Legal Information
Privacy Notice
Information pursuant to Articles 12–14 GDPR · Last updated: 30 September 2026
This language version provides information about the same processing activities as the German version. In the event of differences in interpretation, the German version shall prevail, without restricting your rights under the GDPR.
Controller
meybrands UG (haftungsbeschränkt) Lietzenburger Str. 97 10719 Berlin Germany
Represented by the Managing Director: Markus M. Mey
Email: datenschutz@meybrands.de
No data protection officer has currently been appointed. For data protection enquiries, please email datenschutz@meybrands.de.
Scope and language versions
This notice applies to markusmmey.com, including the German, English, Portuguese, Italian and Spanish language versions. Selecting a language does not alter the processing activities described.
The translations are intended to make the information clearly and comprehensibly accessible to the relevant language groups. In the event of discrepancies, the German version shall prevail, without restricting statutory data protection rights.
Provision of the website, hosting and server logs
When you access the website, technically necessary connection data are processed. This may include the IP address, date and time, requested address, referrer, browser and operating-system information, amount of data transferred and HTTP status. Processing is necessary to deliver content, defend against attacks and ensure stable operation. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest lies in security, functionality and error analysis.
The website is provided as a Manus Space by Butterfly Effect Pte. Ltd., 109 North Bridge Road, #06-W112, Singapore 179097. Butterfly Effect processes end-user data in this respect as a processor on the documented instructions of the Space Owner. The contractual basis is Manus's Data Processing Addendum (DPA).
According to the current subprocessor list, the infrastructure may include, in particular, cloud and network services in the USA. Where data are transferred to third countries, the provider relies under its DPA in particular on the EU Standard Contractual Clauses or another permissible transfer mechanism.
Without analytics consent, we do not conduct audience measurement. Operational security and error logs of the hosting provider are processed independently in accordance with its requirements and only for as long as necessary for operation, security or legal obligations.
When you use the full-text search, the search term entered is transmitted to the web server and processed there solely to compare it with the article texts. The application does not store search terms in a database or combine them with a user profile. Please do not enter personal or particularly sensitive information. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to make the published content easy to find. This does not affect the hosting provider’s technical server logs described above.
Consent controls and optional audience measurement
The website blocks optional analytics and marketing connections by default through a server-side Content Security Policy. Without your consent, Manus Analytics, Plausible and Amplitude in particular are not loaded; all content and basic functions remain available.
If you select “Allow analytics” or activate the corresponding option in the settings, the Manus hosting platform may load scripts from manus-analytics.com, plausible.io and files.manuscdn.com and connect to Manus and Amplitude endpoints, among others. This may involve processing the page view, the full URL visited, referrer, language, screen data, browser and device information, time and the IP address as technically necessary connection data. On a website about foot and shoe fetishism, the URL visited may itself reveal interests relating to a person’s sex life. Processing therefore takes place only on the basis of express consent under Article 6(1)(a) and, where applicable, Article 9(2)(a) GDPR and Section 25(1) TDDDG.
Your choice is stored in the browser under “mmey_privacy_consent_v3” and additionally in the necessary first-party cookie “mmey_analytics_consent”. The cookie value is only “granted-v3” or “denied-v3”, contains no usage data and expires after no more than 180 days. The local choice also contains a timestamp and version number. The legal basis for this necessary storage of your choice is Section 25(2)(2) TDDDG; the associated processing serves to implement your privacy setting under Article 6(1)(c) and (f) GDPR.
You can change or withdraw your decision at any time via “Privacy settings” in the footer. Withdrawal applies for the future. If you reject or withdraw consent, the website removes known local analytics identifiers and no longer loads the optional services on the subsequent page view.
The currently available Manus documentation and support response do not provide sufficiently product-specific information on all retention periods, recipients and processing steps of the automatically provided Project Analytics. Audience measurement therefore remains technically blocked without consent. We will review and update this notice when reliable product-specific information becomes available.
Contact form and email communication
If you use the contact form, we process your name, email address, selected subject, message, language version and the time at which the form is submitted. Mandatory fields are marked in the form. The data are transmitted in encrypted form to the web server and, after successful configuration, sent server-side by SMTP to book@markusmmey.com. The form content is not stored in the website database.
To protect against misuse, an invisible honeypot field, a plausibility check of the completion time, server-side input limits and a rate limit are used. For the rate limit, the connection address is read only transiently, immediately pseudonymised using a secret server key and retained solely as an HMAC verification value in working memory. The verification value is deleted no later than after 15 minutes. The website does not permanently store the plain-text IP address for this purpose and does not add it to the email.
