1. Who is responsible?
Books Magic Club is a reading community based in Stuttgart, Germany.
Data controller:
Hind Samiri
Postal contact:
Gebelsbergstraße 50
70199 Stuttgart
Germany
Contact email: hello@booksmagicclub.com
2. What information do we collect?
When you visit our website, technical information may be processed to deliver, maintain and protect the website.
This may include:
- IP address
- Browser and device information
- Requested pages and files
- Date and time of access
- Technical security information
When you voluntarily submit a book review, we collect:
- Your chosen reviewer name
- The book you are reviewing
- Your review title and text
- The language of your review
- The submission date
- The review's moderation status
You can browse our website without submitting a review.
Please do not include sensitive personal information in your reviewer name or review text.
3. Book reviews and community contributions
Our community Library displays book reviews. Reviews are checked before publication. Published reviews may include the chosen reviewer name, title, text, language and publication date.
We process contributions for review, moderation and publication, and to respond to requests about them. Where Article 6(1)(f) GDPR applies, our legitimate interests are providing a voluntary reader community and protecting it against misuse. We consider the interests and reasonable expectations of contributors before publication.
If public review submission becomes available, we will explain the publication terms at the point of submission. Providing a review is voluntary and is not necessary to browse the site.
To object to publication or request correction or removal, email hello@booksmagicclub.com.
4. Website hosting and database
Our website is hosted using Cloudflare Pages. Book and review information is stored in Cloudflare D1. The service provider is Cloudflare, Inc.
To operate and protect the website, Cloudflare may process technical connection information, including IP addresses, requested files, timestamps and security-related data. We rely on our legitimate interest in secure, reliable website operation under Article 6(1)(f) GDPR, subject to the applicable balancing assessment.
Our D1 database is configured with the European Union jurisdiction restriction. Cloudflare identifies the database region as Eastern Europe; read replication is disabled. The jurisdiction restriction concerns where the D1 database runs and stores its data, not necessarily where other Cloudflare services process requests.
Website delivery, security functions and other Cloudflare services may involve processing outside the European Economic Area. Cloudflare's Data Processing Addendum includes contractual safeguards for restricted international transfers, including EU Standard Contractual Clauses where applicable. Other transfer mechanisms, including adequacy arrangements, may apply depending on the recipient and processing activity.
Further information is available in Cloudflare's Privacy Policy and Cloudflare's Data Processing Addendum .
5. Spam protection
The book-review form integrates Cloudflare Turnstile, a security service designed to distinguish legitimate visitors from automated submissions. When the form is opened, your browser may connect to Cloudflare and transmit technical browser and device information needed for verification. When submissions are enabled, a verification token is checked by our server before a submission is accepted.
The purpose is to protect the review function against spam and misuse. We rely on Article 6(1)(f) GDPR for necessary security processing, based on our legitimate interest in securing the website and community submissions. The use of any device-storage or access technology is separately subject to applicable requirements of section 25 TDDDG.
Further information: Cloudflare Privacy Policy.
6. How long do we keep reviews?
Reviews awaiting moderation are checked by our daily automated cleanup process and deleted once they have reached 90 days after submission.
Rejected reviews are checked by our daily automated cleanup process and deleted when they have reached 30 days after rejection.
Approved reviews remain published while they are part of the Books Magic Club community Library, unless removed earlier.
You can request removal of your review or exercise your data protection rights by contacting hello@booksmagicclub.com .
7. Cookies and analytics
We currently do not use Google Analytics, advertising pixels or Cloudflare Web Analytics. During our checks of the public homepage and Library, we did not observe cookies set under booksmagicclub.com. This does not rule out necessary security technologies or processing by third-party services, such as Cloudflare Turnstile, when those functions are used.
If we introduce analytics or other non-essential tracking in the future, we will provide the required information and obtain consent where applicable.
8. Contact by email
If you contact us by email, we process your email address, the content of your message and any information you choose to share to respond to your enquiry.
Messages to hello@booksmagicclub.com are forwarded using Cloudflare Email Routing to a Gmail inbox operated by Google.
Where a message concerns event participation or another pre-contractual enquiry, processing may be necessary under Article 6(1)(b) GDPR. For general enquiries, the legal basis is Article 6(1)(f) GDPR, our legitimate interest in responding to messages.
We retain correspondence only as long as necessary for the enquiry and any applicable legal retention obligations.
9. Event registration
We use Luma, an external event registration platform, to organize Books Magic Club events.
When you register for an event, we can access your name, email address, registration date and attendance status.
We process this information to manage registrations, organize attendance and communicate important event information. The legal basis is Article 6(1)(b) GDPR, insofar as processing is necessary for participation in the event.
We retain attendee information only for as long as necessary to organize and follow up on the event, unless legal obligations require longer retention.
Registration is handled by Luma. For information about Luma's data processing, please see its Privacy Policy .
10. Social media
Books Magic Club maintains an Instagram account to connect with readers and share community activities.
Our website may contain links to this account.
Clicking such a link takes you to Instagram, where the platform's own data protection practices apply.
For information about Instagram's processing of personal data, please refer to its privacy policy.
11. Your data protection rights
Under the GDPR, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of personal data
- Request restriction of processing
- Object to certain processing
- Request data portability, where applicable
- Withdraw consent where processing is based on consent
These rights are subject to the conditions of applicable data protection law.
For privacy-related requests, contact: hello@booksmagicclub.com .
You also have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority in Baden-Württemberg is:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.
www.baden-wuerttemberg.datenschutz.de
12. Changes to this Privacy Policy
We may update this Privacy Policy when our website, services or data-processing practices change.
Last updated: 27 October 2026