipped directly by our partners (publishers, design studios, manufacturers). For these products, we pass on your name, delivery address and order contents to the partner concerned, solely to ship your order and to handle returns. The partners process this data on our behalf under a data processing agreement (Art. 28 GDPR). Partners may be located outside the EU; in this case, the transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Carriers. To deliver your order, we or our fulfilment service provider pass on your name, delivery address and, where required for delivery notification, your e-mail address or phone number to the carrier. For shipments outside the EU, data required for customs clearance is also passed on to the carrier and customs authorities. Legal basis: Art. 6(1)(b) GDPR.

Payment. We offer payment by credit card and PayPal. The payment providers process your payment data as independent controllers:

• Credit card: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Privacy policy: https://stripe.com/privacy
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: https://www.paypal.com/privacy

The payment providers may carry out identity and credit checks and fraud prevention measures. Legal basis: Art. 6(1)(b) GDPR.

Subscriptions. For subscriptions to Slanted Magazine, we process your contact and delivery data, the subscription type, payment data and the issues delivered for as long as the subscription runs, and afterwards in accordance with statutory retention obligations. For gift subscriptions, we also process the recipient’s name and delivery address provided by you. Legal basis: Art. 6(1)(b) GDPR.

Student subscriptions. To verify eligibility for the student subscription, we process the proof of enrolment you send us (e.g. student ID or certificate of enrolment). We use it only for this check and delete it [within 30 days] after verification; we only keep a note that valid proof was received and until when it is valid. Legal basis: Art. 6(1)(b) GDPR.

Digital content. For the purchase of digital content, we process your order data and the data required to provide the download (download link, number and time of downloads). Legal basis: Art. 6(1)(b) GDPR.

Withdrawal and cancellation. If you use the “Withdraw from contract” function, we process the information you enter (name, details identifying the contract, e-mail address, for cancellations also the type of cancellation and the desired date) as well as the date and time of receipt, in order to process your declaration and send you a confirmation of receipt. Legal basis: Art. 6(1)(c) GDPR in conjunction with Sections 312k and 356a BGB.

Workshops and summer schools. For registrations, we process your name, contact details, payment data and any other information you choose to give us for the event. We pass on your name to the instructors of the event. Photographs and video recordings of participants are made only with consent (Art. 6(1)(a) GDPR). Legal basis otherwise: Art. 6(1)(b) GDPR.

If you sell products via slanted.de, we process the data of your company and your contact persons (name, address, e-mail address, phone number, VAT ID, LUCID registration number, bank details), your product data and your sales and payout data, in order to conclude and perform the partner contract. Legal basis: Art. 6(1)(b) and (c) GDPR. Data on contact persons of companies is processed on the basis of Art. 6(1)(f) GDPR.

If you submit news, projects or other content, we process your name, contact details and the content submitted, including the names of the authors and persons named in it, in order to review the submission and, if selected, to publish it on slanted.de, in our newsletter, on our social media channels and in our print products. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (editorial coverage). Content that is not published is deleted after 12 months.

For giveaways on Instagram and other social media channels, we process the data of participants (username, comments and other interactions) and of winners (name, shipping address and, if applicable, e-mail address) solely to conduct the giveaway and send the prize. We only publish a winner’s username with their consent. Participation does not subscribe you to our newsletter. The data is deleted once the giveaway has been completed, unless statutory retention obligations apply. Legal basis: Art. 6(1)(b) GDPR; for publication of the username: Art. 6(1)(a) GDPR. The terms of participation are set out in Part C of our Terms and Conditions.

If you contact us by e-mail, phone or via the contact form, we process the data you provide (e.g. name, e-mail address, your message) to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

If you subscribe to our newsletter, we use your e-mail address and, if provided, your name to send you news about Slanted, our publications, products and events. Subscription uses the double opt-in procedure: you will receive an e-mail asking you to confirm your subscription. We log your subscription, confirmation and IP address to be able to prove your consent. Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every newsletter.

Existing customers. If you have bought goods from us and provided your e-mail address, we may send you information about similar products of our own by e-mail (Section 7(3) German Act against Unfair Competition, UWG). You can object to this at any time, e.g. via the link in each e-mail, without incurring costs other than the basic transmission rates. Legal basis: Art. 6(1)(f) GDPR.

We send our newsletter via Mailchimp, a service of The Rocket Science Group LLC, 405 N Angier Ave NE, Atlanta, GA 30308, USA, which processes the data on our behalf under a data processing agreement. Mailchimp is certified under the EU-US Data Privacy Framework. Mailchimp records whether a newsletter has been opened and which links were clicked, so that we can evaluate our newsletters; this analysis is covered by your consent to receive the newsletter. We delete your data from the newsletter list when you unsubscribe.

Google Analytics 4. With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how visitors use our website (e.g. pages viewed, time spent, device and browser information, approximate location). Google Analytics 4 does not store IP addresses. The data may also be processed by Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Google. We load Google Analytics via Google Tag Manager (also provided by Google Ireland Limited), which only manages the integration of the tags and is likewise used only with your consent. Data is deleted after [14] months. Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR.

Advertising on our website (Slanted Ads). With your consent, we display advertisements on slanted.de via our own ad server, which runs on our servers at Hetzner (see Section 4, Hosting). A cookie (“OAID”) assigns a random ID to your browser, so that we can control how often an ad is shown and count impressions and clicks. No data is passed on to advertisers in a form that identifies you. The cookie is stored until you withdraw your consent via the cookie settings or delete it in your browser. Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR.

We embed videos and maps from third parties. They are only loaded after you have given your consent via our consent tool or by clicking on the placeholder. When loaded, the provider receives at least your IP address and information about the page you are visiting, and may set cookies. If you are logged in to your account with the provider, they can link your visit to your account. Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR.

• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube’s privacy-enhanced mode. Privacy policy: https://policies.google.com/privacy
• Vimeo: Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. Vimeo is certified under the EU-US Data Privacy Framework. Privacy policy: https://vimeo.com/privacy
• Google Maps: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://policies.google.com/privacy
• Instagram and Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy: https://www.facebook.com/privacy/policy
• X (formerly Twitter): Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Privacy policy: https://x.com/privacy

We maintain profiles on Instagram, Facebook, LinkedIn, X, YouTube, Vimeo and Behance. When you visit these profiles, the respective provider processes your data under its own privacy policy. We only receive the data you share with us publicly or send us directly (e.g. comments, messages) and anonymised statistics.

For our Instagram and Facebook pages, we are jointly responsible with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, for the processing of statistics (“Insights”) (Art. 26 GDPR). Meta has assumed primary responsibility for this processing and for fulfilling data subject rights; the essential content of the agreement is available at https://www.facebook.com/legal/terms/page_controller_addendum. You can also assert your rights against us. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is communicating with our audience.

Some of the service providers mentioned above are located outside the EU/EEA, in particular in the USA, or partners who ship your order may be located there. We only transfer data to such countries if an adequacy decision of the European Commission exists (for the USA: for companies certified under the EU-US Data Privacy Framework) or if appropriate safeguards are in place, in particular the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). In addition, a transfer may be necessary for the performance of a contract with you (Art. 49(1)(b) GDPR), e.g. when we ship an order to a country outside the EU.

We update this Privacy Policy when our services or the legal situation change. The current version is always available on our website.

As of: 13 October 2026