This Privacy Policy describes the actual, deliberately lean technical operation of somatic-code.com, including Google Analytics and YouTube, which are activated only after consent.
1. Controller
Am Dachsbau 59
13503 Berlin
Germany
Telephone: +49 30 39821419
Email: info@somatic-code.com
Website: somatic-code.com
2. Hosting and server log files
This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany.
Whenever the website is accessed, the web server processes connection data required for technical operation. This may include the IP address, date and time, requested host and path, referrer URL, browser and operating system, transferred data volume and response status.
The processing is necessary to provide the website securely and reliably, diagnose errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of this online service.
Mittwald maintains current access and error logs and states that archived logs are anonymised. Log data is retained only for as long as required under the applicable hosting configuration for operation, security and error analysis and is then deleted or anonymised, unless a statutory obligation requires longer retention.
3. WordPress and language selection
The website runs on WordPress. Content, settings and technical operating data are processed in the hosting system’s database. The public website currently has no user accounts, comments, shop functionality or web forms.
We use Polylang to provide German and English versions. The technically necessary first-party cookie pll_language stores the selected language for approximately one year. The legal basis is Article 6(1)(f) GDPR; where required, access to the user’s device is based on section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Our legitimate interest is consistent language delivery.
WordPress may store the purely technical browser capability value wpEmojiSettingsSupports in session storage. It is used for correct emoji rendering and is removed at the end of the browser session.
4. Privacy preferences with Real Cookie Banner
We use Real Cookie Banner to present and document privacy choices transparently. Google Analytics and embedded YouTube content are configured as separately selectable optional services. Without your consent, the associated Google tags, external scripts and media are not loaded.
A randomly generated pseudonymous consent ID, the choice made, the applicable configuration revision, time, language or context, page URL and technical display information such as viewport size are processed. Storage of the full IP address in consent documentation is disabled; a shortened and hashed IP reference may be processed to prevent misuse.
The first-party cookie real_cookie_banner-v:3_blog:1_path:…-lang:de|en stores the consent ID, revision reference and choice for up to 365 days. The local-storage key real_cookie_banner-consent-queue-lock may additionally coordinate technical transmission of a choice. A test cookie is used only briefly to check browser cookie support.
Processing is carried out to meet legal documentation and transparency requirements and for technically necessary operation under Article 6(1)(c) and (f) GDPR. Where device access is strictly necessary, it is based on section 25(2)(2) TDDDG.
5. Workbook delivery through bunny.net
When you use the workbook button, we use services provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (“bunny.net”), to deliver the requested PDF securely.
Technically necessary connection data may be processed, including the IP address, time, requested URL or file, browser and user-agent information, referrer, response status and other technical request or security data. Access is protected by a short-lived signed link.
The processing serves to provide the workbook at your request, ensure reliable global delivery and protect against abusive or automated access. The legal basis is Article 6(1)(b) GDPR where delivery is made at your request and otherwise Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable delivery of our content.
We do not maintain personal download statistics. Our own Bunny database stores only the aggregate number of successful workbook authorisations and the time at which that counter was updated. It does not store IP addresses, user agents, fingerprints, user identifiers or individual download histories.
bunny.net operates a globally distributed infrastructure. Processing outside the European Economic Area therefore cannot be ruled out entirely. Where data is transferred to a third country, this is done subject to the applicable data protection requirements and appropriate safeguards.
6. Contact
If you contact us by email or telephone, we process the information you provide and technically generated communication data in order to answer your enquiry and conduct further communication.
Depending on the subject of the enquiry, processing is based on Article 6(1)(b) GDPR for steps taken prior to entering into a contract or Article 6(1)(f) GDPR. Our legitimate interest is the appropriate handling of enquiries. Where statutory retention obligations apply, the legal basis is Article 6(1)(c) GDPR.
Data is deleted once the enquiry has been concluded and no statutory retention obligation or other legitimate reason requires further storage.
7. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the dedicated “somatic-code.com” property with measurement ID G-0NWPCN2Y10. The technical integration uses Google’s tag delivery service at googletagmanager.com; Google Tag Manager as a separate container product is not used.
Data processed may include online identifiers and cookie values, device and browser information, language, approximate location information, referrer and pages viewed, as well as interactions such as a successfully initiated workbook download. The short-lived signed workbook URL is not transmitted to Google Analytics. Google technically processes the IP address; according to Google, IP addresses are not logged or stored in Google Analytics.
Processing and access to your device take place only with your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. We use Basic Consent Mode: before consent, no Google tag is loaded and no cookieless ping is sent to Google. analytics_storage is granted only for Google Analytics; ad_storage, ad_user_data and ad_personalization remain permanently denied. Google Signals and personalised advertising signals are disabled.
Google Analytics may set the first-party cookies _ga and _ga_* on somatic-code.com. They are documented in our privacy settings with a maximum lifetime of 24 months. User and event data in the Analytics property is retained for 2 months. You can withdraw consent at any time with effect for the future through the privacy settings; the listed first-party Analytics cookies are then deleted and further Analytics calls are blocked on new page views.
Google may also process data in third countries, particularly the United States. Google LLC is certified under the EU-US Data Privacy Framework; depending on the processing, EU Standard Contractual Clauses may also be used. Further information is available in Google’s privacy information.
8. YouTube videos
Where YouTube videos are embedded on this website, we use the YouTube video service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A Real Cookie Banner content blocker prevents retrieval of the player, thumbnails and connections to YouTube, YouTube No-Cookie and Google domains before your consent. A local placeholder is displayed.
Only after you enable YouTube can a connection to Google be established. The data processed may include the IP address, device and browser information, referrer, the page viewed, player settings and interactions with the video. If you are signed in to Google or YouTube, Google may associate the use with your account. Cookies and similar storage may be used depending on the service state; the YouTube cookies listed in the privacy settings currently have lifetimes of up to 13 months.
Processing and access to your device take place only with your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can enable YouTube independently of Google Analytics and withdraw your choice at any time with effect for the future.
Google may also process data in third countries, particularly the United States. The safeguards described above for Google apply accordingly. Further information is available in Google’s Privacy Policy.
9. Recipients and processing on our behalf
Personal data is received only by hosting, infrastructure and communications providers whose involvement is required for the purposes described above. These include Mittwald for website operation, bunny.net when you initiate a workbook request, and Google only after you consent to Google Analytics or YouTube respectively. Service providers acting as processors are contractually engaged in accordance with Article 28 GDPR.
Any other disclosure takes place only where permitted or required by law or where you have given consent.
10. Your rights
Subject to the statutory requirements, you have in particular the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR).
You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, email info@somatic-code.com.
11. Right to lodge a complaint
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
12. Data security and updates
The website is transmitted over encrypted HTTPS connections. We use appropriate technical and organisational measures and update this Privacy Policy if the services actually used or the legal requirements change.
Last updated: September 2026
This English version is provided for convenience. The German version remains authoritative.
