Data Controller

The data controller responsible for your personal data is:

Personal Data We Collect

We collect personal data in the following situations:

Newsletter Subscription

When you subscribe to our newsletter, we collect:

• Email address
• Name (if provided voluntarily)
• Subscription date and time
• IP address at time of subscription
• Confirmation timestamp (double opt-in confirmation)

Contact Form

When you contact us via our contact form, we collect:

• Name
• Email address
• Message content
• IP address (for security and spam prevention)

Website Usage Data

When you visit our website, we may collect certain usage data through analytics tools, such as:

• Pages visited
• Time spent on site
• Device and browser information
• Anonymized IP data (via Google Analytics 4, subject to consent)

We do not collect sensitive personal data.

Legal Basis for Processing

We process your personal data under the following legal bases:

Consent (Article 6(1)(a) GDPR):

• Newsletter subscription
• Analytics and cookies (where applicable)

Legitimate Interest (Article 6(1)(f) GDPR):

• Responding to inquiries submitted via contact form
• Ensuring website security and preventing abuse

You may withdraw your consent at any time.

Purpose of Data Processing

We use your personal data for the following purposes:

• To send newsletters containing updates, news, and promotional content
• To manage subscription preferences
• To respond to inquiries
• To ensure website security and prevent spam
• To analyze website performance (with consent)
• To comply with legal obligations

Data Recipients and Third-Party Service Providers

Your personal data may be processed by the following third parties acting as data processors:

We do not sell, rent, or share your personal data for third-party marketing purposes.

International Data Transfers

Some third-party providers (such as Google) may process data outside the European Economic Area (EEA).

Where international transfers occur, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• GDPR-compliant data processing agreements

Data Retention Period

We do not retain personal data longer than necessary.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies.

Google Analytics 4 is only activated after you provide explicit consent through our cookie banner.

Our cookie consent system:

• Blocks analytics tracking before consent
• Provides Accept All, Reject All, and Customize options
• Does not use pre-ticked boxes
• Stores proof of consent
• Allows withdrawal of consent at any time

You may manage or withdraw cookie preferences at any time via our cookie settings.

For questions regarding cookies or consent withdrawal, contact: hi@kindlibre.com

Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent at any time

To exercise these rights, contact: hi@kindlibre.com

Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL encryption
• Secure hosting infrastructure
• Access controls
• Spam protection mechanisms

Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you may lodge a complaint with:

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The updated version will always include a revised effective date.