The legal basis is Art. 6 Abs. 1 lit. b DSGVO where your enquiry concerns a contract or pre-contractual measures; otherwise, Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in handling your enquiry and protecting the contact channel. Ordinary enquiries are generally deleted no later than twelve months after completion. Statutory retention obligations and the necessary establishment, exercise or defence of legal claims remain unaffected.
The specific SMTP sending service has not yet been configured for production use. Before form transmission is activated, we will add here the provider, address, processing arrangement, processing locations and relevant retention periods. Until then, you can use your own email program via the email link provided.
Please do not submit information about health, sex life or other specially protected data within the meaning of Art. 9 DSGVO through the general contact form. Such information is not requested.
Newsletter and research participation
The visible newsletter pre-registration is currently not connected to a sending service and does not transmit any email address to the server. Surveys, interviews and research forms are likewise not yet active.
Before activation, these functions will be separately reviewed from a data protection perspective. In particular, providers, purposes, data categories, legal bases, consent and withdrawal procedures, recipients, processing locations, retention periods and safeguards for potential special categories of personal data will be added transparently.
Pre-registration for future surveys currently takes place voluntarily through your own email program to research@markusmmey.com. We process the sender address, subject line, message content and technical email metadata in order to provide information about future participation opportunities. Pre-registration is not participation in a study; please do not send health information, information about your sex life or other research data in this email. The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future by email. Pre-registration data are stored until withdrawal or until the announced information has been provided and are then deleted unless statutory obligations require otherwise.
External links and book platforms
Links to Amazon, academic sources, public authorities or advisory services establish a connection to the respective third-party provider only after you click them. In particular, your IP address, time, referrer and browser data may then be transmitted to that third party. From that point, its privacy policy applies.
Depending on the edition, Amazon links lead to a product page or to relevant search results. No affiliate tracking is integrated on this website.
Recipients and international transfers
Recipients of personal data may include Butterfly Effect Pte. Ltd., which is commissioned with hosting and content delivery, and its subprocessors used for the specific service. Following activation, the SMTP service yet to be named and the email system of the recipient mailbox will also be involved in contact enquiries.
Butterfly Effect is based in Singapore and names infrastructure subprocessors, including in the USA. Details of roles, security measures, subprocessors and transfer mechanisms can be found in the Manus DPA and the current subprocessor list.
Following your voluntary analytics consent, Butterfly Effect Pte. Ltd. or Manus Analytics, Plausible Insights OÜ and Amplitude, Inc., as well as their technical service providers, may also receive usage and connection data. Depending on the provider, processing may take place outside the EEA, in particular in Singapore or the United States. Manus refers to its DPA and EU Standard Contractual Clauses; the published privacy information of Plausible and Amplitude also applies. Without consent, the website blocks these optional connections.
Storage period
We store personal data only for as long as necessary for the relevant purpose or where legal obligations apply. The periods or criteria described in the preceding sections apply to the individual processing activities.
The consent choice is stored for no more than 180 days and is then requested again; you may delete it earlier through the privacy settings or browser functions. The currently available product-specific Manus documentation does not fully specify the retention periods of the optional analytics services. Until this is clarified, these services remain blocked without consent. Pseudonymised rate-limit values are deleted after no more than 15 minutes. Contact content is generally deleted no later than twelve months after the enquiry is completed, unless statutory retention obligations or legal claims require otherwise.
Your rights
Subject to the statutory requirements, you have the right to access (Art. 15 DSGVO), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent given at any time with effect for the future.
Where processing is based on Art. 6 Abs. 1 lit. f DSGVO, you may object on grounds relating to your particular situation. We will then no longer process the data concerned unless compelling legitimate grounds or legal claims preclude this.
To exercise your rights, simply send a message to datenschutz@meybrands.de.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The authority with particular responsibility for the controller is: Berlin Commissioner for Data Protection and Freedom of Information Alt-Moabit 59-61 10555 Berlin Telephone: +49 30 13889-0 Email: mailbox@datenschutz-berlin.de
Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. The transmission of the website and the contact form is encrypted via HTTPS. However, email communication is generally not end-to-end encrypted.
Minors
Because of its subject matter, this offering is not directed at persons under 18 years of age. We do not ask minors to submit personal data. If you believe that a minor has submitted data to us, please inform us so that we can review the matter and, where appropriate, delete the data.
Updates to this notice
We update this privacy notice if functions, service providers or the legal situation change. The version published on this website at any given time is authoritative. In the event of material changes, the privacy notice will be displayed again.