Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is the operator of this website named in the legal notice. You can reach them by email at contact@nikolaibrein.com.

2. The essentials

This website sets no cookies, uses no analytics or tracking services and loads no content from other providers. Fonts, images, audio and video are hosted on our own server. Personal data is processed only when you visit the website, when you write an email and when you sign up for the newsletter.

3. Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with All-Inkl. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in providing the website securely and reliably.

4. Visiting the website and log files without IP addresses

To display the website to you, the server has to process technical information from your browser, above all your IP address. This happens only for as long as it takes to deliver the page.

In this website’s log files, the IP address is stored in fully anonymised form: every address becomes 0.0.0.0. The log files also contain the date and time, the page or file requested, the previously visited page (referrer), browser and operating system, the status code and the amount of data transferred. None of this can be linked to you as a person.

The log files are used to find errors, to keep the website secure and, occasionally, to evaluate in aggregated form how often individual pages are visited. They are deleted automatically after 30 days.

Independently of this, our hosting provider may briefly process technically necessary data such as the IP address in order to deliver the website and fend off attacks. In each case, the legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in providing the website securely and reliably.

5. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise it by “https://” and the padlock in your browser’s address bar.

6. Contact by email

If you write an email, we process your email address, your name if you provide it, and the content of your message in order to respond to your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR. The legitimate interest lies in answering enquiries. Emails are stored on All-Inkl’s mail server. We delete them once your request has been dealt with, unless statutory retention obligations apply.

7. Newsletter and waitlist

Content: The newsletter announces the publication of NOUS and other books by Nikolai Brein, at most once a month.

Data: Only your email address is required. In addition, we store the language of your sign-up and your interest, for example NOUS, depending on where you signed up. To prove your consent, the time of your sign-up and the time and IP address of your confirmation are logged.

Double opt-in: After signing up, you receive an email with a link. Only once you click it are you added to the list. If you do not confirm, you will not be added.

How sign-up works: The form sends your details to a script on our own server, which passes them directly to our mailing service. Your browser does not load any script from the mailing service, and no cookies are set. To prevent abuse, the script stores an irreversible hash of your IP address for no longer than one hour and then deletes it automatically. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in preventing automated mass sign-ups.

Mailing service: Emails are sent via Brevo; the provider is Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. According to Brevo, the data is stored in the European Union. Where Brevo uses sub-processors outside the EU, it does so, according to Brevo, on the basis of the European Commission’s standard contractual clauses and, for some providers in the United States, also the EU-US Data Privacy Framework. Opens and clicks are only counted anonymously and in aggregate. They are not linked to you as a person.

Legal basis and withdrawal: The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw it at any time via the unsubscribe link in every email or by email to contact@nikolaibrein.com. The lawfulness of processing before the withdrawal remains unaffected.

Retention: Your data is stored until you unsubscribe. After that, your email address is deleted or, where necessary, kept on a blocklist so that you receive no further emails, on the basis of Art. 6(1)(f) GDPR. Records proving your consent are kept for as long as we need them to defend against possible claims.

8. Audio, video and fonts

Audio samples, the teaser, images and fonts are hosted on our own server. No data is transmitted to other providers during playback. Audio and video only load when you click “Play”. This creates only the log data without IP addresses described in section 4.

9. Links to other websites

This website contains links to Amazon and Spotify. As long as you do not click a link, no data is transmitted to these providers. If you click one, the privacy policy of the respective provider applies.

10. No cookies, no tracking

This website neither stores information on your device nor reads any from it, whether through cookies or by other means. There is no tracking, no advertising and no profiling. That is why there is no cookie banner.

11. Your rights

You have the right of access to your stored data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

For any of these requests, an email to contact@nikolaibrein.com is enough.

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. No automated decisions

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

13. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: November 2026